mediumMultiple ChoiceObjective-mapped
300-410 Practice Question: Runs the following command on Router R1: R1# show…
A network engineer runs the following command on Router R1:
R1# show snmp user
User name: monitor Engine ID: 800000090300001122334455 storage-type: nonvolatile Authentication Protocol: MD5 Privacy Protocol: DES Group-name: readonly
User name: admin Engine ID: 800000090300AABBCCDDEEFF storage-type: nonvolatile Authentication Protocol: SHA Privacy Protocol: AES256 Group-name: admin
Based on this output, which statement is correct?
⚠ Common exam trap
Cisco often tests the misconception that any protocol listed in the output is automatically secure, but the trap here is that MD5 and DES are explicitly deprecated in SNMPv3, and candidates may overlook the security implications of these legacy protocols.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The 'monitor' user uses deprecated authentication and privacy protocols.
The 'monitor' user is configured with MD5 for authentication and DES for privacy. Both MD5 and DES are considered deprecated in SNMPv3 due to known security vulnerabilities; RFC 3414 defines MD5 as a weaker authentication protocol, and DES (56-bit key) is no longer recommended for encryption. The output confirms these protocols are in use, making option A correct.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
The 'monitor' user uses deprecated authentication and privacy protocols.
Why this is correct
MD5 and DES are deprecated in favor of SHA and AES due to security vulnerabilities.
- ✗
The 'admin' user can only read MIB objects.
Why it's wrong here
The group name 'admin' suggests read-write access, but the actual permissions depend on the group configuration, which is not shown.
- ✗
Both users use the same engine ID.
Why it's wrong here
The engine IDs are different: '800000090300001122334455' vs '800000090300AABBCCDDEEFF'.
- ✗
The 'monitor' user cannot authenticate because MD5 is not supported.
Why it's wrong here
MD5 is still supported, though deprecated; authentication will work.
Quick reference
Symmetric Encryption Algorithm Comparison
| Algorithm | Key Size | Block Size | Status | Notes |
|---|---|---|---|---|
| AES-128 | 128-bit | 128-bit | Current standard | NIST approved; WPA3, TLS |
| AES-256 | 256-bit | 128-bit | Current standard | Preferred for sensitive / govt data |
| 3DES | 112-bit effective | 64-bit | Deprecated (2023) | Replaced by AES |
| DES | 56-bit | 64-bit | Broken | Cracked in < 24 h; never deploy |
| ChaCha20 | 256-bit | Stream cipher | Current | TLS 1.3, WireGuard |
Go deeper
Related to this question
About these practice questions
This 300-410 question is part of Courseiva's 1,966-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 300-410 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 300-410 exam.