SSCP Systems Security Certified PractitionerNetwork and Communications SecurityMedium
A security auditor discovers that several network devices, including switches and routers, are configured with default community strings for SNMPv1. The auditor recommends upgrading to a more secure version. Which SNMP version provides encryption for messages and stronger authentication mechanisms?
- ASNMPv4
- BSNMPv2c
- CSNMPv3
- DSNMPv1
Show answer & explanationAnswer & explanation
Correct answer: C. SNMPv3
SNMPv3 is the only version that provides strong security features, including encryption for messages (confidentiality) and user-based authentication (integrity and authentication), addressing the weaknesses of SNMPv1 and SNMPv2c.
Why the other options are wrong
- A. SNMPv4 is not a recognized standard for Simple Network Management Protocol.
- B. SNMPv2c (Community-Based Security Model) improves upon SNMPv1's performance but still uses cleartext community strings and lacks encryption.
- D. SNMPv1 uses cleartext community strings for authentication, offering no encryption or strong security.
SNMPv3
The third and most secure version of the Simple Network Management Protocol, providing authentication, integrity, and encryption.
- Uses User-Based Security Model (USM).
- Supports MD5/SHA for authentication and DES/AES for encryption.
- Addresses critical security flaws present in SNMPv1 and SNMPv2c.
Memory trick: SNMP Versions: 1 is None, 2c is Clear, 3 is Covered.