Quick Answer

The correct answer is to create an SNMPv3 user with authentication and privacy protocols. This is required because SNMPv3 operates under a User-Based Security Model (USM), which mandates both an authentication algorithm, such as SHA, to verify the user’s identity and a privacy algorithm, like AES, to encrypt the SNMP traffic. Without configuring both, the FortiGate cannot provide the integrity, authentication, and encryption that secure monitoring demands. On the Fortinet NSE 4 Network Security Professional exam, this concept tests your understanding of SNMPv3’s mandatory security levels versus the optional noAuthNoPriv or authNoPriv settings—a common trap is assuming authentication alone is sufficient. Remember the mnemonic “Auth then Priv” to recall that both layers must be enabled for full SNMPv3 security.