200-201 Security Monitoring Practice Question
Which protocol is used by SNMP to send traps from network devices to the management station?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
UDP port 162
SNMP traps are sent from agents to managers using UDP port 162. SNMP uses UDP, not TCP.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
TCP port 162
Why it's wrong here
Traps use UDP, not TCP, so TCP port 162 fails despite naming the correct trap port number. TCP port 162 would be relevant only if a scenario explicitly required connection-oriented delivery of notifications, which standard SNMP does not.
- ✗
TCP port 161
Why it's wrong here
SNMP traps are asynchronous notifications sent to the management station on UDP port 162, not TCP port 161. TCP port 161 carries SNMP request/response polling traffic, so this option describes the wrong transport and direction entirely.
- ✓
UDP port 162
Why this is correct
SNMP traps are unsolicited notifications sent from agents to the manager, and they travel over UDP port 162. The manager listens on 162, while queries use UDP 161. This connectionless transport suits one-way alert delivery without acknowledgement overhead.
- ✗
UDP port 161
Why it's wrong here
UDP port 161 is the agent's listening port for SNMP queries and responses, not trap delivery. It would be correct for polling a device's MIB, but traps are pushed unsolicited to the manager on UDP port 162.
Go deeper
Related to this question
About these practice questions
One of 968 original 200-201 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 200-201 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 200-201 exam.