A network engineer runs the following command on Router R1: R1# show snmp group group name: readonly security model: v3 security level: authNoPriv context: read view: iso write view: notify view: Group name: admin security model: v3 security level: authPriv context: read view: iso write view: iso notify view: iso Based on this output, which statement is correct?

The 'readonly' group can read all MIB objects because its read view is 'iso'.. The output shows two SNMPv3 groups. The 'readonly' group has security level 'authNoPriv', meaning authentication is required but no privacy. The 'admin' group has 'authPriv', requiring both authentication and privacy. The 'readonly' group has no write view, so it cannot modify configurations.

The 'admin' group requires only authentication, not encryption.

The 'readonly' group can send SNMP traps.

Both groups have the same security level.

300-410 SNMP Troubleshooting — All Questions With Answers

Question 1mediummultiple choice

Read the full network assurance explanation →

A network engineer notices that an SNMPv3 poll from the NMS to router R1 fails with an authentication error. The engineer has configured 'snmp-server group ADMIN v3 priv' and 'snmp-server user admin ADMIN v3 auth sha cisco123 priv aes 128 cisco456'. The NMS is configured with the same credentials. What is the most likely cause of the failure?

Question 2mediummultiple choice

Study the full ACL explanation →

An engineer is troubleshooting why the NMS is not receiving SNMP traps from router R2. The configuration includes 'snmp-server enable traps', 'snmp-server host 10.1.1.100 version 2c public', and an extended ACL 100 that permits UDP port 162 from 10.1.1.100. The NMS can ping R2. What is the most likely cause?

Question 3easymultiple choice

Read the full network assurance explanation →

A network engineer configures SNMPv2c on router R3 with 'snmp-server community cisco RO' and 'snmp-server community cisco RW'. The NMS can poll read-only data but fails when trying to write a configuration value. The NMS uses the RW community string. What is the most likely cause?

Question 4mediummultiple choice

Read the full network assurance explanation →

An engineer is troubleshooting why the NMS is not receiving SNMP traps for interface up/down events on router R4. The configuration includes 'snmp-server enable traps snmp linkdown linkup' and 'snmp-server host 10.1.1.200 version 2c public'. The NMS can receive other traps from R4. What is the most likely cause?

Question 5hardmultiple choice

Study the full ACL explanation →

A network engineer is troubleshooting why the NMS cannot poll SNMP data from router R5. The router has 'snmp-server community cisco RO' configured. The NMS is on subnet 192.168.1.0/24, and the router has an ACL applied to the VTY lines that permits only 10.0.0.0/8. The NMS can ping the router. What is the most likely cause?

Question 6hardmultiple choice

Read the full network assurance explanation →

An engineer is troubleshooting why SNMPv3 informs are not being received by the NMS from router R6. The configuration includes 'snmp-server group ADMIN v3 priv', 'snmp-server user admin ADMIN v3 auth sha cisco123 priv aes 128 cisco456', and 'snmp-server host 10.1.1.100 informs version 3 priv admin'. The NMS can receive SNMPv3 traps from other routers. What is the most likely cause?

Question 7mediummultiple choice

Read the full network assurance explanation →

A network engineer is troubleshooting why the NMS cannot poll the CPU utilization of router R7 via SNMP. The router has 'snmp-server community cisco RO' configured. The NMS can poll interface statistics and routing table entries successfully. What is the most likely cause?

Question 8easymultiple choice

Read the full network assurance explanation →

An engineer is troubleshooting why the NMS is not receiving SNMP traps from router R8 after a recent configuration change. The engineer added 'snmp-server host 10.1.1.100 version 2c public' and 'snmp-server enable traps' but forgot to remove the old 'snmp-server host 10.1.1.200 version 2c public' command. The NMS at 10.1.1.100 can receive traps from other devices. What is the most likely cause?

Question 9mediummultiple choice

Read the full network assurance explanation →

An engineer is troubleshooting why the NMS is receiving duplicate SNMP traps from router R9 for the same event. The router has two 'snmp-server host' commands pointing to the same NMS IP address but with different community strings: 'public' and 'private'. The NMS is configured to process traps from both communities. What is the most likely cause?

Question 10mediummultiple choice

Read the full network assurance explanation →

A network engineer runs the following command on Router R1:

R1# show snmp community

Community name: PUBLIC Community Index: PUBLIC Permission: read-only View: v1default Community name: PRIVATE Community Index: PRIVATE Permission: read-write View: v1default Community name: MONITOR Community Index: MONITOR Permission: read-only View: restricted

Based on this output, which statement is correct?

Question 11mediummultiple choice

Read the full network assurance explanation →

A network engineer runs the following command on Router R1:

R1# show snmp user

User name: monitor Engine ID: 800000090300001122334455 storage-type: nonvolatile Authentication Protocol: MD5 Privacy Protocol: DES Group-name: readonly

User name: admin Engine ID: 800000090300AABBCCDDEEFF storage-type: nonvolatile Authentication Protocol: SHA Privacy Protocol: AES256 Group-name: admin

Based on this output, which statement is correct?

Question 12easymultiple choice

Read the full network assurance explanation →

A network engineer runs the following command on Router R1:

R1# show snmp mib ifmib ifindex

ifIndex: 1

Interface: GigabitEthernet0/0

Description: GigabitEthernet0/0

ifIndex: 2

Interface: GigabitEthernet0/1

Description: GigabitEthernet0/1

ifIndex: 3

Interface: Loopback0

Description: Loopback0

ifIndex: 10

Interface: Tunnel0

Description: Tunnel0

Based on this output, which statement is correct?

Question 13mediummultiple choice

Read the full network assurance explanation →

A network engineer runs the following command on Router R1:

R1# show snmp group

group name: readonly security model: v3 security level: authNoPriv context: <none> read view: iso write view: <none> notify view: <none>

Group name: admin security model: v3 security level: authPriv context: <none> read view: iso write view: iso notify view: iso

Based on this output, which statement is correct?

Question 14easymultiple choice

Read the full network assurance explanation →

A network engineer runs the following command on Router R1:

R1# show snmp engineID

Local SNMP engineID: 800000090300001122334455 Local SNMP engineBoots: 5

Based on this output, which statement is correct?

Question 15mediummultiple choice

Read the full network assurance explanation →

A network engineer runs the following command on Router R1:

R1# show snmp host

Host: 192.168.1.100 Port: 162 Timeout: 1.5 seconds Retries: 3 Version: 2c Community: PUBLIC

Host: 192.168.1.200 Port: 162 Timeout: 3 seconds Retries: 5 Version: 3 User: admin Security level: authPriv

Based on this output, which statement is correct?

Question 16hardmultiple choice

Read the full network assurance explanation →

A network engineer runs the following command on Router R1:

R1# show snmp statistics

SNMP packets input: 150

Bad SNMP version errors: 0 Unknown community name: 25 Illegal operation for community name: 0 Encoding errors: 0 Number of requested variables: 300 Number of altered variables: 0 Get-request PDUs: 120 Get-next PDUs: 30 Set-request PDUs: 0

SNMP packets output: 200

Too big errors: 0

No such name errors: 10

Bad values errors: 0 General errors: 0 Response PDUs: 200 Trap PDUs: 0

Based on this output, which statement is correct?

Question 17easymultiple choice

Read the full network assurance explanation →

A network engineer runs the following command on Router R1:

R1# show snmp mib

MIB: IF-MIB MIB: SNMPv2-MIB MIB: IP-MIB MIB: CISCO-CONFIG-MAN-MIB MIB: ENTITY-MIB

Based on this output, which statement is correct?

Question 18mediummultiple choice

Review the full OSPF breakdown →

A network engineer runs the following command on Router R1:

R1# show snmp trap

SNMP Trap: enabled

Trap receiver: 192.168.1.100 Community: PUBLIC Version: 2c UDP port: 162

Enable traps: snmp, interface, bgp

Trap receiver: 192.168.1.200 Community: PRIVATE Version: 2c UDP port: 162

Enable traps: snmp, ospf

Based on this output, which statement is correct?

Question 19mediummultiple choice

Read the full network assurance explanation →

snmp-server community public RO\nsnmp-server community private RW\nsnmp-server location DataCenter\nsnmp-server contact admin@example.com

What is the effect of this configuration?

Question 20mediummultiple choice

Read the full network assurance explanation →

snmp-server group MyGroup v3 priv\nsnmp-server user MyUser MyGroup v3 auth sha MyPassword priv aes 128 MyPrivKey

What is missing from this SNMPv3 configuration?

Question 21mediummultiple choice

Read the full network assurance explanation →

snmp-server enable traps\nsnmp-server host 192.168.1.100 traps version 2c public\nsnmp-server host 192.168.1.200 informs version 2c public

What is the effect of this configuration?

Question 22mediummultiple choice

Read the full network assurance explanation →

snmp-server community MyCommunity RO 10\naccess-list 10 permit 192.168.1.0 0.0.0.255

What is the effect of this configuration?

Question 23mediummultiple choice

Read the full network assurance explanation →

snmp-server ifindex persist

What is the effect of this configuration?

Question 24mediummultiple choice

Read the full network assurance explanation →

snmp-server community public RO\nsnmp-server community private RW\nsnmp-server community secret RW

What is wrong with this configuration?

Question 25easymultiple choice

Read the full network assurance explanation →

What is the default SNMPv2c community string on most Cisco IOS devices?

Question 26mediummultiple choice

Read the full network assurance explanation →

Which SNMP version introduced the use of a User-based Security Model (USM) and View-based Access Control Model (VACM)?

Question 27mediummultiple choice

Read the full network assurance explanation →

What is the default SNMP trap queue length on Cisco IOS?

Question 28mediummulti select

Read the full network assurance explanation →

Which TWO commands would a network engineer use to verify SNMP agent configuration and connectivity on a Cisco IOS router? (Choose TWO.)

Question 29hardmulti select

Read the full network assurance explanation →

Which TWO statements about SNMPv3 security models are true? (Choose TWO.)

Question 30hardmulti select

Read the full network assurance explanation →

Which TWO configuration steps are required to enable SNMPv3 with authentication and encryption on a Cisco router? (Choose TWO.)

Question 31mediummulti select

Read the full network assurance explanation →

Which THREE symptoms indicate a problem with SNMP trap delivery from a Cisco router? (Choose THREE.)

Question 32hardmulti select

Read the full network assurance explanation →

Which TWO commands are used to troubleshoot SNMPv3 authentication or encryption failures? (Choose TWO.)

Question 33hardmultiple choice

Review the full OSPF breakdown →

A large enterprise network is experiencing intermittent SNMP polling failures from the NMS to router R2. R1 and R2 are connected via a serial link running OSPF. R1 has the following relevant configuration: snmp-server community public RO, snmp-server community private RW, snmp-server trap-source Loopback0, snmp-server enable traps ospf. R2 shows: debug ip packet shows packets from NMS (10.1.1.100) to R2's Loopback0 (10.2.2.2) being dropped with 'access-list violation'. No ACL is applied to any interface on R2. What is the root cause?

Question 34hardmultiple choice

Open the full BGP breakdown →

A network engineer configures SNMP traps on router R3 to monitor BGP events. R3 is an iBGP route reflector with multiple clients. The configuration includes: snmp-server enable traps bgp, snmp-server host 192.168.1.100 version 2c public. However, the NMS receives no BGP traps. R3's show snmp pending shows no pending traps. show snmp statistics shows TrapsSent: 0. The NMS can poll R3 successfully via SNMP. What is the root cause?

Question 35hardmultiple choice

Read the full network assurance explanation →

Router R4 is configured as an SNMP agent for a large network. The NMS is at 10.10.10.10. The configuration includes: snmp-server community mycom RO, snmp-server host 10.10.10.10 version 2c mycom, snmp-server enable traps. However, the NMS receives no traps. R4's show snmp statistics shows TrapsSent: 0, and show snmp pending shows no pending. The NMS can poll R4 using the community string 'mycom'. What is the root cause?

Question 36hardmultiple choice

Read the full network assurance explanation →

Router R5 is configured with SNMPv3 for secure management. The configuration includes: snmp-server group mygroup v3 priv, snmp-server user myuser mygroup v3 auth sha myauth priv aes 128 mypriv. The NMS is configured with the same credentials. However, the NMS cannot poll R5. The debug snmp packet shows: 'Authentication failure'. The NMS and R5 have correct time synchronization via NTP. What is the root cause?

Question 37hardmultiple choice

Read the full network assurance explanation →

Router R6 is configured to send SNMP inform requests to the NMS at 192.168.1.1. Configuration: snmp-server host 192.168.1.1 informs version 2c public, snmp-server enable traps. The NMS receives no informs. R6's show snmp statistics shows InformRequestsSent: 0, and show snmp pending shows no pending. The NMS can poll R6 successfully. The network has a firewall between R6 and the NMS that allows UDP 162. What is the root cause?

Question 38hardmultiple choice

Read the full MPLS explanation →

Router R7 is part of an MPLS VPN network. It has multiple VRFs. The NMS is in the global routing table and needs to poll SNMP from devices in VRF BLUE. The configuration includes: snmp-server community public RO, snmp-server vrf BLUE community public RO. However, the NMS cannot poll the loopback interface of a router in VRF BLUE. The NMS can poll R7's global interfaces. What is the root cause?

Question 39hardmultiple choice

Read the full network assurance explanation →

Router R8 is configured with SNMP and IP SLA. The IP SLA operation sends SNMP traps to the NMS when a threshold is crossed. The configuration includes: ip sla 1, icmp-echo 192.168.1.1, threshold 100, timeout 1000, frequency 10, ip sla schedule 1 life forever start-time now, snmp-server enable traps ip sla. However, the NMS receives no traps when the threshold is crossed. The IP SLA operation shows 'Over threshold' in show ip sla statistics. What is the root cause?

Question 40hardmultiple choice

Read the full network assurance explanation →

Router R9 is configured with SNMP and NetFlow. The NMS uses SNMP to poll NetFlow statistics. The configuration includes: snmp-server community public RO, snmp-server enable traps netflow. However, the NMS cannot poll NetFlow MIB objects. The router's show snmp mib shows that the NetFlow MIB is not loaded. What is the root cause?

Question 41hardmultiple choice

Read the full network assurance explanation →

Router R10 is configured with SNMP and EEM. An EEM applet is configured to send an SNMP trap when a specific syslog message is generated. The applet uses the 'action snmp-trap' command. However, the NMS receives no trap. The syslog message is generated and logged. The router's show snmp statistics shows TrapsSent: 0. What is the root cause?

Question 42mediummultiple choice

Read the full network assurance explanation →

A network engineer runs the following command to troubleshoot an SNMP issue:

R1# debug snmp packets
SNMP: Packet received via UDP from 10.1.1.1 on port 161
SNMP: GetRequest, reqid 12345, errstat 0, errindex 0
SNMP: Community string: public
SNMP: MIB object: 1.3.6.1.2.1.1.1.0 (sysDescr)
SNMP: Value: Cisco IOS Software, C1900 Software (C1900-UNIVERSALK9-M), Version 15.7(3)M
SNMP: Packet sent via UDP to 10.1.1.1 on port 161
SNMP: GetResponse, reqid 12345, errstat 0, errindex 0

What does this debug output indicate?

Question 43mediummultiple choice

Read the full network assurance explanation →

A network engineer runs the following command to troubleshoot SNMP access:

R1# show snmp community

Community name: public Community Index: public Storage-Type: nonvolatile Access: read-only View: v1default

Community name: private Community Index: private Storage-Type: nonvolatile Access: read-write View: v1default

What does this output indicate?

Question 44mediummultiple choice

Read the full network assurance explanation →

A network engineer runs the following command to troubleshoot SNMP traps:

R1# show snmp host

Host: 10.1.1.2 Port: 162 Timeout: 30 Retries: 3 Community: trap-public Version: 2c Filter: none

Host: 10.1.1.3 Port: 162 Timeout: 30 Retries: 3 Community: trap-public Version: 2c Filter: none

What does this output indicate?

Question 45mediummultiple choice

Read the full network assurance explanation →

A network engineer runs the following command to troubleshoot SNMP access control:

R1# show snmp view

v1default - includes all objects up to OID 1.3.6.1.2.1.1 v1system - includes system MIB only (1.3.6.1.2.1.1)

What does this output indicate?

Question 46mediummultiple choice

Read the full network assurance explanation →

A network engineer runs the following command to troubleshoot SNMP trap generation:

R1# show snmp mib

sysDescr.0 = Cisco IOS Software, C1900 Software (C1900-UNIVERSALK9-M), Version 15.7(3)M sysObjectID.0 = .1.3.6.1.4.1.9.1.1 sysUpTime.0 = 123456789 sysContact.0 = admin@example.com sysName.0 = R1 sysLocation.0 = Lab

What does this output indicate?

Question 47hardmultiple choice

Read the full network assurance explanation →

A network engineer runs the following command to troubleshoot SNMP statistics:

R1# show snmp statistics

0 SNMP packets input 0 Bad SNMP version errors 0 Unknown community name 0 Illegal operation for community name supplied 0 Encoding errors 0 Number of requested variables 0 Number of altered variables 0 Get-request PDUs 0 Get-next PDUs 0 Set-request PDUs 0 Input queue drops 0 SNMP packets output 0 Too big errors 0 No such name errors 0 Bad values errors 0 General errors 0 Get-response PDUs 0 SNMP trap PDUs

What does this output indicate?

Question 48hardmultiple choice

Read the full network assurance explanation →

A network engineer runs the following command to troubleshoot SNMPv3:

R1# show snmp user

User name: admin Engine ID: 800000090300001122334455 Storage-type: nonvolatile Authentication Protocol: SHA Privacy Protocol: AES128 Group: admin-group

User name: monitor Engine ID: 800000090300001122334455 Storage-type: nonvolatile Authentication Protocol: MD5 Privacy Protocol: DES Group: monitor-group

What does this output indicate?

Question 49hardmultiple choice

Read the full network assurance explanation →

A network engineer runs the following command to troubleshoot SNMPv3 group configuration:

R1# show snmp group

group name: admin-group security model: v3 auth priv read view: v1default write view: v1default notify view: v1default

Group name: monitor-group security model: v3 auth no priv read view: v1default write view: none notify view: v1default

What does this output indicate?

Question 50mediummultiple choice

Read the full network assurance explanation →

A network engineer runs the following command to troubleshoot SNMP access lists:

R1# show snmp access
Access-list: 10

Community: public View: v1default

Access-list: 20

Community: private View: v1default

What does this output indicate?

Question 51mediummultiple choice

Read the full network assurance explanation →

What is the default SNMPv3 security level for a user configured with the "snmp-server user username groupname v3 auth sha password" command?

Question 52easymultiple choice

Read the full network assurance explanation →

Which SNMPv3 message type is used by an SNMP agent to send unsolicited notifications to a manager?

Question 53hardmultiple choice

Read the full network assurance explanation →

What is the default SNMP community string on a Cisco IOS device that has not been configured with any SNMP commands?

Question 54easymultiple choice

Read the full network assurance explanation →

Which SNMPv2c PDU type is used by the manager to request a large amount of data efficiently, such as an entire routing table?

Question 55mediummultiple choice

Read the full network assurance explanation →

When troubleshooting SNMPv3 authentication failures, which default HMAC algorithm is used if the user is configured with "auth md5"?

Question 56hardmultiple choice

Read the full network assurance explanation →

What is the default SNMPv3 engine ID format on a Cisco IOS device?

Question 57easymultiple choice

Read the full network assurance explanation →

Which SNMPv3 security model provides both authentication and encryption by default?

Question 58mediummultiple choice

Read the full network assurance explanation →

When an SNMP agent sends an InformRequest, what is the default behavior regarding acknowledgment?

Question 59hardmultiple choice

Read the full network assurance explanation →

What is the default retransmission timeout for SNMP informs on a Cisco IOS device?

Question 60mediumdrag order

Read the full network assurance explanation →

Drag and drop the steps to configure SNMPv3 with auth-priv and verify traps into the correct order, from first to last.

Question 61harddrag order

Read the full network assurance explanation →

Drag and drop the steps to troubleshoot SNMP adjacency or connectivity failures into the correct order, from first to last.

Question 62mediumdrag order

Read the full network assurance explanation →

Drag and drop the steps to verify and validate the SNMP operational state into the correct order, from first to last.

Question 63hardmulti select

Read the full network assurance explanation →

Which TWO statements correctly describe the behavior of SNMPv3 when using the 'noAuthNoPriv' security level? (Choose TWO.)

Question 64hardmulti select

Read the full network assurance explanation →

Which TWO actions will prevent an SNMPv2c NMS from receiving traps from a Cisco router? (Choose TWO.)

Question 65hardmulti select

Read the full network assurance explanation →

An engineer is troubleshooting an issue where an SNMPv2c NMS cannot poll interface counters on a Cisco router. Which THREE commands can be used to verify the SNMP configuration and connectivity? (Choose THREE.)

Question 66hardmulti select

Read the full network assurance explanation →

Which TWO statements about SNMPv3 engine ID configuration are true? (Choose TWO.)

Question 67hardmulti select

Read the full network assurance explanation →

Which TWO statements correctly describe the use of SNMP inform requests compared to traps? (Choose TWO.)

Question 68hardmultiple choice

Read the full network assurance explanation →

A network engineer configures SNMPv3 on a router with the 'snmp-server group' and 'snmp-server user' commands, using SHA for authentication and AES for privacy. The NMS can poll the router successfully, but SNMP traps are not received. Which is the most likely explanation?

Question 69hardmultiple choice

Review the full OSPF breakdown →

An engineer configures SNMPv2c with a read-only community string 'public' on a router. The NMS can poll interface statistics, but when trying to poll OSPF neighbor states, the NMS receives no response. Which is the most likely explanation?

Question 70hardmultiple choice

Read the full network assurance explanation →

A network engineer configures SNMPv3 with authentication and privacy on a router. The NMS can poll the router successfully. After a router reload, the NMS fails to poll the router, but the SNMP configuration is unchanged. Which is the most likely explanation?

Question 71hardmultiple choice

Read the full network assurance explanation →

An engineer configures SNMPv2c with a read-write community string 'private' on a router. The NMS can poll interface statistics and modify some objects, but when trying to shut down an interface via SNMP, the NMS receives an error. Which is the most likely explanation?

Question 72hardmultiple choice

Read the full network assurance explanation →

A network engineer configures SNMPv3 with authentication only (no privacy) on a router. The NMS can poll the router successfully. Later, the engineer adds the 'priv' option to the user configuration. The NMS now fails to poll the router. Which is the most likely explanation?

Question 73hardmultiple choice

Study the full ACL explanation →

An engineer configures SNMPv2c with a community string 'public' and an ACL that permits only the NMS IP address. The NMS can poll the router successfully. Later, the engineer adds a second community string 'monitor' with a different ACL that permits a second NMS. The first NMS now fails to poll. Which is the most likely explanation?

Question 74hardmultiple choice

Read the full network assurance explanation →

A network engineer configures SNMPv3 with authentication and privacy on a router. The NMS polls the router via the management interface. The engineer then adds a loopback interface and configures the router to send SNMP traps sourced from the loopback IP. The NMS stops receiving traps. Which is the most likely explanation?

Question 75hardmultiple choice

Study the full ACL explanation →

An engineer configures SNMPv2c with a community string 'public' and an ACL that permits the NMS. The NMS can poll the router. The engineer then applies a CoPP policy that drops SNMP packets (UDP port 161) from all sources except the NMS. The NMS now fails to poll. Which is the most likely explanation?

Question 76hardmultiple choice

Read the full VPN explanation →

A network engineer configures SNMPv3 with authentication and privacy on a router. The NMS polls the router successfully. The engineer then configures IPsec to encrypt all traffic between the router and the NMS. The NMS now fails to poll the router. Which is the most likely explanation?

R1# debug snmp packets SNMP: Packet received via UDP from 10.1.1.1 on port 161 SNMP: GetRequest, reqid 12345, errstat 0, errindex 0 SNMP: Community string: public SNMP: MIB object: 1.3.6.1.2.1.1.1.0 (sysDescr) SNMP: Value: Cisco IOS Software, C1900 Software (C1900-UNIVERSALK9-M), Version 15.7(3)M SNMP: Packet sent via UDP to 10.1.1.1 on port 161 SNMP: GetResponse, reqid 12345, errstat 0, errindex 0