nerdexam
Cisco

400-007 · Question #381

Which two actions minimize the impact of the trusted NMS polling your network, such as high CPU utilization on network devices and network instability? (Choose two.)

The correct answer is A. Prevent polling of large tables through the use of SNMP OID restnctions D. Implement SNMP community restrictions that are associated with an ACL. Restricting which OIDs can be polled and limiting NMS access via ACLs are the two targeted controls that reduce device CPU load and prevent instability from SNMP polling.

Designing Management and Operations

Question

Which two actions minimize the impact of the trusted NMS polling your network, such as high CPU utilization on network devices and network instability? (Choose two.)

Options

  • APrevent polling of large tables through the use of SNMP OID restnctions
  • BDisable unused 01 Ds and MIBs on the NMS systems
  • CIncrease the SNMP process priority
  • DImplement SNMP community restrictions that are associated with an ACL
  • EUnload unused MIBs from the network devices

How the community answered

(27 responses)
  • A
    81% (22)
  • B
    11% (3)
  • C
    4% (1)
  • E
    4% (1)

Why each option

Restricting which OIDs can be polled and limiting NMS access via ACLs are the two targeted controls that reduce device CPU load and prevent instability from SNMP polling.

APrevent polling of large tables through the use of SNMP OID restnctionsCorrect

Polling large SNMP tables such as the routing table, interface table, or ARP table causes spikes in CPU utilization on the device. Restricting polling to specific OIDs prevents NMS systems from walking these expensive tables and directly limits the processing overhead imposed on network devices.

BDisable unused 01 Ds and MIBs on the NMS systems

Disabling unused OIDs and MIBs on the NMS reduces what the NMS can display, but it does not reduce the polling requests sent to or the processing burden placed on network devices.

CIncrease the SNMP process priority

Increasing the SNMP process priority would cause the SNMP process to preempt other critical processes, worsening CPU contention and potentially increasing instability rather than reducing it.

DImplement SNMP community restrictions that are associated with an ACLCorrect

Associating SNMP community strings with ACLs ensures that only the trusted NMS IP addresses can query devices, preventing unauthorized or excessive polling from other hosts that could contribute to instability and resource exhaustion.

EUnload unused MIBs from the network devices

Unloading unused MIBs from network devices does not reduce the overhead of polling MIBs that are still active and being queried by the NMS.

Concept tested: SNMP polling optimization and access control

Source: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/snmp/configuration/xe-16/snmp-xe-16-book/nm-snmp-cfg-snmp-support.html

Topics

#SNMP polling#OID restrictions#NMS#ACL

Community Discussion

No community discussion yet for this question.

Full 400-007 Practice