Exam 300-410 topic 1 question 177 discussion

For me A and B is correct. Setup SNMP Community with access-list The best current practices recommend applying Access Control Lists (ACLs) to community strings and ensuring that the requests community strings are not identical to notifications community strings. Access lists provide further protection when used in combination with other protective measures. This example sets up ACL to community string: access-list 1 permit 1.1.1.1 snmp-server community string1 ro 1 Ref: https://www.cisco.com/c/en/us/support/docs/ip/simple-network-management-protocol-snmp/20370-snmpsecurity-20370.html

The way the question is set, there are no correct answers. Based on the configuration, the communicty is ciscotest1. There is no access list 1 in the configuration. None of the answers follow this setup. If there would be an space between ciscotest and 1, then A and B would be correct - IMO

AB are the best answers

Answer E - Configure SNMP rw permission in addition to community ciscotest 1 <--- ACL number Answer B - So "Modify access list 1 (<---ACL from answer E) and allow operations subnet in the access list."

A & B are correct but there must be a space in the exhibit between the community ciscotest and the access list number 1

We need rw permission against community string cisco and not cisco 1 (whereas 1 is the access-list). So A is the one ansewr. For the second one , I chose B. A & B in my opinion.

CORRECT ANSWER B and E access-list 10 deny any snmp-server host 10.1.1.1 mystring1 snmp-server community mystring1 RO 10

A and B are correct but missing the space on the question ciscotest 1, where 1 is the ACL number.

B and E is correct, but only dependent if the question the syntax is ok: snmp-server community cisco test (don't have acl) or snmp-server community cisco test 1 (different before, have acl)

The question is written wrong. It's snmp-server community ciscotest 1 where 1 is the ACL, otherwise the question does not make sense. Taking the correction in account, the correct answer is A and B, because RO/RW are referenced before the ACL in the sintax, so answer E is wrong.

The question here is. The community name is ciscotest1 or it is ciscotest and the number 1 at the end is the ACL?

If the output and E) contain community string ciscotest and access-list number 1, then BE is the closest for me. Probably they meant something like this: #access-list 1 permit <operations subnet> #snmp-server community ciscotest RW 1

B&E, the community name is ciscotest1, so E is the correct one, and add the subnet to the access list.

B and E are correct answers

B&E are correct answers

BE are the best answers

Answer A is correct not E. you CANNOT specify the rw parameter after the ACL R4(config)#snmp-server community ciscotest ? <1-99> Std IP accesslist allowing access with this community string <1300-1999> Expanded IP accesslist allowing access with this community string WORD Access-list name ipv6 Specify IPv6 Named Access-List ro Read-only access with this community string rw Read-write access with this community string view Restrict this community to a named MIB view <cr> <cr> R4(config)#snmp-server community ciscotest 1 ? <cr> <cr>