SNMP Troubleshooting practice questions

A network engineer notices that an SNMPv3 poll from the NMS to router R1 fails with an authentication error. The engineer has configured 'snmp-server group ADMIN v3 priv' and 'snmp-server user admin ADMIN v3 auth sha cisco123 priv aes 128 cisco456'. The NMS is configured with the same credentials. What is the most likely cause of the failure?

Trap 1: The SNMP user password must be at least 8 characters; 'cisco123' is…

Incorrect because SNMPv3 passwords do not have a minimum length of 12; 8 characters is acceptable for SHA.

Trap 2: The NMS is using SNMPv2c, which is incompatible with SNMPv3…

Incorrect because the symptom is an authentication error, not a version mismatch; version mismatch would show a different error.

Trap 3: The 'priv' keyword in the group definition should be 'auth' instead…

Incorrect because 'priv' in the group defines the security level; the user can have 'priv' even if the group is set to 'priv'.

A
The SNMP group is missing the 'access' ACL that permits the NMS IP address.
Correct because SNMPv3 requires an access list on the group to allow the NMS; without it, the NMS is denied despite correct credentials.
B
The SNMP user password must be at least 8 characters; 'cisco123' is only 8, but the hash algorithm requires a minimum of 12 characters.
Why wrong: Incorrect because SNMPv3 passwords do not have a minimum length of 12; 8 characters is acceptable for SHA.
C
The NMS is using SNMPv2c, which is incompatible with SNMPv3 configuration.
Why wrong: Incorrect because the symptom is an authentication error, not a version mismatch; version mismatch would show a different error.
D
The 'priv' keyword in the group definition should be 'auth' instead to match the user's authentication settings.
Why wrong: Incorrect because 'priv' in the group defines the security level; the user can have 'priv' even if the group is set to 'priv'.

Study the full ACL explanation →

Question 2mediummultiple choice

An engineer is troubleshooting why the NMS is not receiving SNMP traps from router R2. The configuration includes 'snmp-server enable traps', 'snmp-server host 10.1.1.100 version 2c public', and an extended ACL 100 that permits UDP port 162 from 10.1.1.100. The NMS can ping R2. What is the most likely cause?

Trap 1: The 'snmp-server host' command is missing the 'trap' keyword,…

Incorrect because 'snmp-server host' defaults to traps; no keyword is needed.

Trap 2: The community string 'public' is case-sensitive; the NMS is using…

Incorrect because case sensitivity would cause authentication failure, but the NMS can ping, and the issue is likely ACL-related.

Trap 3: The router needs the 'snmp-server trap-source' command to specify…

Incorrect because while trap-source can help, it is not required; the default source IP is the outgoing interface IP.

A
The ACL is applied inbound on the interface, but it should be applied outbound to allow trap packets to leave the router.
Correct because traps are sent from the router; the ACL must permit outbound UDP port 162 to the NMS, not inbound.
B
The 'snmp-server host' command is missing the 'trap' keyword, causing the router to send informs instead.
Why wrong: Incorrect because 'snmp-server host' defaults to traps; no keyword is needed.
C
The community string 'public' is case-sensitive; the NMS is using 'Public' with a capital P.
Why wrong: Incorrect because case sensitivity would cause authentication failure, but the NMS can ping, and the issue is likely ACL-related.
D
The router needs the 'snmp-server trap-source' command to specify the source interface for traps.
Why wrong: Incorrect because while trap-source can help, it is not required; the default source IP is the outgoing interface IP.

Question 3easymultiple choice

A network engineer configures SNMPv2c on router R3 with 'snmp-server community cisco RO' and 'snmp-server community cisco RW'. The NMS can poll read-only data but fails when trying to write a configuration value. The NMS uses the RW community string. What is the most likely cause?

Trap 1: The NMS is sending the community string in uppercase, but the…

Incorrect because community strings are case-sensitive, but the NMS would fail for both RO and RW if case mismatched.

Trap 2: The router needs the 'snmp-server enable traps' command to allow…

Incorrect because enabling traps is unrelated to write access.

Trap 3: The NMS must use SNMPv3 for write operations; SNMPv2c does not…

Incorrect because SNMPv2c supports write operations with the RW community.

A
The community string 'cisco' is used for both RO and RW; the router applies the first matching community, which is RO.
Correct because identical community strings cause the router to use the RO access, preventing writes.
B
The NMS is sending the community string in uppercase, but the router expects lowercase.
Why wrong: Incorrect because community strings are case-sensitive, but the NMS would fail for both RO and RW if case mismatched.
C
The router needs the 'snmp-server enable traps' command to allow write operations.
Why wrong: Incorrect because enabling traps is unrelated to write access.
D
The NMS must use SNMPv3 for write operations; SNMPv2c does not support writes.
Why wrong: Incorrect because SNMPv2c supports write operations with the RW community.

Question 4mediummultiple choice

An engineer is troubleshooting why the NMS is not receiving SNMP traps for interface up/down events on router R4. The configuration includes 'snmp-server enable traps snmp linkdown linkup' and 'snmp-server host 10.1.1.200 version 2c public'. The NMS can receive other traps from R4. What is the most likely cause?

Trap 1: The NMS is configured to filter out link up/down traps, so they are…

Incorrect because the NMS receives other traps, indicating the issue is on the router side.

Trap 2: The router needs the 'snmp-server trap-source' command to specify…

Incorrect because other traps are received, so trap-source is not the issue.

Trap 3: The 'snmp-server host' command must include the 'udp-port' option…

Incorrect because the default UDP port for traps is 162, so that is not required.

A
The engineer combined 'linkdown' and 'linkup' in a single command; they must be configured as separate 'snmp-server enable traps' commands.
Correct because the IOS syntax requires separate commands for each trap type; combining them is invalid.
B
The NMS is configured to filter out link up/down traps, so they are not displayed.
Why wrong: Incorrect because the NMS receives other traps, indicating the issue is on the router side.
C
The router needs the 'snmp-server trap-source' command to specify the loopback interface for traps.
Why wrong: Incorrect because other traps are received, so trap-source is not the issue.
D
The 'snmp-server host' command must include the 'udp-port' option to specify port 162.
Why wrong: Incorrect because the default UDP port for traps is 162, so that is not required.

Study the full ACL explanation →

Question 5hardmultiple choice

A network engineer is troubleshooting why the NMS cannot poll SNMP data from router R5. The router has 'snmp-server community cisco RO' configured. The NMS is on subnet 192.168.1.0/24, and the router has an ACL applied to the VTY lines that permits only 10.0.0.0/8. The NMS can ping the router. What is the most likely cause?

Trap 1: The VTY ACL is blocking SNMP packets because SNMP uses TCP port 161.

Incorrect because SNMP uses UDP port 161, not TCP, and VTY ACLs only affect Telnet/SSH.

Trap 2: The router needs the 'snmp-server ifindex persist' command to…

Incorrect because ifindex persist is for interface indexing, not for basic polling.

Trap 3: The NMS is using SNMPv3, but the router only has SNMPv2c configured.

Incorrect because the router has an SNMPv2c community; if the NMS uses v3, it would need a user configuration.

A
The engineer applied an ACL to the SNMP community that denies the NMS subnet, but the VTY ACL is unrelated.
Correct because the community string's ACL must permit the NMS; the VTY ACL does not affect SNMP.
B
The VTY ACL is blocking SNMP packets because SNMP uses TCP port 161.
Why wrong: Incorrect because SNMP uses UDP port 161, not TCP, and VTY ACLs only affect Telnet/SSH.
C
The router needs the 'snmp-server ifindex persist' command to enable polling.
Why wrong: Incorrect because ifindex persist is for interface indexing, not for basic polling.
D
The NMS is using SNMPv3, but the router only has SNMPv2c configured.
Why wrong: Incorrect because the router has an SNMPv2c community; if the NMS uses v3, it would need a user configuration.

Question 6hardmultiple choice

An engineer is troubleshooting why SNMPv3 informs are not being received by the NMS from router R6. The configuration includes 'snmp-server group ADMIN v3 priv', 'snmp-server user admin ADMIN v3 auth sha cisco123 priv aes 128 cisco456', and 'snmp-server host 10.1.1.100 informs version 3 priv admin'. The NMS can receive SNMPv3 traps from other routers. What is the most likely cause?

Trap 1: The 'snmp-server host' command should use 'traps' instead of…

Incorrect because SNMPv3 supports both traps and informs; the command syntax is valid.

Trap 2: The router needs the 'snmp-server enable informs' command globally.

Incorrect because 'snmp-server host informs' enables informs; no separate global command is needed.

Trap 3: The SNMPv3 user must have the 'auth' privilege instead of 'priv' to…

Incorrect because informs can use any security level; 'priv' is acceptable.

A
The NMS is not configured to respond to SNMP informs, so the router does not receive acknowledgment.
Correct because informs require an acknowledgment; if the NMS does not support it, informs fail.
B
The 'snmp-server host' command should use 'traps' instead of 'informs' for SNMPv3.
Why wrong: Incorrect because SNMPv3 supports both traps and informs; the command syntax is valid.
C
The router needs the 'snmp-server enable informs' command globally.
Why wrong: Incorrect because 'snmp-server host informs' enables informs; no separate global command is needed.
D
The SNMPv3 user must have the 'auth' privilege instead of 'priv' to send informs.
Why wrong: Incorrect because informs can use any security level; 'priv' is acceptable.

Question 7mediummultiple choice

A network engineer is troubleshooting why the NMS cannot poll the CPU utilization of router R7 via SNMP. The router has 'snmp-server community cisco RO' configured. The NMS can poll interface statistics and routing table entries successfully. What is the most likely cause?

Trap 1: The router needs the 'snmp-server enable traps cpu' command to…

Incorrect because that command enables CPU traps, not polling; polling is independent.

Trap 2: The NMS is using an incorrect OID for CPU utilization; the correct…

Incorrect because the NMS can poll other OIDs, so it is likely using the correct OID; the issue is on the router side.

Trap 3: The router's CPU is not supported for SNMP polling due to hardware…

Incorrect because most Cisco routers support CPU polling via SNMP.

A
The engineer configured an SNMP view that excludes the CPU utilization OID tree.
Correct because an SNMP view can restrict access to specific MIB objects; if the view does not include the CPU OIDs, polling fails.
B
The router needs the 'snmp-server enable traps cpu' command to allow CPU polling.
Why wrong: Incorrect because that command enables CPU traps, not polling; polling is independent.
C
The NMS is using an incorrect OID for CPU utilization; the correct OID is in the CISCO-PROCESS-MIB.
Why wrong: Incorrect because the NMS can poll other OIDs, so it is likely using the correct OID; the issue is on the router side.
D
The router's CPU is not supported for SNMP polling due to hardware limitations.
Why wrong: Incorrect because most Cisco routers support CPU polling via SNMP.

Question 8easymultiple choice

An engineer is troubleshooting why the NMS is not receiving SNMP traps from router R8 after a recent configuration change. The engineer added 'snmp-server host 10.1.1.100 version 2c public' and 'snmp-server enable traps' but forgot to remove the old 'snmp-server host 10.1.1.200 version 2c public' command. The NMS at 10.1.1.100 can receive traps from other devices. What is the most likely cause?

Trap 1: The old 'snmp-server host' command for 10.1.1.200 is causing a…

Incorrect because multiple host commands are allowed and do not conflict.

Trap 2: The engineer needs to remove the old host command before adding the…

Incorrect because the new host command works independently; removal is not required.

Trap 3: The router requires a reload after adding a new 'snmp-server host'…

Incorrect because SNMP configuration takes effect immediately.

A
The engineer did not configure the SNMP community string 'public' on the router.
Correct because the 'snmp-server host' command references a community string that must be defined; without it, traps are not sent.
B
The old 'snmp-server host' command for 10.1.1.200 is causing a conflict, preventing traps to the new host.
Why wrong: Incorrect because multiple host commands are allowed and do not conflict.
C
The engineer needs to remove the old host command before adding the new one.
Why wrong: Incorrect because the new host command works independently; removal is not required.
D
The router requires a reload after adding a new 'snmp-server host' command.
Why wrong: Incorrect because SNMP configuration takes effect immediately.

Question 9mediummultiple choice

An engineer is troubleshooting why the NMS is receiving duplicate SNMP traps from router R9 for the same event. The router has two 'snmp-server host' commands pointing to the same NMS IP address but with different community strings: 'public' and 'private'. The NMS is configured to process traps from both communities. What is the most likely cause?

Trap 1: The NMS is configured to listen on two different ports, causing…

Incorrect because the NMS listens on a single port; the router sends to the same port.

Trap 2: The router has an SNMP trap filter that is misconfigured, causing…

Incorrect because trap filters suppress traps, not duplicate them.

Trap 3: The engineer enabled both 'snmp-server enable traps' and…

Incorrect because traps and informs are different; the host commands specify which type.

A
The router sends one trap per 'snmp-server host' command, resulting in duplicate traps for the same event.
Correct because each host command generates a separate trap; using two communities causes duplication.
B
The NMS is configured to listen on two different ports, causing duplicate reception.
Why wrong: Incorrect because the NMS listens on a single port; the router sends to the same port.
C
The router has an SNMP trap filter that is misconfigured, causing the same trap to be sent twice.
Why wrong: Incorrect because trap filters suppress traps, not duplicate them.
D
The engineer enabled both 'snmp-server enable traps' and 'snmp-server enable informs', causing duplicate notifications.
Why wrong: Incorrect because traps and informs are different; the host commands specify which type.

Question 10mediummultiple choice

A network engineer runs the following command on Router R1:

R1# show snmp community

Community name: PUBLIC Community Index: PUBLIC Permission: read-only View: v1default Community name: PRIVATE Community Index: PRIVATE Permission: read-write View: v1default Community name: MONITOR Community Index: MONITOR Permission: read-only View: restricted

Based on this output, which statement is correct?

Trap 1: The 'PUBLIC' community can be used to modify router configurations.

The 'PUBLIC' community has read-only permission, so it cannot modify configurations.

Trap 2: The 'PRIVATE' community uses a view named 'restricted'.

The 'PRIVATE' community uses the view 'v1default', not 'restricted'.

Trap 3: All three communities have the same access rights.

The 'PRIVATE' community has read-write access, while 'PUBLIC' and 'MONITOR' are read-only.

A
The 'MONITOR' community may not have access to any MIB objects if the 'restricted' view is not configured.
If the view 'restricted' is not defined, SNMP requests using the 'MONITOR' community will fail or return no data.
B
The 'PUBLIC' community can be used to modify router configurations.
Why wrong: The 'PUBLIC' community has read-only permission, so it cannot modify configurations.
C
The 'PRIVATE' community uses a view named 'restricted'.
Why wrong: The 'PRIVATE' community uses the view 'v1default', not 'restricted'.
D
All three communities have the same access rights.
Why wrong: The 'PRIVATE' community has read-write access, while 'PUBLIC' and 'MONITOR' are read-only.

Question 11mediummultiple choice

A network engineer runs the following command on Router R1:

R1# show snmp user

User name: monitor Engine ID: 800000090300001122334455 storage-type: nonvolatile Authentication Protocol: MD5 Privacy Protocol: DES Group-name: readonly

User name: admin Engine ID: 800000090300AABBCCDDEEFF storage-type: nonvolatile Authentication Protocol: SHA Privacy Protocol: AES256 Group-name: admin

Based on this output, which statement is correct?

Trap 1: The 'admin' user can only read MIB objects.

The group name 'admin' suggests read-write access, but the actual permissions depend on the group configuration, which is not shown.

Trap 2: Both users use the same engine ID.

The engine IDs are different: '800000090300001122334455' vs '800000090300AABBCCDDEEFF'.

Trap 3: The 'monitor' user cannot authenticate because MD5 is not supported.

MD5 is still supported, though deprecated; authentication will work.

A
The 'monitor' user uses deprecated authentication and privacy protocols.
MD5 and DES are deprecated in favor of SHA and AES due to security vulnerabilities.
B
The 'admin' user can only read MIB objects.
Why wrong: The group name 'admin' suggests read-write access, but the actual permissions depend on the group configuration, which is not shown.
C
Both users use the same engine ID.
Why wrong: The engine IDs are different: '800000090300001122334455' vs '800000090300AABBCCDDEEFF'.
D
The 'monitor' user cannot authenticate because MD5 is not supported.
Why wrong: MD5 is still supported, though deprecated; authentication will work.

Question 12easymultiple choice

A network engineer runs the following command on Router R1:

R1# show snmp mib ifmib ifindex

ifIndex: 1

Interface: GigabitEthernet0/0

Description: GigabitEthernet0/0

ifIndex: 2

Interface: GigabitEthernet0/1

Description: GigabitEthernet0/1

ifIndex: 3

Interface: Loopback0

Description: Loopback0

ifIndex: 10

Interface: Tunnel0

Description: Tunnel0

Based on this output, which statement is correct?

Trap 1: The ifIndex values are assigned sequentially starting from 0.

The ifIndex values start from 1 and are not necessarily sequential (note the jump to 10).

Trap 2: GigabitEthernet0/0 has ifIndex 2.

GigabitEthernet0/0 has ifIndex 1.

Trap 3: Tunnel0 has ifIndex 3.

Tunnel0 has ifIndex 10.

A
The ifIndex for Loopback0 is 3.
The output clearly shows Loopback0 with ifIndex 3.
B
The ifIndex values are assigned sequentially starting from 0.
Why wrong: The ifIndex values start from 1 and are not necessarily sequential (note the jump to 10).
C
GigabitEthernet0/0 has ifIndex 2.
Why wrong: GigabitEthernet0/0 has ifIndex 1.
D
Tunnel0 has ifIndex 3.
Why wrong: Tunnel0 has ifIndex 10.

Question 13mediummultiple choice

A network engineer runs the following command on Router R1:

R1# show snmp group

group name: readonly security model: v3 security level: authNoPriv context: <none> read view: iso write view: <none> notify view: <none>

Group name: admin security model: v3 security level: authPriv context: <none> read view: iso write view: iso notify view: iso

Based on this output, which statement is correct?

Trap 1: The 'admin' group requires only authentication, not encryption.

The security level 'authPriv' requires both authentication and privacy (encryption).

Trap 2: The 'readonly' group can send SNMP traps.

The notify view is <none>, so no traps are sent for this group.

Trap 3: Both groups have the same security level.

'readonly' uses authNoPriv, while 'admin' uses authPriv.

A
The 'readonly' group can read all MIB objects because its read view is 'iso'.
The read view 'iso' typically includes the entire MIB tree, allowing read access to all objects.
B
The 'admin' group requires only authentication, not encryption.
Why wrong: The security level 'authPriv' requires both authentication and privacy (encryption).
C
The 'readonly' group can send SNMP traps.
Why wrong: The notify view is <none>, so no traps are sent for this group.
D
Both groups have the same security level.
Why wrong: 'readonly' uses authNoPriv, while 'admin' uses authPriv.

Question 14easymultiple choice

A network engineer runs the following command on Router R1:

R1# show snmp engineID

Local SNMP engineID: 800000090300001122334455 Local SNMP engineBoots: 5

Based on this output, which statement is correct?

Trap 1: The engine ID is 800000090300001122334455, which is the default for…

The engine ID is typically based on the MAC address or configured manually; it is not a default for all devices.

Trap 2: The engineBoots value is used for SNMPv2c community authentication.

engineBoots is used for SNMPv3, not v2c.

Trap 3: The engine ID must be the same on all devices in the network.

Each SNMP engine must have a unique engine ID.

A
The SNMP engine has rebooted 5 times.
The engineBoots value of 5 indicates the engine has been restarted 5 times.
B
The engine ID is 800000090300001122334455, which is the default for all Cisco devices.
Why wrong: The engine ID is typically based on the MAC address or configured manually; it is not a default for all devices.
C
The engineBoots value is used for SNMPv2c community authentication.
Why wrong: engineBoots is used for SNMPv3, not v2c.
D
The engine ID must be the same on all devices in the network.
Why wrong: Each SNMP engine must have a unique engine ID.

Question 15mediummultiple choice

A network engineer runs the following command on Router R1:

R1# show snmp host

Host: 192.168.1.100 Port: 162 Timeout: 1.5 seconds Retries: 3 Version: 2c Community: PUBLIC

Host: 192.168.1.200 Port: 162 Timeout: 3 seconds Retries: 5 Version: 3 User: admin Security level: authPriv

Based on this output, which statement is correct?

Trap 1: Both hosts use the same SNMP version.

One uses version 2c, the other version 3.

Trap 2: The host at 192.168.1.100 uses SNMPv3 with user 'admin'.

192.168.1.100 uses version 2c with community 'PUBLIC'.

Trap 3: Traps to 192.168.1.200 will be sent with community string 'admin'.

SNMPv3 uses users and security levels, not community strings.

A
SNMP traps sent to 192.168.1.200 will be encrypted.
The security level 'authPriv' requires both authentication and privacy (encryption).
B
Both hosts use the same SNMP version.
Why wrong: One uses version 2c, the other version 3.
C
The host at 192.168.1.100 uses SNMPv3 with user 'admin'.
Why wrong: 192.168.1.100 uses version 2c with community 'PUBLIC'.
D
Traps to 192.168.1.200 will be sent with community string 'admin'.
Why wrong: SNMPv3 uses users and security levels, not community strings.

Question 16hardmultiple choice

A network engineer runs the following command on Router R1:

R1# show snmp statistics

SNMP packets input: 150

Bad SNMP version errors: 0 Unknown community name: 25 Illegal operation for community name: 0 Encoding errors: 0 Number of requested variables: 300 Number of altered variables: 0 Get-request PDUs: 120 Get-next PDUs: 30 Set-request PDUs: 0

SNMP packets output: 200

Too big errors: 0

No such name errors: 10

Bad values errors: 0 General errors: 0 Response PDUs: 200 Trap PDUs: 0

Based on this output, which statement is correct?

Trap 1: The router has sent 150 trap PDUs.

The 'Trap PDUs' counter is 0, meaning no traps were sent.

Trap 2: There were 10 set requests that failed due to bad values.

Set-request PDUs are 0, so no set requests were received.

Trap 3: The router received 200 SNMP packets.

The router received 150 packets (SNMP packets input: 150).

A
There are 25 SNMP requests with invalid community strings.
The 'Unknown community name' counter of 25 indicates that many requests used community strings not recognized by the router.
B
The router has sent 150 trap PDUs.
Why wrong: The 'Trap PDUs' counter is 0, meaning no traps were sent.
C
There were 10 set requests that failed due to bad values.
Why wrong: Set-request PDUs are 0, so no set requests were received.
D
The router received 200 SNMP packets.
Why wrong: The router received 150 packets (SNMP packets input: 150).

Question 17easymultiple choice

A network engineer runs the following command on Router R1:

R1# show snmp mib

MIB: IF-MIB MIB: SNMPv2-MIB MIB: IP-MIB MIB: CISCO-CONFIG-MAN-MIB MIB: ENTITY-MIB

Based on this output, which statement is correct?

Trap 1: The router does not support the IF-MIB.

IF-MIB is listed, so it is supported.

Trap 2: The router only supports Cisco proprietary MIBs.

Standard MIBs like IF-MIB, SNMPv2-MIB, and IP-MIB are also supported.

Trap 3: The ENTITY-MIB is used for entity authentication.

ENTITY-MIB provides information about physical entities (chassis, modules), not authentication.

A
The router supports monitoring of configuration changes via SNMP.
CISCO-CONFIG-MAN-MIB provides objects to monitor configuration changes.
B
The router does not support the IF-MIB.
Why wrong: IF-MIB is listed, so it is supported.
C
The router only supports Cisco proprietary MIBs.
Why wrong: Standard MIBs like IF-MIB, SNMPv2-MIB, and IP-MIB are also supported.
D
The ENTITY-MIB is used for entity authentication.
Why wrong: ENTITY-MIB provides information about physical entities (chassis, modules), not authentication.

Review the full OSPF breakdown →

Question 18mediummultiple choice

A network engineer runs the following command on Router R1:

R1# show snmp trap

SNMP Trap: enabled

Trap receiver: 192.168.1.100 Community: PUBLIC Version: 2c UDP port: 162

Enable traps: snmp, interface, bgp

Trap receiver: 192.168.1.200 Community: PRIVATE Version: 2c UDP port: 162

Enable traps: snmp, ospf

Based on this output, which statement is correct?

Trap 1: Both receivers will receive OSPF traps.

Only the second receiver (192.168.1.200) has 'ospf' enabled.

Trap 2: The traps are sent using SNMPv3.

Both receivers use version 2c.

Trap 3: Interface traps are sent to 192.168.1.200.

Interface traps are enabled only for 192.168.1.100.

A
BGP traps will be sent to 192.168.1.100 but not to 192.168.1.200.
The first receiver has 'bgp' in its enable traps list, while the second does not.
B
Both receivers will receive OSPF traps.
Why wrong: Only the second receiver (192.168.1.200) has 'ospf' enabled.
C
The traps are sent using SNMPv3.
Why wrong: Both receivers use version 2c.
D
Interface traps are sent to 192.168.1.200.
Why wrong: Interface traps are enabled only for 192.168.1.100.

Question 19mediummultiple choice

snmp-server community public RO\nsnmp-server community private RW\nsnmp-server location DataCenter\nsnmp-server contact admin@example.com

What is the effect of this configuration?

Trap 1: SNMPv3 is enabled with authentication.

No SNMPv3 configuration is present; only community strings for SNMPv2c are configured.

Trap 2: Only read-only access is allowed using the 'private' community.

The 'private' community is configured with read-write access.

Trap 3: SNMP traps are enabled to the location DataCenter.

The 'snmp-server location' command only sets a descriptive string, it does not enable traps.

A
SNMPv3 is enabled with authentication.
Why wrong: No SNMPv3 configuration is present; only community strings for SNMPv2c are configured.
B
SNMPv2c is enabled with read-only community 'public' and read-write community 'private'.
The 'snmp-server community' commands define SNMPv2c community strings with specified access levels.
C
Only read-only access is allowed using the 'private' community.
Why wrong: The 'private' community is configured with read-write access.
D
SNMP traps are enabled to the location DataCenter.
Why wrong: The 'snmp-server location' command only sets a descriptive string, it does not enable traps.

Question 20mediummultiple choice

snmp-server group MyGroup v3 priv\nsnmp-server user MyUser MyGroup v3 auth sha MyPassword priv aes 128 MyPrivKey

What is missing from this SNMPv3 configuration?

Trap 1: The authentication protocol should be MD5 instead of SHA.

SHA is a valid authentication protocol for SNMPv3.

Trap 2: The privacy password must be at least 16 characters long.

There is no universal minimum length; it depends on the configuration, but this is not a missing element.

Trap 3: The user must be configured under a different group name.

The user is correctly associated with the existing group.

A
The group is missing a view definition to allow access to MIB objects.
By default, an SNMPv3 group without a view has no access to MIB objects; a view must be configured using 'snmp-server view' and associated with the group.
B
The authentication protocol should be MD5 instead of SHA.
Why wrong: SHA is a valid authentication protocol for SNMPv3.
C
The privacy password must be at least 16 characters long.
Why wrong: There is no universal minimum length; it depends on the configuration, but this is not a missing element.
D
The user must be configured under a different group name.
Why wrong: The user is correctly associated with the existing group.