H12-811_V1-0 practice question 35 of 35

Which SNMP version focuses on two main aspects, namely security and administration? The security aspect is addressed by offering both strong authentication and data encryption for privacy. The administration aspect is focused on two parts, namely notification originators and proxy forwarders.

Full set: 304 questions
Answer options
A: SNMPv2
B: SNMPv2c
C: SNMPv3 Correct answer
D: SNMPv1
Correct Answer:
C. SNMPv3
Explanation

SNMPv3 is the version specifically designed to address the security deficiencies of earlier versions. It introduces a robust User-based Security Model (USM) that provides three key security services: authentication (verifying the message source), encryption (ensuring data privacy), and message integrity (preventing tampering). Its modular framework also enhances administrative capabilities, such as the View-based Access Control Model (VACM) for granular access control. The description in the question perfectly aligns with the primary features and design goals of SNMPv3.

Why Incorrect

A. SNMPv2 is an obsolete version and was largely superseded by SNMPv2c; it lacked widespread adoption and robust security.
B. SNMPv2c uses a simple community-string-based security model, which transmits passwords in cleartext and offers no encryption.
D. SNMPv1 is the original version, offering only basic community-string authentication with no encryption, making it highly insecure.

References

1. IETF RFC 3414, "User-based Security Model (USM) for version 3 of the Simple Network Management Protocol (SNMPv3)," Abstract. This document specifies the security model for SNMPv3, detailing its provisions for data integrity, data origin authentication, and data confidentiality.

2. Huawei, "VRP V800R012C00 Configuration Guide - Network Management and Monitoring," Section: SNMP Configuration. The guide explicitly states, "SNMPv3 provides encryption and authentication functions to ensure the security of communication between an NMS and agents."

3. Kurose, J. F., & Ross, K. W. (2017). Computer Networking: A Top-Down Approach (7th ed.). Pearson. Chapter 9, "Network Management," details the evolution of SNMP, highlighting the security enhancements of SNMPv3 as its defining feature.

Scroll to Top