An administrator needs to configure the Cisco ASA via ASDM such that the network management system can actively monitor the host using SNMPv3. Which two tasks must be performed for this configuration?

Question

Options

• ASpecify the SNMP manager and UDP port.
• BSpecify an SNMP user group
• CSpecify a community string.
• DAdd an SNMP USM entry
• EAdd an SNMP host access entry

• A
  16% (4)
• B
  72% (18)
• C
  8% (2)
• E
  4% (1)

Explanation

SNMPv3 replaces the shared community string model with the User-based Security Model (USM), which requires two core objects: a user group (B) that defines the security level (auth/priv policy), and a USM user entry (D) that ties a specific username and credentials (authentication/encryption keys) to that group - together they allow the NMS to authenticate and poll the ASA securely.

Why the others are wrong:

• C (community string): Community strings belong to SNMPv1/v2c, not SNMPv3. Using one here would defeat the purpose of upgrading to v3's security model.
• A (SNMP manager and UDP port): This describes adding a host entry, which is option E - and even then, host entries are primarily used for trap destinations, not the core SNMPv3 polling configuration.
• E (SNMP host access entry): Host access entries control trap recipients and source filtering, but are not the two required steps to enable SNMPv3 polling by an NMS.

Memory tip: Think "SNMPv3 = Group + User, not C for Community." The letters G-U mirror the two answers (B = Group, D = USM). If you see "community string" in an SNMPv3 question, it's always a trap - community strings are v1/v2c only.

No community discussion yet for this question.