300-415 · Question #60
Which two algorithms authenticate a user when configuring SNMPv3 monitoring on a WAN Edge router? (Choose two.)
The correct answer is D. MD5 E. SHA-2. SNMPv3 supports MD5 and SHA variants as authentication protocols, while AES variants are privacy (encryption) protocols and are not used for authentication.
Question
Exhibit
Options
- AAES-256
- BSHA-1
- CAES-128
- DMD5
- ESHA-2
How the community answered
(25 responses)- A4% (1)
- C4% (1)
- D92% (23)
Why each option
SNMPv3 supports MD5 and SHA variants as authentication protocols, while AES variants are privacy (encryption) protocols and are not used for authentication.
AES-256 is a privacy (encryption) algorithm in SNMPv3 used to encrypt message payloads, not to authenticate the source of messages.
SHA-1 is an older SHA variant; the current supported and correct authentication option is SHA-2, making SHA-1 the incorrect choice here.
AES-128 is a privacy (encryption) algorithm in SNMPv3, not an authentication algorithm.
MD5 (HMAC-MD5-96) is one of the two authentication algorithms supported by SNMPv3, used to verify the integrity and source of SNMP messages.
SHA-2 (e.g., HMAC-SHA2-256) is a supported SNMPv3 authentication algorithm, providing stronger message authentication than the older MD5 option.
Concept tested: SNMPv3 authentication algorithm options
Source: https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/monitor-troubleshoot/monitoring-xe-19-book/mon-dashboard.html
Topics
Community Discussion
No community discussion yet for this question.