11.2.6 Network Management and SNMP

Which of the following is true about a community string? - Devices with different community names are able to send SNMP messages to each other. - A string is a password. - A community string identifies devices under the same administrative control. - A string cannot limit access.

A community string identifies devices under the same administrative control. Agents and the manager are configured to communicate with each other using the community strings. A community string identifies a group of devices under the same administrative control. The community string is like a password because it limits access to only authorized processes or queries. However, it's not a password; it's simply a value configured on each device. Devices with different community names are unable to send SNMP messages to each other.

Which of the following improvements to SNMP are included in version 3? (Select two.) - Ports 161 and 162 usage - Agent and manager authentication - SNMP data transfer through SFTP - Community name hashing - SNMP message encryption

Agent and manager authentication SNMP message encryption SNMPv3 adds authentication for agents and managers, encryption, and message integrity to ensure that data is not altered in transit. SNMPv3 improvements do not include the use of SFTP for transferring SNMP data or community name hashing. SNMP does use UDP ports 161 and 162, but this was not one of the version 3 improvements.

What does SNMP use to identify a group of devices under the same administrative control? - OID - Passwords - Community strings - Informs

Community strings Agents and the manager are configured to communicate with each other using the community strings. A community string identifies a group of devices under the same administrative control. The community string is like a password because it limits access to only authorized processes or queries. However, it's not a password; it's simply a value configured on each device. Devices with different community names are unable to send SNMP messages to each other. Informs and OIDs (Object Identifiers) are SNMP components. However, they are not used to identify a group of devices under the same administrative control.

You have been using SNMP on your network for monitoring and management, but you're concerned about the security of this configuration. What should you do to increase security in this situation? - Implement version 3 of SNMP - Use SSH instead of SNMP - Implement a RADIUS solution - Combine SNMP with SSL

Implement version 3 of SNMP Simple Network Management Protocol (SNMP) is a protocol designed for managing complex networks. SNMP lets network hosts exchange configuration and status information. The original version of SNMP has several vulnerabilities. For added security, implement version 3. SSH (Secure Shell) allows secure interactive control of remote systems but does not provide the same features as SNMP. RADIUS controls remote access authentication, authorization, and accounting from a centralized server.

Which of the following does an agent send to the manager to confirm the receipt of a transmission? - Alert - Walk - GET - Inform

Inform Informs are sent to the manager to confirm the receipt of a transmission. Alerts, walk, and GET are all SNMP components, but these are not sent to the manager to confirm the receipt of a transmission.

What is the name of the computer that queries agents and gathers responses by sending messages? - MIB - Agent - Manager - Trap

Manager The manager queries agents and gathers responses by sending messages. A trap, MIB (Management Information Base), and agent are all SNMP components. However, they do not query agents.

Because of an unexplained slowdown on your network, you decide to install monitoring software on several key network hosts to locate the problem. You will then collect and analyze the data from a central network host. Which protocol will the software use to detect the problem? - TCP/IP - UDP - SNMP - IPX

SNMP SNMP (Simple Network Management Protocol) is used to track network statistics. SNMP operates over UDP and IP. However, by themselves, these protocols do not provide network monitoring support. IPX (Internetwork Package Exchange) is a legacy protocol.

Which protocol uses traps to send notifications from network devices? - SNMP - SMTP - ICMP - IGMP

SNMP Simple Network Management Protocol (SNMP) lets network hosts exchange configuration and status information. This information can be gathered by management software and used to monitor and manage the network. A trap is an event configured on an agent. When the event occurs, the agent logs details regarding the event. SMTP (Simple Mail Transfer Protocol) is used for sending email. ICMP (Internet Control Message Protocol) is an echo/response protocol that's used for exchanging simple requests between devices. ICMP does not use traps. IGMP (Internet Group Management Protocol) is used to send packets to hosts that are members of a group.

When an event occurs, the agent logs details regarding the event. What is this event called? - GET - Trap - MIB - OID

Trap A trap is an event configured on an agent. When the event occurs, the agent logs details regarding the event. GET, OIDs, and MIB are SNMP components, but they are not events.

Which SNMP component uses GETNEXT messages to navigate the MIB structure? - Trap - Inform - GET - Walk

Walk A walk uses GETNEXT messages to navigate the MIB structure. GET, traps, and informs are all SNMP components, but they do not use GETNEXT messages to navigate the MIB structure.