A security engineer is attempting to inventory all network devices Most unknown devices are not responsive to SNMP queries. Which of the following would be the MOST secure configuration?

The correct answer is D. Configure SNMPv3 server settings to match client settings. The issue is that devices are not responding to SNMP queries, which often indicates a configuration mismatch. SNMPv3 is the most secure version of SNMP and supports authentication (MD5/SHA) and encryption (AES/DES). If the SNMPv3 server (manager) settings - such as…

Enterprise Security Architecture

Question

Options

ASwitch to SNMPv1 device inventory credentials
BEnable SSH for all switches and routers
CSet SFTP to enabled on all network devices
DConfigure SNMPv3 server settings to match client settings

How the community answered

(30 responses)

A
3% (1)
C
3% (1)
D
93% (28)

Explanation

The issue is that devices are not responding to SNMP queries, which often indicates a configuration mismatch. SNMPv3 is the most secure version of SNMP and supports authentication (MD5/SHA) and encryption (AES/DES). If the SNMPv3 server (manager) settings - such as authentication protocol, privacy protocol, usernames, and passphrases - do not match what is configured on the client devices (agents), queries will be silently dropped. Configuring both sides to match resolves the non-responsiveness while maintaining the strongest available SNMP security. Option A is wrong because SNMPv1 uses cleartext community strings with no authentication or encryption, making it the least secure option. Option B enables SSH for device management but does not fix SNMP inventory collection. Option C configures SFTP for file transfer, which is unrelated to SNMP-based device inventory.

Topics

#SNMP#SNMPv3#network device management#secure configuration

Community Discussion

No community discussion yet for this question.

Full CAS-003 Practice