200-301 · Question #704
Which statement about SNMPv2 is true?
The correct answer is C. Its authetication and privacy algorithms are enable without default values.. SNMPv2c offers authentication and privacy capabilities, but unlike SNMPv3, these are not enabled by default and do not have default values for secure operation.
Question
Options
- AIts privacy algorithms use MD5 encryption by default.
- Bit requires passwords to be encrypyed
- CIts authetication and privacy algorithms are enable without default values.
- DIt requires passwords at least eight characters en length.
How the community answered
(32 responses)- A6% (2)
- B3% (1)
- C91% (29)
Why each option
SNMPv2c offers authentication and privacy capabilities, but unlike SNMPv3, these are not enabled by default and do not have default values for secure operation.
SNMPv2c does not natively include privacy algorithms or encryption like MD5; these are features of SNMPv3.
SNMPv2c does not encrypt passwords; community strings (which act as passwords) are sent in clear text over the network.
SNMPv2c, while an improvement over SNMPv1, does not inherently enable strong authentication or privacy by default; it typically relies on community strings which are sent in clear text. More robust security features like authentication and privacy algorithms with specific default values are characteristic of SNMPv3.
While a good security practice, SNMPv2c itself does not enforce a minimum password length requirement for community strings.
Concept tested: SNMPv2 security characteristics
Source: https://www.cisco.com/c/en/us/td/docs/ios/12_0s/feature/guide/snmpv3.html
Topics
Community Discussion
No community discussion yet for this question.