hardMultiple SelectObjective-mapped
300-410 Practice Question: Which TWO statements about SNMPv3 configuration…
Which TWO statements about SNMPv3 configuration on Cisco IOS XE are true? (Choose TWO.)
⚠ Common exam trap
Cisco often tests the misconception that the engine ID is immutable and cannot be manually configured, leading candidates to incorrectly select option C as true.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The 'snmp-server user' command can specify an authentication and privacy password for a user.
The 'snmp-server user' command in Cisco IOS XE allows you to configure both an authentication password (e.g., MD5 or SHA) and a privacy password (e.g., DES or AES) for an SNMPv3 user, enabling secure message exchange. This is essential for implementing the authPriv security level, which provides both authentication and encryption.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The 'snmp-server group' command creates a group and assigns a username to it.
Why it's wrong here
Incorrect. The 'snmp-server group' command creates an SNMP group and associates it with a security model and level, but it does not assign a username. Usernames are assigned to groups via the 'snmp-server user' command.
- ✓
The 'snmp-server user' command can specify an authentication and privacy password for a user.
Why this is correct
Correct. The 'snmp-server user' command allows configuration of authentication (MD5/SHA) and privacy (DES/AES) passwords for SNMPv3 users.
- ✗
The engine ID is automatically generated and cannot be manually configured.
Why it's wrong here
Incorrect. While the engine ID is automatically generated, it can be manually configured using the 'snmp-server engine-id local' command.
- ✓
The 'snmp-server host' command for SNMPv3 requires a username to be specified when sending traps or informs.
Why this is correct
Correct. For SNMPv3, the 'snmp-server host' command must include the username (and optionally the security level) to identify the user for trap or inform generation.
- ✗
SNMPv3 supports only the authPriv security level.
Why it's wrong here
Incorrect. SNMPv3 supports three security levels: noAuthNoPriv, authNoPriv, and authPriv.
Quick reference
Symmetric Encryption Algorithm Comparison
| Algorithm | Key Size | Block Size | Status | Notes |
|---|---|---|---|---|
| AES-128 | 128-bit | 128-bit | Current standard | NIST approved; WPA3, TLS |
| AES-256 | 256-bit | 128-bit | Current standard | Preferred for sensitive / govt data |
| 3DES | 112-bit effective | 64-bit | Deprecated (2023) | Replaced by AES |
| DES | 56-bit | 64-bit | Broken | Cracked in < 24 h; never deploy |
| ChaCha20 | 256-bit | Stream cipher | Current | TLS 1.3, WireGuard |
Go deeper
Related to this question
About these practice questions
This 300-410 question is part of Courseiva's 1,966-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 300-410 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 300-410 exam.