350-601 practice question 20 of 25

The Cisco UCS blade chassis must send SNMPv3 traps to a network monitoring system. The SNMP trap messages should be authenticated and have protection from closure. Which SNMP security privileged level should be configured?

Full set: 422 questions
Answer options
A: noPriv
B: auth
C: noAuth
D: priv Correct answer
Correct Answer:
D. priv
Explanation

The SNMPv3 priv (privacy) security level provides the highest level of security. It ensures that messages are authenticated using a hashing algorithm (like MD5 or SHA) and also encrypted using an encryption algorithm (like DES, 3DES, or AES). This meets the dual requirements of authentication and "protection from disclosure" (privacy/encryption). The keyword priv in the configuration corresponds to the authPriv security level.

Why Incorrect

A. noPriv is not a standalone security level; it is part of the authNoPriv level, which lacks the required encryption.
B. auth corresponds to the authNoPriv level, which provides authentication but does not provide privacy (encryption) to protect from disclosure.
C. noAuth corresponds to the noAuthNoPriv level, which provides neither authentication nor privacy, failing to meet both requirements.

References

1. Cisco UCS Manager Administration Guide, Release 4.1, "SNMP," Section: SNMP v3 Security Levels. "The security level determines whether an SNMP message is authenticated or encrypted... authPriv—Provides authentication and encryption."

2. Cisco Nexus 9000 Series NX-OS System Management Configuration Guide, Release 10.2(x), "Configuring SNMPv3," Section: Information About SNMPv3. "The authPriv security level offers both authentication and encryption."

3. IETF RFC 3414, "User-based Security Model (USM) for version 3 of the Simple Network Management Protocol (SNMPv3)," Section 1.4, Page 5. This RFC defines the security levels, including authPriv, which requires both authentication and privacy protocols to be applied to the message.

Scroll to Top