N10-009 · Question #245
An administrator is evaluating the use of authentication within SNMP. Which of the following is the most secure way of authenticating devices using only SNMP?
The correct answer is B. Use version 3 of SNMP and set up trap messages for critical events on the network. SNMPv3 is the most secure version of SNMP, offering robust authentication and encryption capabilities, making it the most suitable choice for authenticating devices.
Question
An administrator is evaluating the use of authentication within SNMP. Which of the following is the most secure way of authenticating devices using only SNMP?
Options
- AUse version 1 of SNMP and use a community string to serve as a PSK
- BUse version 3 of SNMP and set up trap messages for critical events on the network
- CUse version 2c of SNMP and use informs to validate device authentication
- DUse version 2u of SNMP to authenticate devices for network monitoring
How the community answered
(22 responses)- A14% (3)
- B77% (17)
- C5% (1)
- D5% (1)
Why each option
SNMPv3 is the most secure version of SNMP, offering robust authentication and encryption capabilities, making it the most suitable choice for authenticating devices.
SNMPv1 uses plain-text community strings for authentication, which are highly insecure and easily intercepted, making it unsuitable for secure environments.
SNMPv3 is the only version that provides strong security features, including authentication with message integrity (HMAC-MD5 or HMAC-SHA) to verify the sender and ensure data hasn't been tampered with. It also offers optional encryption for confidentiality, making it the most secure method for authenticating devices and protecting data in transit using SNMP.
SNMPv2c, like SNMPv1, relies on community strings for authentication, which offers no encryption and limited security, and informs are for reliable notifications, not enhanced authentication mechanisms.
SNMPv2u is not a standard or commonly recognized version of SNMP; the standard versions widely adopted are v1, v2c, and v3.
Concept tested: SNMPv3 security and authentication
Source: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/snmp/configuration/xe-3s/snmp-xe-3s-book/nm-snmp-snmpv3-auth.html
Community Discussion
No community discussion yet for this question.