NE NE Network Management and Monitoring 1 — Questions and Answers
Question 1: Which protocol is most commonly used to monitor and manage network devices by querying MIB objects?
- Syslog
- SNMP (Simple Network Management Protocol) (Correct answer)
- NetFlow
- TACACS+
Correct answer: SNMP (Simple Network Management Protocol)
SNMP allows network management systems (NMS) to query and configure devices using MIB (Management Information Base) object identifiers.
Question 2: What is the difference between SNMPv2c and SNMPv3?
- SNMPv3 uses TCP while SNMPv2c uses UDP
- SNMPv3 adds authentication and encryption; SNMPv2c uses community strings with no encryption (Correct answer)
- SNMPv2c supports more MIB objects than SNMPv3
- SNMPv3 only supports read-only operations
Correct answer: SNMPv3 adds authentication and encryption; SNMPv2c uses community strings with no encryption
SNMPv3 introduces USM (User Security Model) with MD5/SHA authentication and DES/AES encryption, replacing the insecure plaintext community strings of SNMPv2c.
Question 3: What does syslog provide in a network management context?
- Real-time bandwidth utilization graphs
- Centralized logging of device events and alerts for auditing and troubleshooting (Correct answer)
- Automatic backup of device configurations
- Active polling of device performance metrics
Correct answer: Centralized logging of device events and alerts for auditing and troubleshooting
Syslog forwards timestamped event messages from network devices to a centralized server, enabling audit trails and rapid troubleshooting.
Question 4: Which syslog severity level indicates a condition that requires immediate action to prevent system failure?
- Level 4 - Warning
- Level 2 - Critical
- Level 1 - Alert (Correct answer)
- Level 0 - Emergency
Correct answer: Level 1 - Alert
Syslog Level 1 (Alert) means 'immediate action needed' — higher than Critical (2) but below Emergency (0) which indicates the system is unusable.
Question 5: What is NetFlow used for in network management?
- Configuring QoS policies across the network
- Collecting and analyzing IP flow data to understand traffic patterns and bandwidth usage (Correct answer)
- Synchronizing device configurations
- Encrypting management traffic between the NMS and devices
Correct answer: Collecting and analyzing IP flow data to understand traffic patterns and bandwidth usage
NetFlow exports metadata about IP flows (source/dest IP, ports, protocol, byte counts) from routers to a collector, enabling traffic analysis and capacity planning.
Question 6: Which protocol provides secure, encrypted access to the CLI of network devices for management purposes?
- Telnet
- SNMP
- SSH (Secure Shell) (Correct answer)
- HTTP
Correct answer: SSH (Secure Shell)
SSH encrypts the management session between the engineer's terminal and the network device, preventing credential and command interception unlike Telnet.
NE NE Network Management and Monitoring 1
Which protocol is most commonly used to monitor and manage network devices by querying MIB objects?