NSE4 · Question #78
Which is an advantage of using SNMP v3 instead of SNMP v1/v2 when querying a FortiGate unit?
The correct answer is C. Packet encryption. The main advantage of using SNMP v3 over SNMP v1 or v2c when querying a FortiGate unit is the significantly improved security provided by packet encryption, which protects the confidentiality of data.
Question
Which is an advantage of using SNMP v3 instead of SNMP v1/v2 when querying a FortiGate unit?
Options
- AMIB-based report uploads.
- BSNMP access limited by access lists.
- CPacket encryption.
- DRunning SNMP service on a non-standard port is possible.
How the community answered
(32 responses)- B3% (1)
- C88% (28)
- D9% (3)
Why each option
The main advantage of using SNMP v3 over SNMP v1 or v2c when querying a FortiGate unit is the significantly improved security provided by packet encryption, which protects the confidentiality of data.
MIB-based report uploads are a function of the reporting or management system, not a specific security or protocol advantage inherent to SNMPv3 over v1/v2c.
SNMP access can be limited by access lists on the FortiGate for all versions (v1, v2c, and v3), so this is not an exclusive advantage of SNMPv3.
SNMPv3 introduces robust security features including packet encryption, ensuring the confidentiality of data exchanged between the FortiGate and the SNMP manager, as well as authentication and integrity checks, which are absent in earlier versions.
The ability to run an SNMP service on a non-standard port is generally a configuration option for the SNMP agent itself and is not a unique security or feature advantage of SNMPv3.
Concept tested: SNMPv3 security features
Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/567634/snmp
Topics
Community Discussion
No community discussion yet for this question.