Refer to the exhibit. Network operations cannot read or write any configuration on the device with this configuration from the operations subnet. Which two configurations fix the issue? (Choose two.)
A.
Configure SNMP rw permission in addition to community ciscotest.
B.
Modify access list 1 and allow operations subnet in the access list.
C.
Modify access list 1 and allow SNMP in the access list.
D.
Configure SNMP rw permission in addition to version 1.
E.
Configure SNMP rw permission in addition to community ciscotest 1.
The way the question is set, there are no correct answers. Based on the configuration, the communicty is ciscotest1. There is no access list 1 in the configuration. None of the answers follow this setup. If there would be an space between ciscotest and 1, then A and B would be correct - IMO
For me A and B is correct.
Setup SNMP Community with access-list
The best current practices recommend applying Access Control Lists (ACLs) to community strings and ensuring that the requests community strings are not identical to notifications community strings. Access lists provide further protection when used in combination with other protective measures.
This example sets up ACL to community string:
access-list 1 permit 1.1.1.1
snmp-server community string1 ro 1
Ref: https://www.cisco.com/c/en/us/support/docs/ip/simple-network-management-protocol-snmp/20370-snmpsecurity-20370.html
Answer E - Configure SNMP rw permission in addition to community ciscotest 1 <--- ACL number
Answer B - So "Modify access list 1 (<---ACL from answer E) and allow operations subnet in the access list."
We need rw permission against community string cisco and not cisco 1 (whereas 1 is the access-list). So A is the one ansewr.
For the second one , I chose B.
A & B in my opinion.
B and E is correct, but only dependent if the question the syntax is ok:
snmp-server community cisco test (don't have acl)
or
snmp-server community cisco test 1 (different before, have acl)
The question is written wrong.
It's snmp-server community ciscotest 1 where 1 is the ACL, otherwise the question does not make sense.
Taking the correction in account, the correct answer is A and B, because RO/RW are referenced before the ACL in the sintax, so answer E is wrong.
Based on this, password "ciscotest" + ACL 1.
https://www.cisco.com/c/en/us/support/docs/ip/simple-network-management-protocol-snmp/13506-snmp-traps.html#anc13
snmp-server community (community-string)
snmp-server host x.x.x.x (community-string, same as in snmp-server community)
In this case, the community-string = "ciscotest"
If the output and E) contain community string ciscotest and access-list number 1, then BE is the closest for me. Probably they meant something like this:
#access-list 1 permit <operations subnet>
#snmp-server community ciscotest RW 1
This section is not available anymore. Please use the main Exam Page.300-410 Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
DaanB
Highly Voted 4 years, 2 months agoanonymous1966
Highly Voted 4 years, 11 months agokukurikapu
Most Recent 1 week, 4 days ago1chung
3 months, 1 week agoUglaJohn
3 months, 2 weeks ago[Removed]
11 months, 1 week agoDefilet
1 year, 1 month agoMJM1973
1 year, 6 months agoChiaretta
1 year, 11 months agointeldarvid
1 year, 11 months agopotato_inet0
2 years, 1 month agoMalasxd
2 years, 1 month agoHungarianDish_111
2 years agoHungarianDish_111
2 years, 1 month agoDacusai
2 years, 1 month agoforccnp
2 years, 3 months agoforccnp
2 years, 3 months agoNoproblem22
2 years, 7 months ago