CompTIA Network+ (N10-009)Network OperationsMedium
A network administrator is deploying an SNMP-based monitoring solution across the enterprise. Management requires that all polling traffic between the network management station and managed devices be both encrypted and authenticated with per-user credentials. Which SNMP version should the administrator implement?
- ARMON
- BSNMPv3
- CSNMPv2c
- DSNMPv1
Show answer & explanationAnswer & explanation
Correct answer: B. SNMPv3
SNMPv3 is the only version that supports message authentication and encryption (privacy) along with per-user security models, unlike v1 and v2c which rely on plaintext community strings.
Why the other options are wrong
- A. RMON is a monitoring specification for traffic statistics, not an SNMP version providing security.
- C. SNMPv2c improved performance and bulk transfers but still uses plaintext community strings.
- D. SNMPv1 uses plaintext community strings with no encryption or per-user authentication.
SNMPv3 Security
SNMPv3 is the version of SNMP that introduced message integrity, authentication, and encryption using per-user credentials.
- v1/v2c use plaintext community strings
- v3 supports noAuthNoPriv, authNoPriv, and authPriv security levels
- v3 is required when encryption and authentication are mandated
Memory trick: '3 is the secure tree' — SNMPv3 brings security.