GCED: GIAC Certified Enterprise DefenderDemo

Question

Which of the following SNMPv3 security capabilities was unavailable in earlier protocol versions?

A Authentication based on RSA key pairs
B The ability to change default community strings
C AES encryption for SNMP network traffic
D The ability to send SNMP traffic over TCP ports

Explanation

SNMPv3 provides message privacy through encryption. Its User-based Security Model supports AES as a privacy protocol, encrypting the protected portion of SNMP messages; earlier community-string-based SNMP versions did not provide this confidentiality protection.

Learn more

RFC 3826: The Advanced Encryption Standard (AES) Cipher Algorithm in the SNMP User-based Security Model

GCED: GIAC Certified Enterprise DefenderDemo

AstroTutor

Notes

Readiness

QuestionQ15

Community Discussion