Ch 26 Flashcards

1
Q

Can an SNMP agent initiate communications with an SNMP manager?

A

yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What is the difference between a trap and an inform?

A

An inform has to be acknowledged by the SNMP manager or it will send it again. A trap does not.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Which community string is required for a ‘get’?

A

RO or RW

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

In SNMPv3 what kind of security protocols are supported for authentication?

A

Hash algorithms of SHA or MD5

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Which ‘show’ command primarily lists counters and status info rather than configuration information?

A

show snmp

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Can more than one source port be included in a single SPAN session?

A

yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Can a SPAN source include a switchport and a VLAN?

A

No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What is the default state of SNMP on a new device?

A

SNMP is disabled

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

How do you enable SNMPv2c?

A

Once the first ‘snmp-server’ command is entered SNMP becomes enabled

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

How do you disable SNMPv2c?

A

no snmp-server

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What is the command to enable RO SNMP along with an IPv6 ACL?

A

snmp-server community (string) ipv6 (acl_name)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What are the two commands needed to enable traps?

A
  • snmp-server host 172.19.26.86 version 2c (community) * snmp-server enable traps
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What are the two commands needed to enable informs?

A
  • snmp-server host 172.19.26.86 informs version 2c (community) * snmp-server enable traps
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What ‘show’ command repeats the community strings?

A

show snmp-server community

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What ‘show’ command lists the IP or hostname of the NMS?

A

show snmp-server host

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

In SNMPv3 what does the command ‘snmp-server group’ do?

A

It contains the security settings for a group of users

17
Q

In SNMPv3 what does the command ‘snmp-server user’ do?

A

creates an SNMP user and associates the user with the Group

18
Q

In SNMPv3 what does the keyword ‘noauth’ do?

A
  • checks message integrity * no authentication * no encryption
19
Q

In SNMPv3 what does the keyword ‘auth’ do?

A
  • checks message integrity * performs authentication * no encryption
20
Q

In SNMPv3 what does the keyword ‘priv’ do?

A
  • checks message integrity * performs authentication * performs encryption
21
Q

In SNMPv3 what command creates a group that requires authentication, is read-only, and has an ACL of SNMP_ACL?

A

snmp-server group myROgroup v3 auth access SNMP_ACL

22
Q

In SNMPv3 what command creates a group that requires authentication, encryption, is read-write and has an ACL of SNMP_ACL?

A

snmp-server group myRWgroup v3 priv write default1 access SNMP_ACL

23
Q

In SNMPv3 what encryption algorithms are supported?

A

DES, 3DES, AES

24
Q

In SNMPv3 what is the command to create a user who is a member of the myROgroup and uses MD5 password encryption?

A

snmp-server user myuser myROgroup v3 auth md5 AuthPassword

25
Q

In SNMPv3 what is the command to create a user who is a member of the myRWgroup, uses SHA password hash and 3DES encryption?

A

snmp-server user myuser myRWgroup v3 priv sha AuthPassword priv 3des EncryptKey

26
Q

What are 2 methods of Hash?

A

SHA and MD5

27
Q

What are 3 methods of encryption?

A

DES, 3DES, AES

28
Q

In SNMPv3 what are the 3 items in order to set up a read-only group with no authentication?

A
  • snmp-server group MyGroupName * v3 * noauth
29
Q

In SNMPv3 what are the 3 items in order to set up a user for the read-only group with no authentication?

A
  • snmp-server user MyUserName * MyGroupName * v3
30
Q

In SNMPv3 what is the format of the command for creating a read-write group?

A
  • snmp-server group MyGroupName * v3 * noauth | auth | priv * write default1
31
Q

In SNMPv3 what is the format of the command for creating a user for the read-write group?

A
  • snmp-server user MyUserName * MyGroupName * v3 * auth md5 | sha * MyPassword * priv des | 3des| aes * myEncryptKey
32
Q

In SNMPv3 how do you add an ACL to the SNMP agent?

A

add ‘access (myACL) to the end of the ‘snmp-server group’ statement

33
Q

In SNMPv3 what two ‘show’ commands allow you to verify the SNMP config?

A

show snmp group’ and ‘show snmp user’

34
Q

In SNMPv3 what is the command to enable traps?

A
  • snmp-server enable traps * snmp-server host 172.19.26.86 version 3 (auth | noauth | priv) myUserName * the noauth|auth|priv must match the setting in the group that myUserName is in
35
Q

In SNMPv3 what is the command to verify the traps or informs configuration?

A

show snmp host

36
Q

In SNMPv3 what is the command to enable informs?

A
  • snmp-server enable traps * snmp-server host 172.19.26.86 informs version 3 (auth | noauth | priv) myUserName * NOTE: the noauth|auth|priv must match the setting in the group that myUserName is in
37
Q

What 3 commands are the bare minimum for configuring an IP SLA ICMP probe?

A
  • ip sla 1 * icmp-echo 10.1.2.3 source-ip 11.1.2.3 * ip sla schedule 1 life forever start-time now
38
Q

What ‘show’ commands can be used with IP SLA?

A
  • show ip sla summary * show ip sla statistics 1 * show ip sla history
39
Q

What is the command to reset IP SLA counters?

A

ip sla restart (op_number)