mediumMultiple ChoiceObjective-mapped
SSCP Practice Question: During a security audit, it is discovered that a…
During a security audit, it is discovered that a legacy system uses SNMPv1 for network monitoring. Which of the following is the primary security concern?
⚠ Common exam trap
Candidates often confuse 'no access control' (Option C) with the lack of authentication, but SNMPv1 does have community strings as a form of access control; the real issue is that these strings are transmitted in cleartext, making them easily intercepted.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Community strings transmitted in cleartext
SNMPv1 transmits community strings (effectively passwords) in cleartext over the network. An attacker capturing network traffic can directly read the community string and gain unauthorized access to SNMP-managed devices. This lack of confidentiality is the primary security concern because it exposes the entire monitoring infrastructure to compromise.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Weak hashing
Why it's wrong here
SNMPv1 does not use hashing for authentication; it uses plaintext community strings.
- ✓
Community strings transmitted in cleartext
Why this is correct
The community string serves as a password and is sent in plaintext, allowing interception and unauthorized access.
- ✗
No access control
Why it's wrong here
Access control is limited, but the primary security weakness is the plaintext community string.
- ✗
Lack of encryption
Why it's wrong here
Although SNMPv1 lacks encryption, the more critical issue is the clear-text transmission of authentication credentials.
Go deeper
Related to this question
About these practice questions
This SSCP question is part of Courseiva's 920-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SSCP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SSCP exam.