Bill is a network administrator. He wants to eliminate unencrypted traffic inside his company's network. He decides to setup a SPAN port and capture all traffic to the datacenter. He immediately discovers unencrypted traffic in port UDP 161. what protocol is this port using and how can he secure that traffic?

Question

Accepted Answer

B. SNMP and he should change it to SNMP V3 UDP port 161 is the IANA-assigned port for SNMP. SNMPv1 and SNMPv2c use plaintext community strings with no traffic encryption, making all management data visible on a packet capture. SNMPv3 introduces the User-based Security Model (USM), which supports SHA/MD5 authentication and AES/DES encryption to eliminate cleartext exposure.

Answer

A. it is not necessary to perform any actions, as SNMP is not carrying important information. SNMP transmits sensitive data including community strings, device configurations, and interface statistics, making unencrypted SNMP a significant security risk that must be addressed.

Answer

C. RPC and the best practice is to disable RPC completely UDP 161 is not assigned to RPC and is exclusively used by SNMP per IANA; disabling RPC would have no effect on SNMP traffic.

Answer

D. SNMP and he should change it to SNMP v2, which is encrypted SNMPv2c still transmits community strings in cleartext and provides no encryption, so upgrading to v2c does not resolve the unencrypted traffic problem.

Bill is a network administrator. He wants to eliminate unencrypted traffic inside his company's network. He decides to setup a SPAN port and capture all traffic to the datacenter. He immediately disco

Question

Options

How the community answered

Why each option

Topics

Community Discussion