400-007 · Question #381
Which two actions minimize the impact of the trusted NMS polling your network, such as high CPU utilization on network devices and network instability? (Choose two.)
The correct answer is A. Prevent polling of large tables through the use of SNMP OID restnctions D. Implement SNMP community restrictions that are associated with an ACL. Restricting which OIDs can be polled and limiting NMS access via ACLs are the two targeted controls that reduce device CPU load and prevent instability from SNMP polling.
Question
Which two actions minimize the impact of the trusted NMS polling your network, such as high CPU utilization on network devices and network instability? (Choose two.)
Options
- APrevent polling of large tables through the use of SNMP OID restnctions
- BDisable unused 01 Ds and MIBs on the NMS systems
- CIncrease the SNMP process priority
- DImplement SNMP community restrictions that are associated with an ACL
- EUnload unused MIBs from the network devices
How the community answered
(27 responses)- A81% (22)
- B11% (3)
- C4% (1)
- E4% (1)
Why each option
Restricting which OIDs can be polled and limiting NMS access via ACLs are the two targeted controls that reduce device CPU load and prevent instability from SNMP polling.
Polling large SNMP tables such as the routing table, interface table, or ARP table causes spikes in CPU utilization on the device. Restricting polling to specific OIDs prevents NMS systems from walking these expensive tables and directly limits the processing overhead imposed on network devices.
Disabling unused OIDs and MIBs on the NMS reduces what the NMS can display, but it does not reduce the polling requests sent to or the processing burden placed on network devices.
Increasing the SNMP process priority would cause the SNMP process to preempt other critical processes, worsening CPU contention and potentially increasing instability rather than reducing it.
Associating SNMP community strings with ACLs ensures that only the trusted NMS IP addresses can query devices, preventing unauthorized or excessive polling from other hosts that could contribute to instability and resource exhaustion.
Unloading unused MIBs from network devices does not reduce the overhead of polling MIBs that are still active and being queried by the NMS.
Concept tested: SNMP polling optimization and access control
Source: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/snmp/configuration/xe-16/snmp-xe-16-book/nm-snmp-cfg-snmp-support.html
Topics
Community Discussion
No community discussion yet for this question.