300-410 SNMP Troubleshooting Practice Test 2 — 15 Questions

Question 1

A network engineer runs the following command on Router R1:

R1# show snmp statistics

SNMP packets input: 150
    Bad SNMP version errors: 0
    Unknown community name: 25
    Illegal operation for community name: 0
    Encoding errors: 0
    Number of requested variables: 300
    Number of altered variables: 0
    Get-request PDUs: 120
    Get-next PDUs: 30
    Set-request PDUs: 0
SNMP packets output: 200
    Too big errors: 0
    No such name errors: 10
    Bad values errors: 0
    General errors: 0
    Response PDUs: 200
    Trap PDUs: 0

Based on this output, which statement is correct?

Accepted Answer

There are 25 SNMP requests with invalid community strings.. The output shows SNMP statistics. There are 25 'Unknown community name' errors, indicating that some SNMP requests are using community strings not configured on the router. Additionally, there are 10 'No such name errors' in the output, meaning the requested MIB objects do not exist. No set requests were received.

Answer

The router has sent 150 trap PDUs.

Answer

There were 10 set requests that failed due to bad values.

Answer

The router received 200 SNMP packets.

Question 2

A network engineer runs the following command on Router R1:

R1# show snmp mib

MIB: IF-MIB
MIB: SNMPv2-MIB
MIB: IP-MIB
MIB: CISCO-CONFIG-MAN-MIB
MIB: ENTITY-MIB

Based on this output, which statement is correct?

Accepted Answer

The router supports monitoring of configuration changes via SNMP.. The output lists the MIBs supported by the router. The presence of CISCO-CONFIG-MAN-MIB indicates support for configuration management, such as monitoring configuration changes via SNMP. The other MIBs are standard for interface, SNMP, IP, and entity information.

Answer

The router does not support the IF-MIB.

Answer

The router only supports Cisco proprietary MIBs.

Answer

The ENTITY-MIB is used for entity authentication.

Question 3

A network engineer runs the following command on Router R1:

R1# show snmp trap

SNMP Trap: enabled

Trap receiver: 192.168.1.100
    Community: PUBLIC
    Version: 2c
    UDP port: 162
    Enable traps: snmp, interface, bgp

Trap receiver: 192.168.1.200
    Community: PRIVATE
    Version: 2c
    UDP port: 162
    Enable traps: snmp, ospf

Based on this output, which statement is correct?

Accepted Answer

BGP traps will be sent to 192.168.1.100 but not to 192.168.1.200.. The output shows two trap receivers with different enabled traps. The first receiver is configured to receive snmp, interface, and bgp traps. The second receiver is configured for snmp and ospf traps. Both use SNMPv2c with community strings.

Answer

Both receivers will receive OSPF traps.

Answer

The traps are sent using SNMPv3.

Answer

Interface traps are sent to 192.168.1.200.

Question 4

snmp-server community public RO
snmp-server community private RW
snmp-server location DataCenter
snmp-server contact admin@example.com

What is the effect of this configuration?

Accepted Answer

SNMPv2c is enabled with read-only community 'public' and read-write community 'private'.. The configuration enables SNMPv2c with two community strings: public for read-only access and private for read-write access. It also sets the location and contact information for the device.

Answer

SNMPv3 is enabled with authentication.

Answer

Only read-only access is allowed using the 'private' community.

Answer

SNMP traps are enabled to the location DataCenter.

Question 5

snmp-server group MyGroup v3 priv
snmp-server user MyUser MyGroup v3 auth sha MyPassword priv aes 128 MyPrivKey

What is missing from this SNMPv3 configuration?

Accepted Answer

The group is missing a view definition to allow access to MIB objects.. The configuration creates an SNMPv3 group with privacy (encryption) and a user with authentication and privacy. However, it does not specify an access list to restrict which hosts can use this user, nor does it define a view for the group. Without a view, the group defaults to no access (or limited access depending on IOS version).

Answer

The authentication protocol should be MD5 instead of SHA.

Answer

The privacy password must be at least 16 characters long.

Answer

The user must be configured under a different group name.

Question 6

snmp-server enable traps
snmp-server host 192.168.1.100 traps version 2c public
snmp-server host 192.168.1.200 informs version 2c public

What is the effect of this configuration?

Accepted Answer

Traps are sent to 192.168.1.100 and informs are sent to 192.168.1.200.. This enables all SNMP traps and configures two hosts: one to receive traps (unacknowledged) and one to receive informs (acknowledged). Both use SNMPv2c with the community string 'public'.

Answer

Both hosts receive traps.

Answer

Both hosts receive informs.

Answer

Only traps are enabled; informs require SNMPv3.

Question 7

snmp-server community MyCommunity RO 10
access-list 10 permit 192.168.1.0 0.0.0.255

What is the effect of this configuration?

Accepted Answer

SNMP read-only access is allowed only from the 192.168.1.0/24 subnet.. The SNMP community 'MyCommunity' is restricted to read-only access and is associated with access-list 10, which permits only the 192.168.1.0/24 subnet. This means only SNMP managers in that subnet can use this community for read-only queries.

Answer

SNMP read-write access is allowed from any host.

Answer

SNMP access is allowed from any host, but only read-only.

Answer

The community string is encrypted in the configuration.

Question 8

snmp-server ifindex persist

What is the effect of this configuration?

Accepted Answer

Interface indices are preserved after a device reload.. This command makes SNMP interface indices persistent across reboots. Without it, interface indices may change after a reload, which can cause issues for NMS systems that rely on consistent ifIndex values.

Answer

Interface statistics are cleared on reload.

Answer

SNMP traps are sent for interface state changes.

Answer

The ifIndex is based on the interface name.

Question 9

snmp-server community public RO
snmp-server community private RW
snmp-server community secret RW

What is wrong with this configuration?

Accepted Answer

There is no access list to restrict SNMP access.. Multiple read-write communities are configured (private and secret). While this is allowed, it can be a security risk. More importantly, the 'public' community is read-only, which is typical, but the configuration lacks any access list restrictions, making SNMP accessible from any source if not filtered elsewhere.

Answer

The community strings must be at least 8 characters.

Answer

Only one read-write community is allowed.

Answer

The 'public' community should be read-write.

Question 10

What is the default SNMPv2c community string on most Cisco IOS devices?

Accepted Answer

public. By default, many Cisco IOS devices have no SNMP community configured. However, if a community is preconfigured, it is often 'public' with read-only access. The question tests the default state.

Answer

private

Answer

cisco

Answer

No default community string is configured.

Question 11

Which SNMP version introduced the use of a User-based Security Model (USM) and View-based Access Control Model (VACM)?

Accepted Answer

SNMPv3. SNMPv3 introduced USM for authentication and encryption, and VACM for fine-grained access control. SNMPv1 and v2c use community strings and do not support these security models.

Answer

SNMPv1

Answer

SNMPv2c

Answer

SNMPv2u

Question 12

What is the default SNMP trap queue length on Cisco IOS?

Accepted Answer

10. The default trap queue length is 10 messages. If the queue is full, new traps may be dropped. This can be adjusted with the 'snmp-server queue-length' command.

Answer

100

Answer

Unlimited

Answer

5

Question 13

Which TWO commands would a network engineer use to verify SNMP agent configuration and connectivity on a Cisco IOS router? (Choose TWO.)

Accepted Answer

show snmp. The 'show snmp' command displays SNMP agent status, community strings, and counters, while 'show snmp host' shows the configured SNMP notification receivers. 'show snmp group' and 'show snmp user' are for SNMPv3 configuration, and 'debug snmp packets' is a troubleshooting tool, not a verification command.

Answer

show snmp group

Answer

show snmp user

Answer

debug snmp packets

Question 14

Which TWO statements about SNMPv3 security models are true? (Choose TWO.)

Accepted Answer

The noAuthNoPriv security level provides no authentication and no encryption.. SNMPv3 supports three security levels: noAuthNoPriv (no authentication, no encryption), authNoPriv (authentication with MD5 or SHA, no encryption), and authPriv (authentication and encryption using DES or AES). The 'priv' keyword enables encryption, and authentication is required for both authNoPriv and authPriv.

Answer

The authNoPriv security level uses encryption but no authentication.

Answer

SNMPv3 always requires encryption for all security levels.

Answer

The 'priv' keyword in the snmp-server group command disables authentication.

Question 15

Which TWO configuration steps are required to enable SNMPv3 with authentication and encryption on a Cisco router? (Choose TWO.)

Accepted Answer

snmp-server group GROUP v3 priv. To configure SNMPv3 with authPriv, you must first define an SNMP group with the appropriate security level using 'snmp-server group', then create a user associated with that group using 'snmp-server user' with authentication and privacy passwords. The 'snmp-server community' command is for SNMPv1/v2c, and 'snmp-server host' is for trap destinations.

Answer

snmp-server community PUBLIC ro

Answer

snmp-server host 10.1.1.1 version 3 priv USER

Answer

snmp-server enable traps