ccna 200-301 questions pdf

ccna 200-301 questions pdf.When management information is extracted from the device and configuration changes are pushed to the device, SNMP traffic that keeps the management network can traverse a separate segment. Therefore, if using an OOB network, SNMP read and write group strings can be configured, but beware of the security risks associated with plaintext strings (which allow changes to be made to the device's configuration).2.3.4.6 SNMPv3SNMPv3 is a standards-based network management protocol. To address the vulnerabilities of earlier versions of SNMP, SNMPv3 authenticates and encrypts packets transmitted over the network to provide secure access to the device. SNMPv3 provides the following security features.Information integrity and authentication - guarantees that packets have not been modified in transit and are from a valid source.Encryption - Disrupts the contents of the packet to prevent unauthorized viewing. Access control - restricts certain operations on specific parts of the data. Because of the added security features. you should use SNMPv3 whenever possible. o SNMPv3 configuration is beyond the scope of this book.2.3.4.7 Enabling SNMP with CCPAfter starting SNMP, it is important to consider its security model and security level. A security model refers to the authentication policy established for a user or group of users. Currently, Cisco IOS supports three security models: SNMPvl, SNMPv2, and SNMPv3. security level refers to the level allowed within the security model. A security level is the type of security algorithm that is enforced on each SNMP packet.There are three security levels.noAuth-authenticates packets by string matching of username or group strings.