- Home
- Networking
- CCNA Routing and Switching 200-105
131.
A Network Management Station (NMS) is using SNMP to manage some Cisco routers and switches with SNMPv2c. Which of the following answers most accurately
describes how the SNMP agent on a router authenticates any SNMP Get requests
received from the NMS?
- A.Using a username and hashed version of a password
- B.Using either the read-write or read-only community string
- C.Using only the read-write community string
- D.Using only the read-only community string
- Answer & Explanation
- Report
Answer : [B]
Explanation :
Explanation :
| SNMPv1 and SNMPv2c use community strings to authenticate Get and Set messages from an NMS. The agent defines a read-only community and can define a readwrite community as well. Get requests, which read information, will be accepted if the NMS sends either the read-only or the read-write community with those requests. |
132.
A router has been configured with the global command snmp-server community
textvalue1 RO textvalue2. Which of the following statements are true about the
meaning of this command? (Choose two answers.)
- A.The router’s read-only community is textvalue1.
- B.The router’s read-only community is textvalue2.
- C.The router filters incoming SNMP messages using IPv4 ACL textvalue2.
- D.The router filters outgoing SNMP messages using IPv4 ACL textvalue2.
- Answer & Explanation
- Report
Answer : [A and C]
Explanation :
Explanation :
| The first parameter after the community keyword defines the community value. At the end of the command, if a text value is listed but without an ipv6 keyword, the text value is the name of an IPv4 ACL. The ACL (textvalue2 in this case) filters incoming SNMP messages received by the SNMP agent on the device. |
133.
A router has been configured with the following command: snmp-server group one
v3 auth write v1default. Which of the following answers lists a command that would
correctly define a user to associate with this SNMPv3 group to correctly define security parameters to work with an SNMP manager?
- A.snmp-server user fred1 one auth md5 pass1 priv des keyvalue1
- B.snmp-server user fred2
- C.snmp-server user fred3 one auth 3des pass1
- D.snmp-server user fred4 one auth sha pass1
- Answer & Explanation
- Report
Answer : [D]
Explanation :
Explanation :
|
To work correctly with an SNMP manager, the snmp-server user command
must configure its parameters based on the security level in the referenced group as
defined in the referenced snmp-server group command. In this case, the referenced
snmp-server group command lists a security level of auth, so the snmp-server user
command needs the auth keyword and associated parameters, but not the priv keyword and its associated parameters. Two answers are incorrect because they either do not include the auth keyword and associated parameters, or because it also includes the priv keyword. Of the two answers that include only the auth option, one is incorrect by referencing 3des as an authentication hash algorithm; this keyword refers to an encryption type that could follow the priv keyword, but it is invalid as an authentication option. The correct answer correctly lists sha as a valid authentication hash option, along with the userdefined password (pass1). |
134.
Which of the following commands primarily lists counters and status information,
instead of configuration settings?
- A.show snmp
- B.show snmp community
- C.show snmp group
- D.show snmp user
- Answer & Explanation
- Report
Answer : [A]
Explanation :
Explanation :
| Of these, only show snmp lists status and counter variables about the operation of the SNMP agent. The other commands list configuration details. |
135.
Which of the following statements is true about ICMP Echo-based IP SLA?
- A.It sends messages to mimic Voice over IP (VoIP) traffic to measure jitter.
- B.It requires the use of one router as the source and another as the responder.
- C.It can collect and aggregate historical statistics.
- D.It sends ICMP Echo messages to measure jitter.
- Answer & Explanation
- Report
Answer : [C]
Explanation :
Explanation :
|
IP Service Level Agreement (IP SLA) can generate a variety of different types of
probes, including some that use ICMP Echo messages, and some that mimic voice
traffic. However, the question asks about "ICMP Echo-based" IP SLA, referring to the
specific IP SLA probe that sends ICMP Echo Request messages. ICMP Echo probes with IP SLA do not require a router to be configured as an IP SLA responder, although many other types of IP SLA probes do require a responder. The Echo probes send a normal ICMP Echo Request, so the probe can be sent to any IP address, relying on that host to send back a normal ICMP Echo Reply. IP SLA on the source router will gather basic statistics. With the ICMP Echo probe, the probe does not measure jitter (ruling out another incorrect answer), but it does measure round-trip time (RTT). These statistics can be gathered into a history report, which can be useful when troubleshooting problems. |
|
|
||||||||||||||||||||||||||||
