nerdexam
Cisco

352-001 · Question #576

A healthcare customer requested that health statistics from their infrastructure devices are to be sent over their service provider MPLS network. Which protocol must be enabled?

The correct answer is A. SNMPv3. Healthcare infrastructure statistics require a secure, authenticated, and encrypted transport to comply with regulations like HIPAA when traversing a shared MPLS network. SNMPv3 is the only listed option that provides both authentication and privacy (encryption).

Designing Management and Operations

Question

A healthcare customer requested that health statistics from their infrastructure devices are to be sent over their service provider MPLS network. Which protocol must be enabled?

Options

  • ASNMPv3
  • BSyslog TLS
  • Csyslog
  • DSNMPv2
  • ESSH

How the community answered

(27 responses)
  • A
    74% (20)
  • B
    15% (4)
  • C
    4% (1)
  • D
    4% (1)
  • E
    4% (1)

Why each option

Healthcare infrastructure statistics require a secure, authenticated, and encrypted transport to comply with regulations like HIPAA when traversing a shared MPLS network. SNMPv3 is the only listed option that provides both authentication and privacy (encryption).

ASNMPv3Correct

SNMPv3 introduces two critical security features absent from SNMPv2: authentication (using HMAC-MD5 or HMAC-SHA) and privacy/encryption (using AES or DES), preventing eavesdropping and tampering on health statistics traversing the shared service provider MPLS network. This meets the healthcare confidentiality requirement for sensitive infrastructure telemetry data.

BSyslog TLS

Syslog TLS encrypts log messages in transit but is not the standard protocol for sending device health statistics - it is a logging transport, not a monitoring/statistics protocol.

Csyslog

Plain syslog transmits log data in cleartext with no authentication or encryption, making it unsuitable for sensitive healthcare data on a shared network.

DSNMPv2

SNMPv2 uses community strings for authentication which are sent in plaintext, providing no confidentiality or strong authentication for sensitive health statistics.

ESSH

SSH is a remote access and command execution protocol, not a protocol for sending device health statistics or telemetry data.

Concept tested: SNMPv3 security features for sensitive data transport

Source: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/snmp/configuration/xe-16/snmp-xe-16-book/nm-snmp-cfg-snmp-support.html

Topics

#SNMPv3#network management#secure monitoring#MPLS

Community Discussion

No community discussion yet for this question.

Full 352-001 Practice