ICND1 Infrastructure Maintenance 5

Question 1

Which SNMP version introduced strong authentication and encryption for secure network management?

Accepted Answer

SNMPv3

Answer

SNMPv3 added user-based security with MD5/SHA authentication and DES/AES encryption, unlike the community-string-based v1 and v2c.

Question 2

A Cisco device sends an unsolicited SNMP message to the NMS when an interface goes down. What is this message called?

Accepted Answer

SNMP Trap

Answer

An SNMP Trap is an unsolicited notification sent from the agent to the NMS when a significant event occurs.

Question 3

What is the purpose of the Management Information Base (MIB) in SNMP?

Accepted Answer

Defines the hierarchical database of managed objects on a device

Answer

The MIB is a structured database that defines all the variables (objects) that can be monitored or configured via SNMP.

Question 4

Which protocol and port does SNMP use for NMS-to-agent queries?

Accepted Answer

UDP port 161

Answer

SNMP uses UDP port 161 for NMS-to-agent queries (Get/Set), while traps and informs use UDP port 162.

Question 5

An administrator uses 'snmp-server community PUBLIC ro' in global config. What does 'ro' specify?

Accepted Answer

Read-only access — the NMS can only retrieve data, not modify it

Answer

The 'ro' keyword grants read-only community access, allowing the NMS to perform Get operations but not Set operations.

(ICND1) Interconnecting Cisco Networking Devices Part 1 Practice Test