nerdexam
CompTIA

N10-009 · Question #245

An administrator is evaluating the use of authentication within SNMP. Which of the following is the most secure way of authenticating devices using only SNMP?

The correct answer is B. Use version 3 of SNMP and set up trap messages for critical events on the network. SNMPv3 is the most secure version of SNMP, offering robust authentication and encryption capabilities, making it the most suitable choice for authenticating devices.

Submitted by omar99· Mar 6, 2026Network Security

Question

An administrator is evaluating the use of authentication within SNMP. Which of the following is the most secure way of authenticating devices using only SNMP?

Options

  • AUse version 1 of SNMP and use a community string to serve as a PSK
  • BUse version 3 of SNMP and set up trap messages for critical events on the network
  • CUse version 2c of SNMP and use informs to validate device authentication
  • DUse version 2u of SNMP to authenticate devices for network monitoring

How the community answered

(22 responses)
  • A
    14% (3)
  • B
    77% (17)
  • C
    5% (1)
  • D
    5% (1)

Why each option

SNMPv3 is the most secure version of SNMP, offering robust authentication and encryption capabilities, making it the most suitable choice for authenticating devices.

AUse version 1 of SNMP and use a community string to serve as a PSK

SNMPv1 uses plain-text community strings for authentication, which are highly insecure and easily intercepted, making it unsuitable for secure environments.

BUse version 3 of SNMP and set up trap messages for critical events on the networkCorrect

SNMPv3 is the only version that provides strong security features, including authentication with message integrity (HMAC-MD5 or HMAC-SHA) to verify the sender and ensure data hasn't been tampered with. It also offers optional encryption for confidentiality, making it the most secure method for authenticating devices and protecting data in transit using SNMP.

CUse version 2c of SNMP and use informs to validate device authentication

SNMPv2c, like SNMPv1, relies on community strings for authentication, which offers no encryption and limited security, and informs are for reliable notifications, not enhanced authentication mechanisms.

DUse version 2u of SNMP to authenticate devices for network monitoring

SNMPv2u is not a standard or commonly recognized version of SNMP; the standard versions widely adopted are v1, v2c, and v3.

Concept tested: SNMPv3 security and authentication

Source: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/snmp/configuration/xe-3s/snmp-xe-3s-book/nm-snmp-snmpv3-auth.html

Community Discussion

No community discussion yet for this question.

Full N10-009 Practice