hardMultiple ChoiceObjective-mapped
How to Interpret show snmp group Output for SNMPv3
A network engineer runs the following command to troubleshoot SNMPv3 group configuration:
R1# show snmp group
group name: admin-group security model: v3 auth priv read view: v1default write view: v1default notify view: v1default
Group name: monitor-group security model: v3 auth no priv read view: v1default write view: none notify view: v1default
What does this output indicate?
Quick Answer
The answer is that the 'admin-group' requires both authentication and encryption, while 'monitor-group' requires only authentication. This is correct because the security model field in the show snmp group output directly specifies the SNMPv3 security level: "auth priv" means authentication with privacy (encryption), whereas "auth no priv" means authentication only, without encryption. Additionally, the write view of "v1default" for admin-group grants full read-write access, while "none" for monitor-group restricts it to read-only. On the Cisco CCNP ENARSI 300-410 exam, interpreting this output tests your ability to differentiate SNMPv3 security levels and group permissions, a common trap being to confuse "auth no priv" with no security at all—remember that "auth no priv" still requires a username and password, just no encryption. A helpful memory tip is to think of "priv" as "private key" for encryption: if you see "priv," data is encrypted; if you see "no priv," data is sent in the clear but still authenticated.
⚠ Common exam trap
Cisco often tests the distinction between 'auth priv' and 'auth no priv' by presenting output where candidates mistakenly assume both groups require encryption, or confuse 'write view: none' with having write access.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The 'admin-group' requires authentication and encryption, while 'monitor-group' requires only authentication.
The output shows that 'admin-group' uses security model 'v3 auth priv', which requires both authentication and encryption (privacy). 'monitor-group' uses 'v3 auth no priv', which requires authentication but no encryption. This matches option A exactly.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
The 'admin-group' requires authentication and encryption, while 'monitor-group' requires only authentication.
Why this is correct
admin-group uses 'auth priv' (auth + encryption), monitor-group uses 'auth no priv' (auth only).
- ✗
Both groups require authentication and encryption.
Why it's wrong here
monitor-group does not require encryption.
- ✗
The 'monitor-group' has read-write access.
Why it's wrong here
write view is 'none', so read-only.
- ✗
The groups use SNMPv2c security model.
Why it's wrong here
The security model is v3.
Go deeper
Related to this question
About these practice questions
Courseiva writes every 300-410 question from scratch — 1,966 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
Same concept, more angles
1 more way this is tested on 300-410
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. A network engineer runs the following command on Router R1: R1# show snmp group group name: readonly security model: v3 security level: authNoPriv context: <none> read view: iso write view: <none> notify view: <none> Group name: admin security model: v3 security level: authPriv context: <none> read view: iso write view: iso notify view: iso Based on this output, which statement is correct?
medium- ✓ A.The 'readonly' group can read all MIB objects because its read view is 'iso'.
- B.The 'admin' group requires only authentication, not encryption.
- C.The 'readonly' group can send SNMP traps.
- D.Both groups have the same security level.
Why A: The 'readonly' group has a read view set to 'iso', which corresponds to the entire ISO OID tree (1.3.6.1). This means the group can read all MIB objects accessible under that subtree, effectively granting full read access to all standard SNMP MIBs.
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 300-410 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 300-410 exam.