Which two statements are correct about SNMPv3? (Choose two.)

SNMPv3 adds User-based Security Model (USM) providing message authentication (MD5/SHA) and privacy (DES/AES encryption). Authentication protects against tampering; encryption prevents eavesdropping. User credentials (passwords/keys) are hashed or encrypted within the SNMPv3 message exchange, unlike the clear-text community strings of SNMPv1/v2c. Hence statements B and D are correct.

A. Plain-text community strings are used only in SNMPv1/v2c, not v3.

C. Additional security parameters (engine IDs, auth/priv keys) make SNMPv3 configuration more, not less, complex than v2c.

1. Junos OS SNMP MIBs and Agent Configuration Guide, “SNMPv3 Overview,” Section 2.1, p. 23–25 (Juniper Networks, 2023-04-20).

2. RFC 3414, “User-based Security Model for SNMPv3,” §1–3 (IETF, 2002).

3. Stanford EE284 Lecture Notes, “Network Management & SNMP,” slide 32–35 (auth/priv discussion).