SK0-003 · Question #242
An administrator has purchased monitoring software that can be configured to alert administrators when hardware and applications are having issues. All devices are configured with SNMP, but the…
The correct answer is A. Setting up a custom community name D. Setting SNMP to read only on the devices. To enhance the security of SNMP traffic for monitoring, an administrator should configure a custom community name and set SNMP on devices to read-only. These measures restrict access and prevent unauthorized write operations, improving security.
Question
An administrator has purchased monitoring software that can be configured to alert administrators when hardware and applications are having issues. All devices are configured with SNMP, but the administrator wants to further secure the SNMP traffic. Which of the following settings would BEST provide additional monitoring security? (Select TWO).
Options
- ASetting up a custom community name
- BConfiguring the network to block traffic on port 161
- CConfiguring the Windows Firewall to block port 161
- DSetting SNMP to read only on the devices
- EInstalling new MIBs
How the community answered
(54 responses)- A78% (42)
- B7% (4)
- C4% (2)
- E11% (6)
Why each option
To enhance the security of SNMP traffic for monitoring, an administrator should configure a custom community name and set SNMP on devices to read-only. These measures restrict access and prevent unauthorized write operations, improving security.
Setting up a custom community name acts as a password for SNMP agents and managers to communicate, preventing unauthorized entities from querying or sending commands to the device. This provides a basic layer of authentication for SNMPv1 and SNMPv2c.
Configuring the network to block traffic on port 161 would prevent all SNMP communication, including legitimate monitoring, effectively disabling the monitoring software.
Configuring the Windows Firewall to block port 161 would prevent all SNMP communication, including legitimate monitoring, on the specific Windows device, making it unmanageable via SNMP.
Setting SNMP to read-only on the devices ensures that the monitoring software can only retrieve information and cannot make configuration changes, preventing malicious actors from using SNMP to alter device behavior.
Installing new MIBs (Management Information Bases) extends the types of information that can be monitored via SNMP but does not directly enhance the security of the SNMP traffic itself.
Concept tested: Securing SNMP configuration
Source: https://learn.microsoft.com/en-us/windows-server/administration/windows-commands/snmptrap
Topics
Community Discussion
No community discussion yet for this question.