300-410 SNMP Troubleshooting Practice Test 4 — 15 Questions

Question 1

A network engineer runs the following command to troubleshoot SNMP trap generation:

R1# show snmp mib
sysDescr.0 = Cisco IOS Software, C1900 Software (C1900-UNIVERSALK9-M), Version 15.7(3)M
sysObjectID.0 = .1.3.6.1.4.1.9.1.1
sysUpTime.0 = 123456789
sysContact.0 = admin@example.com
sysName.0 = R1
sysLocation.0 = Lab

What does this output indicate?

Accepted Answer

The router's system MIB is populated with correct values, including contact and location.. The show snmp mib command displays the system MIB objects. The output shows standard system group values: sysDescr (description), sysObjectID (enterprise OID), sysUpTime (uptime), sysContact, sysName, and sysLocation.

Answer

The router's sysContact is not configured, causing SNMP traps to fail.

Answer

The router is not responding to SNMP queries.

Answer

The router uses SNMPv3 only.

Question 2

A network engineer runs the following command to troubleshoot SNMP statistics:

R1# show snmp statistics
0 SNMP packets input
0 Bad SNMP version errors
0 Unknown community name
0 Illegal operation for community name supplied
0 Encoding errors
0 Number of requested variables
0 Number of altered variables
0 Get-request PDUs
0 Get-next PDUs
0 Set-request PDUs
0 Input queue drops
0 SNMP packets output
0 Too big errors
0 No such name errors
0 Bad values errors
0 General errors
0 Get-response PDUs
0 SNMP trap PDUs

What does this output indicate?

Accepted Answer

No SNMP traffic has been processed, which may indicate a configuration or connectivity issue.. The show snmp statistics command displays SNMP packet counters. All counters are zero, indicating that no SNMP packets have been processed since the last counter reset or router reload.

Answer

SNMP is working correctly with many successful requests.

Answer

The router is sending many SNMP traps.

Answer

There are errors due to bad community names.

Question 3

A network engineer runs the following command to troubleshoot SNMPv3:

R1# show snmp user
User name: admin
Engine ID: 800000090300001122334455
Storage-type: nonvolatile
Authentication Protocol: SHA
Privacy Protocol: AES128
Group: admin-group

User name: monitor
Engine ID: 800000090300001122334455
Storage-type: nonvolatile
Authentication Protocol: MD5
Privacy Protocol: DES
Group: monitor-group

What does this output indicate?

Accepted Answer

Two SNMPv3 users are configured: 'admin' with SHA/AES128 and 'monitor' with MD5/DES.. The show snmp user command displays SNMPv3 users. The output shows two users: 'admin' with SHA authentication and AES128 encryption in group 'admin-group', and 'monitor' with MD5 authentication and DES encryption in group 'monitor-group'.

Answer

SNMPv3 is not configured because no users are shown.

Answer

Both users use the same authentication and privacy protocols.

Answer

The users are in the same SNMP group.

Question 4

A network engineer runs the following command to troubleshoot SNMPv3 group configuration:

R1# show snmp group
group name: admin-group
security model: v3 auth priv
read view: v1default
write view: v1default
notify view: v1default

Group name: monitor-group
security model: v3 auth no priv
read view: v1default
write view: none
notify view: v1default

What does this output indicate?

Accepted Answer

The 'admin-group' requires authentication and encryption, while 'monitor-group' requires only authentication.. The show snmp group command displays SNMPv3 groups. The output shows 'admin-group' with auth and privacy (encryption) and full access, while 'monitor-group' has auth but no privacy and read-only access.

Answer

Both groups require authentication and encryption.

Answer

The 'monitor-group' has read-write access.

Answer

The groups use SNMPv2c security model.

Question 5

A network engineer runs the following command to troubleshoot SNMP access lists:

R1# show snmp access
Access-list: 10
Community: public
View: v1default

Access-list: 20
Community: private
View: v1default

What does this output indicate?

Accepted Answer

SNMP access is controlled by ACLs: ACL 10 for 'public' and ACL 20 for 'private'.. The show snmp access command displays SNMP access control lists. The output shows that access-list 10 is used for community 'public' and access-list 20 for community 'private', both using view 'v1default'.

Answer

No ACLs are applied to SNMP, so all access is allowed.

Answer

The router uses SNMPv3 exclusively.

Answer

The 'public' community has read-write access.

Question 6

What is the default SNMPv3 security level for a user configured with the "snmp-server user username groupname v3 auth sha password" command?

Accepted Answer

authNoPriv. The command specifies authentication (SHA) but no privacy, so the default security level is authNoPriv.

Answer

noAuthNoPriv

Answer

authPriv

Answer

The command is invalid without specifying a security level.

Question 7

Which SNMPv3 message type is used by an SNMP agent to send unsolicited notifications to a manager?

Accepted Answer

Trap or Inform. SNMPv3 uses the same PDU types as v2c; traps and informs are both used for unsolicited notifications.

Answer

GetRequest

Answer

Response

Answer

GetBulkRequest

Question 8

What is the default SNMP community string on a Cisco IOS device that has not been configured with any SNMP commands?

Accepted Answer

No default community string exists; SNMP is disabled.. By default, no community strings exist; SNMP is disabled until a community is configured.

Answer

public

Answer

private

Answer

cisco

Question 9

Which SNMPv2c PDU type is used by the manager to request a large amount of data efficiently, such as an entire routing table?

Accepted Answer

GetBulkRequest. GetBulkRequest is designed to retrieve multiple rows of a table in a single request.

Answer

GetRequest

Answer

GetNextRequest

Answer

SetRequest

Question 10

When troubleshooting SNMPv3 authentication failures, which default HMAC algorithm is used if the user is configured with "auth md5"?

Accepted Answer

HMAC-MD5-96. SNMPv3 uses HMAC-MD5-96 for authentication when MD5 is specified.

Answer

HMAC-SHA-96

Answer

HMAC-SHA-256

Answer

No HMAC is used; MD5 is used directly.

Question 11

What is the default SNMPv3 engine ID format on a Cisco IOS device?

Accepted Answer

The MAC address of the lowest-numbered interface. The default engine ID is derived from the MAC address of the lowest-numbered interface, per RFC 3411 and Cisco implementation.

Answer

A random 32-bit integer

Answer

The IP address of the management interface

Answer

A manually configured string; no default exists

Question 12

Which SNMPv3 security model provides both authentication and encryption by default?

Accepted Answer

User-based Security Model (USM) with authPriv. The User-based Security Model (USM) supports authNoPriv and authPriv; authPriv provides encryption.

Answer

Community-based Security Model (CSM)

Answer

View-based Access Control Model (VACM)

Answer

Transport Layer Security (TLS) model

Question 13

When an SNMP agent sends an InformRequest, what is the default behavior regarding acknowledgment?

Accepted Answer

The agent expects a Response PDU from the manager; if not received, it retransmits.. InformRequest requires the manager to send a Response; if no response is received, the agent retransmits.

Answer

The agent does not expect any acknowledgment; it is fire-and-forget.

Answer

The manager sends an acknowledgment at the transport layer only.

Answer

The agent sends the inform multiple times by default regardless of acknowledgment.

Question 14

What is the default retransmission timeout for SNMP informs on a Cisco IOS device?

Accepted Answer

30 seconds. The default timeout is 30 seconds; this is the time the agent waits for a Response before retransmitting.

Answer

5 seconds

Answer

60 seconds

Answer

10 seconds

Question 15

Drag and drop the steps to configure SNMPv3 with auth-priv and verify traps into the correct order, from first to last.

Accepted Answer

Configure SNMPv3 group with auth-priv security level. First, define the SNMPv3 group with security model and privacy settings. Next, create the user with authentication and privacy passwords. Then, enable SNMP traps globally. After that, specify the trap receiver host with the correct security parameters. Finally, verify the configuration using show snmp user and show snmp host.