Exam 350-501 All Questions

View all questions & answers for the 350-501 exam

Exam 350-501 topic 1 question 361 discussion

Actual exam question from Cisco's 350-501

Question #: 361
Topic #: 1

Refer to the exhibit. Over the last few months, ISP A has doubled its user base. The IT Director asked the engineering team to monitor memory consumption and buffer statistics on all P and PE devices in the MPLS core. Most devices have CPU usage of 70% or more, so the solution must be targeted and secure. Which two commands must the engineering team implement on P and PE devices to meet these requirements? (Choose two.)

A. snmp-server enable traps memory bufferpeak
B. snmp-server host 192.168.101.1 version 1 community1 auth memory
C. snmp-server enable snmp-traps community1 bufferpeak
D. snmp-server host 192.168.101.1 version 2c community1 memory
E. snmp-server host 192.168.101.1 version 3 auth community1 memory

Show Suggested Answer

Suggested Answer: AB 🗳️

by akm88 at Oct. 21, 2023, 2:48 p.m.

Comments

Submit Cancel

enco

10 months, 1 week ago

Selected Answer: AE

Only v3 can be considered secure. Syntax for option b doesnt exist: PE1(config)#snmp-server host 192.168.101.1 version 1 community1 a? aaa_server adslline alarms atm auth-framework PE1(config)#snmp-server host 192.168.101.1 version 1 community1 a

upvoted 1 times

...

Bandito

12 months ago

Selected Answer: AE

AE, Besides getting memory and bufferpeak traps, the solution must be secure, and only SNMP ver 3 gives you security

upvoted 1 times

...

sk84

1 year, 2 months ago

it should be A and E, option is the secure one by enabling snmpv3.

upvoted 3 times

cocopost

1 year, 1 month ago

https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/snmp/configuration/15-mt/snmp-15-mt-book/nm-snmp-memory-pool.html -Answer A is correct - its exactly as shown in the hyperlink - The syntax of answer E is correct from the document in the hyperlink. snmp-server host {hostname | ip-address} [traps | informs] [version {1 | 2c | 3 [auth | noauth | priv]}] community-string [udp-port port] [notification-type] [vrf vrf-name] - Answer B cannot be correct because auth keyword is only used in v3 - Answer D is syntactically correct, but it is not secure. - Answer E is syntactically correct, but the odd thing is that in v3 the username should follow keyword auth normally. -It makes you wonder if this is a trick question for v3 with username "community1" I vote for AE.

upvoted 1 times

cocopost

1 year, 1 month ago

Correction Answer E is syntactically correct with viewname following auth. Answer AE

upvoted 1 times

...

Martiian

1 year, 5 months ago

Shouldn't it be v2c? The question is asking for it to be secure. I thought v1 was insecure?

upvoted 1 times

...

lionelstuart

1 year, 6 months ago

This document refers to configure memory pool-snmp notification. (Option A) Security model: v1 ------> refers to snmp v1 (option B)

upvoted 2 times

...

akm88

1 year, 7 months ago

ab are right https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/snmp/configuration/15-mt/snmp-15-mt-book/nm-snmp-memory-pool.html

upvoted 1 times

cocopost

1 year, 1 month ago

Answer B looks syntactically wrong because keyword auth cannot be used with version 1 according to the syntax in the hyperlink.

upvoted 1 times

...