hardMultiple SelectObjective-mapped
300-410 Practice Question: Which TWO configuration steps are required to…
Which TWO configuration steps are required to enable SNMPv3 with authentication and encryption on a Cisco router? (Choose TWO.)
⚠ Common exam trap
Cisco often tests the distinction between the group-level security level and the user-level auth/priv parameters; the trap here is that candidates think only the user command is needed, forgetting that the group must first be configured with `priv` to allow the user to use encryption.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
snmp-server group GROUP v3 priv
The `snmp-server group GROUP v3 priv` command creates an SNMPv3 group that enforces the `priv` security level, which requires both authentication and encryption for all users in that group. This is the foundational step to enable SNMPv3 with auth and encryption, as the group defines the minimum security model (noAuthNoPriv, authNoPriv, or authPriv) that users must meet. Without this group configuration, users cannot be assigned the necessary privileges for encrypted communication.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
snmp-server group GROUP v3 priv
Why this is correct
Creates an SNMPv3 group with the 'priv' keyword to enable encryption.
- ✓
snmp-server user USER GROUP v3 auth sha PASSWORD priv aes 128 PASSWORD
Why this is correct
Creates a user with SHA authentication and AES 128 encryption.
- ✗
snmp-server community PUBLIC ro
Why it's wrong here
This is for SNMPv1/v2c community strings, not SNMPv3.
- ✗
snmp-server host 10.1.1.1 version 3 priv USER
Why it's wrong here
This configures a trap receiver, not the user/group authentication.
- ✗
snmp-server enable traps
Why it's wrong here
Enables trap generation, but is not required for SNMPv3 authentication/encryption.
Go deeper
Related to this question
About these practice questions
This 300-410 question is part of Courseiva's 1,966-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 300-410 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 300-410 exam.