A network engineer is troubleshooting why the NMS cannot retrieve interface counters from a router. The router is configured with SNMPv2c and the community string 'public' with read-only access. The NMS can ping the router but SNMP walks return no data. What is the most likely cause and the correct fix?

The SNMP agent is not enabled globally; enable it with 'snmp-server community public RO' and 'snmp-server enable traps'

The router's access control list is blocking SNMP from the NMS; add a permit statement for the NMS IP

The community string is case-sensitive; change 'public' to 'Public' on the router

The NMS is using SNMPv3 but the router is configured for SNMPv2c; change the NMS to SNMPv2c or configure SNMPv3 on the router

A network admin is configuring syslog on a router to send logs to a remote server. The admin wants to include the facility and severity in the log messages. Which command enables this?

service timestamps log datetime

A network engineer is troubleshooting an SNMPv2c issue where the NMS can poll the router but does not receive traps. The router is configured with 'snmp-server community public RO' and 'snmp-server enable traps'. The NMS is at 192.168.1.10. What is the missing configuration?

snmp-server host 192.168.1.10 public

snmp-server community public RW

snmp-server trap-source loopback0

snmp-server enable traps snmp authentication

A security audit requires that SNMPv3 users use AES-256 for privacy and SHA-256 for authentication. The router is running a Cisco IOS version that supports these algorithms. Which configuration is correct?

snmp-server group GRP v3 priv; snmp-server user admin GRP v3 auth sha Secret123 priv aes 256 Secret456

snmp-server group GRP v3 auth; snmp-server user admin GRP v3 auth sha-256 Secret123

snmp-server group GRP v3 noauth; snmp-server user admin GRP v3

snmp-server group GRP v3 priv; snmp-server user admin GRP v3 auth sha-256 Secret123 priv aes-256 Secret456

CCIE Enterprise Infrastructure

Domain 4Objective 3

System Management CCIE-ENTERPRISE-INFRASTRUCTURE Practice Questions (Page 4)

Part of the Infrastructure Security and Services domain, which accounts for 15% of the CCIE-ENTERPRISE-INFRASTRUCTURE exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 1–2 from this objective — we provide 36 practice questions to prepare you well beyond it. (estimate)

36questions here

8free pages

8concepts

15%of the exam

Questions 16–20

16foundation · easy
Which SNMP operation is used to retrieve a single object's value from an agent?
Select an answer first
17application · medium
A network engineer is troubleshooting why the NMS cannot retrieve interface counters from a router. The router is configured with SNMPv2c and the community string 'public' with read-only access. The NMS can ping the router but SNMP walks return no data. What is the most likely cause and the correct fix?
Select an answer first
18application · easy
A network admin is configuring syslog on a router to send logs to a remote server. The admin wants to include the facility and severity in the log messages. Which command enables this?
Select an answer first
19expert · medium
A network engineer is troubleshooting an SNMPv2c issue where the NMS can poll the router but does not receive traps. The router is configured with 'snmp-server community public RO' and 'snmp-server enable traps'. The NMS is at 192.168.1.10. What is the missing configuration?
Select an answer first
20expert · hard
A security audit requires that SNMPv3 users use AES-256 for privacy and SHA-256 for authentication. The router is running a Cisco IOS version that supports these algorithms. Which configuration is correct?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCIE-ENTERPRISE-INFRASTRUCTURE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “CCIE-ENTERPRISE-INFRASTRUCTURE” is a trademark of its owner, used for identification only.

System Management CCIE-ENTERPRISE-INFRASTRUCTURE Practice Questions (Page 4)

Questions 16–20

Which SNMP operation is used to retrieve a single object's value from an agent?

A network admin is configuring syslog on a router to send logs to a remote server. The admin wants to include the facility and severity in the log messages. Which command enables this?

A network engineer is troubleshooting an SNMPv2c issue where the NMS can poll the router but does not receive traps. The router is configured with 'snmp-server community public RO' and 'snmp-server enable traps'. The NMS is at 192.168.1.10. What is the missing configuration?

A security audit requires that SNMPv3 users use AES-256 for privacy and SHA-256 for authentication. The router is running a Cisco IOS version that supports these algorithms. Which configuration is correct?

Keep studying — Infrastructure Security and Services