352-001 · Question #576
A healthcare customer requested that health statistics from their infrastructure devices are to be sent over their service provider MPLS network. Which protocol must be enabled?
The correct answer is A. SNMPv3. Healthcare infrastructure statistics require a secure, authenticated, and encrypted transport to comply with regulations like HIPAA when traversing a shared MPLS network. SNMPv3 is the only listed option that provides both authentication and privacy (encryption).
Question
A healthcare customer requested that health statistics from their infrastructure devices are to be sent over their service provider MPLS network. Which protocol must be enabled?
Options
- ASNMPv3
- BSyslog TLS
- Csyslog
- DSNMPv2
- ESSH
How the community answered
(27 responses)- A74% (20)
- B15% (4)
- C4% (1)
- D4% (1)
- E4% (1)
Why each option
Healthcare infrastructure statistics require a secure, authenticated, and encrypted transport to comply with regulations like HIPAA when traversing a shared MPLS network. SNMPv3 is the only listed option that provides both authentication and privacy (encryption).
SNMPv3 introduces two critical security features absent from SNMPv2: authentication (using HMAC-MD5 or HMAC-SHA) and privacy/encryption (using AES or DES), preventing eavesdropping and tampering on health statistics traversing the shared service provider MPLS network. This meets the healthcare confidentiality requirement for sensitive infrastructure telemetry data.
Syslog TLS encrypts log messages in transit but is not the standard protocol for sending device health statistics - it is a logging transport, not a monitoring/statistics protocol.
Plain syslog transmits log data in cleartext with no authentication or encryption, making it unsuitable for sensitive healthcare data on a shared network.
SNMPv2 uses community strings for authentication which are sent in plaintext, providing no confidentiality or strong authentication for sensitive health statistics.
SSH is a remote access and command execution protocol, not a protocol for sending device health statistics or telemetry data.
Concept tested: SNMPv3 security features for sensitive data transport
Source: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/snmp/configuration/xe-16/snmp-xe-16-book/nm-snmp-cfg-snmp-support.html
Topics
Community Discussion
No community discussion yet for this question.