350-701 · Question #625
An administrator needs to be able to have a router securely communicate with a network management system. The connections must be authenticated but not encrypted. While meeting these requirements…
The correct answer is A. snmp-server group v3 auth. To enable secure router communication with a network management system with authentication but without encryption, the snmp-server group v3 auth command is the correct choice.
Question
An administrator needs to be able to have a router securely communicate with a network management system. The connections must be authenticated but not encrypted. While meeting these requirements, which command will create a group that allows a user on the network management system access to the router?
Options
- Asnmp-server group v3 auth
- Bsnmp-server group v3 priv write
- Csnmp-server group v2c
- Dsnmp-server group v2c write
How the community answered
(18 responses)- A78% (14)
- B6% (1)
- C11% (2)
- D6% (1)
Why each option
To enable secure router communication with a network management system with authentication but without encryption, the `snmp-server group v3 auth` command is the correct choice.
The `snmp-server group v3 auth` command creates an SNMPv3 group with `authNoPriv` security, meaning messages are authenticated using a hash algorithm but not encrypted, precisely meeting the requirement for authentication without encryption. This configuration provides integrity and authentication without confidentiality for SNMP traffic.
The `priv` keyword in `snmp-server group v3 priv write` would enable encryption (privacy) in addition to authentication, which contradicts the requirement that connections must "not be encrypted."
SNMPv2c does not provide robust user-based authentication; it relies on community strings for basic access control and does not offer the granular authentication mechanisms required for "securely communicate" in the context of authentication without encryption.
Similar to C, SNMPv2c does not offer the strong, user-based authentication or the `authNoPriv` security model specified in the question's requirements for secure communication without encryption.
Concept tested: SNMPv3 security levels
Source: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/snmp/configuration/xe-3s/snmp-xe-3s-book/snmp-snmpv3-cnfg.html
Topics
Community Discussion
No community discussion yet for this question.