350-701 · Question #761
Refer to the exhibit. A network engineer must configure a Cisco router to send traps using SNMPv3. The engineer configures a remote user to receive traps and sets the security level to use…
The correct answer is C. snmp-server user TrapUser group2 remote 10.12.8.4 v3 auth md5 password1. To configure a Cisco router to send SNMPv3 traps with authentication but without privacy, an SNMPv3 user must be defined using the snmp-server user command with auth but no priv keyword.
Question
Refer to the exhibit. A network engineer must configure a Cisco router to send traps using SNMPv3. The engineer configures a remote user to receive traps and sets the security level to use authentication without privacy. Which command completes the configuration?
Options
- Asnmp-server host 10.12.8.4 informs version 3 noauthno remoteuser config
- Bsnmp-server host 10.12.8.4 informs version 3 noauthnoPriv remoteuser config
- Csnmp-server user TrapUser group2 remote 10.12.8.4 v3 auth md5 password1
- Dsnmp-server user TrapUser group2 remote 10.12.8.4 v3 auth md5 password1 priv access des56
How the community answered
(28 responses)- A11% (3)
- B4% (1)
- C79% (22)
- D7% (2)
Why each option
To configure a Cisco router to send SNMPv3 traps with authentication but without privacy, an SNMPv3 user must be defined using the `snmp-server user` command with `auth` but no `priv` keyword.
The `snmp-server host` command is used to specify the trap receiver and its version/security level, not to define the user itself; also, `noauthno` is not a valid security level option for a user definition in this context.
Similar to A, `snmp-server host` is for the trap receiver, not user definition, and `noauthnoPriv` is not a standard keyword for defining a user with authentication but no privacy.
The `snmp-server user` command is used to define an SNMPv3 user. The `v3 auth md5 password1` portion correctly specifies authentication using MD5 with the provided password, and the absence of a `priv` keyword correctly implies no privacy, matching the requirement for authentication without privacy.
This command includes `priv access des56`, which configures privacy, directly contradicting the requirement to use authentication *without* privacy.
Concept tested: SNMPv3 user configuration (authN no priv)
Source: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/snmp/command/snmp-cr-a1.html#wp4102008823
Topics
Community Discussion
No community discussion yet for this question.