200-301 Question #704: Real Exam Question with Answer & Explanation

Question

Which statement about SNMPv2 is true?

Options

• AIts privacy algorithms use MD5 encryption by default.
• Bit requires passwords to be encrypyed
• CIts authetication and privacy algorithms are enable without default values.
• DIt requires passwords at least eight characters en length.

Explanation

SNMPv2c offers authentication and privacy capabilities, but unlike SNMPv3, these are not enabled by default and do not have default values for secure operation.

Common mistakes.

• A. SNMPv2c does not natively include privacy algorithms or encryption like MD5; these are features of SNMPv3.
• B. SNMPv2c does not encrypt passwords; community strings (which act as passwords) are sent in clear text over the network.
• D. While a good security practice, SNMPv2c itself does not enforce a minimum password length requirement for community strings.

Concept tested. SNMPv2 security characteristics

Reference. https://www.cisco.com/c/en/us/td/docs/ios/12_0s/feature/guide/snmpv3.html

No community discussion yet for this question.