352-001 · Question #305
A customer wants to understand the benefits of a proposed network design that utilizes SNMPv3. Which two network threats is SNMPv3 effective against? (Choose two.)
The correct answer is A. modification of information threats B. masquerade threats. SNMPv3 uses HMAC-based authentication and optional AES/DES encryption to protect against modification and masquerade threats, but RFC 3414 explicitly excludes denial-of-service and traffic analysis from its threat model.
Question
A customer wants to understand the benefits of a proposed network design that utilizes SNMPv3. Which two network threats is SNMPv3 effective against? (Choose two.)
Options
- Amodification of information threats
- Bmasquerade threats
- Cdenial of service threats
- Dtraffic analysis threats
How the community answered
(52 responses)- A87% (45)
- C4% (2)
- D10% (5)
Why each option
SNMPv3 uses HMAC-based authentication and optional AES/DES encryption to protect against modification and masquerade threats, but RFC 3414 explicitly excludes denial-of-service and traffic analysis from its threat model.
SNMPv3's User-based Security Model (RFC 3414) uses HMAC-MD5 or HMAC-SHA to authenticate every message, allowing the receiver to detect any unauthorized alteration of SNMP data in transit and reject tampered messages.
SNMPv3 authentication verifies the sender's identity against a configured shared secret, preventing an attacker from impersonating a legitimate SNMP manager or agent - directly mitigating masquerade attacks.
RFC 3414 explicitly states that protection against denial-of-service attacks is outside the scope of SNMPv3's security model, as volumetric flood attacks operate below the layer where SNMP authentication applies.
RFC 3414 explicitly acknowledges that traffic analysis - inferring network behavior from message timing and frequency patterns - is not addressed by SNMPv3, even when encryption is enabled.
Concept tested: SNMPv3 security model threats addressed and excluded
Source: https://www.rfc-editor.org/rfc/rfc3414
Topics
Community Discussion
No community discussion yet for this question.