350-501 Question #380: Real Exam Question with Answer & Explanation

Question

Refer to the exhibit. A network engineer must implement SNMPv3 on a Cisco IOS XR router running BGP. The engineer configures SNMPv3 to use SHA for authentication and AES for privacy on the routers, which are in a different data center in the same exchange as other routers. The engineer must also verify the associated MIB view family name, storage type, and status. Which set of actions meets these requirements?

Options

• AAdd configuration snmp-server user UserJustMe GrpMonitoring v3 auth sha AuthPass1 priv 3des
• BAdd configuration snmp-server user AuthUser group2 remote 10.1.1.1 v3 auth sha and use show
• CAdd configuration snmp-server user AuthUser group2 remote 10.1.1.1 v3 auth sha and use show
• DAdd configuration snmp-server user UserJustMe GrpMonitoring v3 auth sha AuthPass1 priv aes

Explanation

To implement SNMPv3 on a Cisco IOS XR router using SHA for authentication and AES for privacy, the engineer must configure the SNMP user with the specified authentication and privacy algorithms.

Common mistakes.

• A. This option is incorrect because it specifies priv 3des for privacy instead of the required aes algorithm.
• B. This option is incorrect as it only configures SHA authentication and omits the privacy algorithm (AES) and its password, which are explicit requirements.
• C. This option is incorrect as it only configures SHA authentication and omits the privacy algorithm (AES) and its password, which are explicit requirements.

Concept tested. SNMPv3 configuration authentication and privacy

Reference. https://www.cisco.com/c/en/us/td/docs/iosxr/ncs5000/snmp/66x/b-snmp-cg-ncs5k-66x/b-snmp-cg-ncs5k-66x_chapter_01.html

No community discussion yet for this question.