Apply the minimal, strongest SNMPv3 configuration to allow only NMS 10.15.2.19 encrypted, password-protected read access — which configuration is correct?
Choose an answer
Tap an option to check your answer.
Correct answer: ip access-list standard nms permit 10.15.2.19 0.0.0.0 snmp-server view ro iso included snmp-server view ro ifEntry included snmp-server group nms v3 priv read ro access nms snmp-server user user1 nms v3 auth sha Password1 pri aes 256 Password123.
Why this is the answer
The correct option provides the strongest, minimal SNMPv3 configuration for encrypted, password-protected read access from NMS 10.15.2.19. It uses a standard ACL to permit only the specified NMS. The snmp-server view ro iso included and snmp-server view ro ifEntry included commands define a read-only view. The snmp-server group nms v3 priv read ro access nms command creates an SNMPv3 group with priv (privacy/encryption) and read ro (read-only) access, linked to the ACL nms. Finally, snmp-server user user1 nms v3 auth sha Password1 pri aes 256 Password123 defines a user with strong SHA authentication and AES-256 encryption, associated with the nms group. Incorrect options: The first option uses auth md5 and pri 3des, which are weaker than SHA and AES-256. It also uses notify ro, which is for notifications, not general read access. The third option specifies rw (read-write) views and write rw access, which is not read-only. It also uses weaker DES encryption. The fourth option uses an incorrect wildcard mask 255.255.255.255 for a single host in a standard ACL, and aes 192 is not a standard AES strength in Cisco.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed