nerdexam
Cisco

352-001 · Question #305

A customer wants to understand the benefits of a proposed network design that utilizes SNMPv3. Which two network threats is SNMPv3 effective against? (Choose two.)

The correct answer is A. modification of information threats B. masquerade threats. SNMPv3 uses HMAC-based authentication and optional AES/DES encryption to protect against modification and masquerade threats, but RFC 3414 explicitly excludes denial-of-service and traffic analysis from its threat model.

Designing Security

Question

A customer wants to understand the benefits of a proposed network design that utilizes SNMPv3. Which two network threats is SNMPv3 effective against? (Choose two.)

Options

  • Amodification of information threats
  • Bmasquerade threats
  • Cdenial of service threats
  • Dtraffic analysis threats

How the community answered

(52 responses)
  • A
    87% (45)
  • C
    4% (2)
  • D
    10% (5)

Why each option

SNMPv3 uses HMAC-based authentication and optional AES/DES encryption to protect against modification and masquerade threats, but RFC 3414 explicitly excludes denial-of-service and traffic analysis from its threat model.

Amodification of information threatsCorrect

SNMPv3's User-based Security Model (RFC 3414) uses HMAC-MD5 or HMAC-SHA to authenticate every message, allowing the receiver to detect any unauthorized alteration of SNMP data in transit and reject tampered messages.

Bmasquerade threatsCorrect

SNMPv3 authentication verifies the sender's identity against a configured shared secret, preventing an attacker from impersonating a legitimate SNMP manager or agent - directly mitigating masquerade attacks.

Cdenial of service threats

RFC 3414 explicitly states that protection against denial-of-service attacks is outside the scope of SNMPv3's security model, as volumetric flood attacks operate below the layer where SNMP authentication applies.

Dtraffic analysis threats

RFC 3414 explicitly acknowledges that traffic analysis - inferring network behavior from message timing and frequency patterns - is not addressed by SNMPv3, even when encryption is enabled.

Concept tested: SNMPv3 security model threats addressed and excluded

Source: https://www.rfc-editor.org/rfc/rfc3414

Topics

#SNMPv3#modification threat#masquerade threat#network management security

Community Discussion

No community discussion yet for this question.

Full 352-001 Practice