Looking at the configuration, it seems that there are two SNMP community strings configured, "public" and "private". However, the configuration does not specify which community string is being used by the host with IP address 10.1.1.1.
The correct action to resolve this issue would be to configure a valid SNMP community string on the device from which the SNMP request is being made, and ensure that it matches the community string configured on the router.
https://www.routerfreak.com/what-to-do-about-snmp-3-authfail-messages/
this explains an incorrect community string or blocking ACL both result in the same IOS log message
as we can see the source ip address in the log message it must mean the used community string is incorrect
according to Almylle's link the log message will appear in both cases:
case1: the community string isnot valid or misconfigured
case 2 : the authentication configured on the host (the router) is wrong
but, also according to the link it will check the community string first then the authentication.
it's a tricky one indeed but if i faced it in the exam i will roll the dice with D as the community string validity will be checked first.
Authentication failure
This error message indicates that there was a problem with the authentication credentials used for SNMP (Simple Network Management Protocol) access. You may need to check the SNMP configuration on the router and ensure that the credentials are correct.
Taken from
https://community.cisco.com/t5/routing/snmp-3-authfail-snep-req-from-host/td-p/4792333
"Which action resolves the issue?" where exactly? On the router? Because we can do it by adding the 10.1.1.1 to ACL16. But if it's going to be on the 10.1.1.1 we can do it by matching the community.
snmp-server community public RO 5
snmp-server community private RW 6
!
! log incorrect SNMP Communities
!
logging snmp-authfail
!
! access-list for RO
!
access-list 5 permit 10.1.1.100
access-list 5 permit 10.1.1.101
!
! access-list for RW
!
access-list 6 permit 10.1.1.101
This is the configuration in the link and according to this we need to add the 10.1.1.1 to the ACL 16 to give the guy access for RW as well.
I'd go for A
This section is not available anymore. Please use the main Exam Page.300-410 Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Titini
Highly Voted 2 years, 2 months agoupp3r
Highly Voted 2 years, 1 month agojabal93
Most Recent 9 months, 1 week agojabal93
9 months, 1 week ago[Removed]
10 months agoDefilet
1 year agoBrand
1 year, 8 months agoguy276465281819372
1 year, 9 months agoAlmylle
1 year, 10 months agoBrand
1 year, 8 months agoforccnp
2 years, 2 months agoLilienen
2 years, 3 months ago