2.7 Configure Secure Network Management of Perimeter Security and Infrastructure Devices Such as SNMPv3, NetConf, RestConf, APIs, Secure Syslog, and NTP with Authentication 350-701 Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   A security engineer is configuring SNMPv3 on a Cisco IOS-XE router. The router is in a high-security environment, and the engineer must ensure that SNMPv3 traffic is protected against replay attacks. The engineer has already configured a user with authPriv. What additional configuration is required to mitigate replay attacks?

   • AConfigure the SNMPv3 trap destination to use a different port.
   • BConfigure the SNMPv3 user with a higher auth password length.
   • CConfigure the SNMPv3 engine ID to be unique and persistent.
   • DConfigure the SNMPv3 group with a view that restricts access to the MIB.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A security team wants to automate the collection of security events from a Cisco Firepower Management Center (FMC) using a script. The script needs to authenticate to the FMC API using a username and password. Which API authentication method should the script use?

   • ASNMPv3 with authPriv.
   • BCLI over SSH with exec commands.
   • CREST API with basic authentication over HTTPS.
   • DNETCONF with SSH authentication.
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   A network engineer is configuring SNMPv3 on a Cisco IOS-XE router. The router is managed by two different NMS stations. The first NMS station requires authNoPriv, and the second requires authPriv. How should the engineer configure SNMPv3 to support both NMS stations?

   • ACreate two different SNMPv3 users, one for each NMS, with different security levels.
   • BCreate a single SNMPv3 group with two different views, one for each NMS.
   • CCreate a single SNMPv3 user with authPriv and use it for both NMS stations.
   • DCreate a single SNMPv3 user with noAuthNoPriv and use it for both NMS stations.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which SNMPv3 configuration element is used to group users and define their access rights, such as read-only or read-write?

   • AUser
   • BCommunity
   • CView
   • DGroup
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   A network automation engineer is deciding between NETCONF and RESTCONF for managing a fleet of Cisco IOS-XE devices. The engineer needs to perform a configuration change that must be validated and committed atomically (all-or-nothing). The engineer also wants to use a protocol that is more likely to be supported by existing automation tools that use HTTP. Which protocol should be chosen?

   • ANETCONF, because it uses SSH and is more secure than RESTCONF.
   • BNETCONF, because it supports the candidate datastore and commit/discard operations.
   • CRESTCONF, because it uses HTTP and is more compatible with existing tools.
   • DRESTCONF, because it supports the candidate datastore and uses HTTP.
   Reveal Solution Discussion Select an answer first