300-415 Question #60: Real Exam Question with Answer & Explanation

The correct answer is D: MD5. SNMPv3 supports MD5 and SHA variants as authentication protocols, while AES variants are privacy (encryption) protocols and are not used for authentication.

WAN Edge Router Deployment

Question

Which two algorithms authenticate a user when configuring SNMPv3 monitoring on a WAN Edge router? (Choose two.)

Options

AAES-256
BSHA-1
CAES-128
DMD5
ESHA-2

Explanation

SNMPv3 supports MD5 and SHA variants as authentication protocols, while AES variants are privacy (encryption) protocols and are not used for authentication.

Common mistakes.

A. AES-256 is a privacy (encryption) algorithm in SNMPv3 used to encrypt message payloads, not to authenticate the source of messages.
B. SHA-1 is an older SHA variant; the current supported and correct authentication option is SHA-2, making SHA-1 the incorrect choice here.
C. AES-128 is a privacy (encryption) algorithm in SNMPv3, not an authentication algorithm.

Concept tested. SNMPv3 authentication algorithm options

Reference. https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/monitor-troubleshoot/monitoring-xe-19-book/mon-dashboard.html

Topics

#SNMPv3 authentication#WAN Edge monitoring#Security algorithms#Network management

Community Discussion

No community discussion yet for this question.

Full 300-415 Practice