Exam 350-701 topic 1 question 81 discussion

Correct answer is D See: https://www.networkstraining.com/how-to-configure-snmp-on-cisco-asa-5500-firewall/ And: https://www.cisco.com/c/en/us/td/docs/security/asa/snmp/snmpv3_tools/snmpv3_1.html

https://www.cisco.com/c/en/us/td/docs/security/asa/asa-cli-reference/S/asa-command-ref-S/m_shox-sn.html#wp1203427780 D

D is correct

** CORRECT answer is D *** snmp-server host interface { hostname | ip_address } [ trap | poll ] [ community community-string ] [ version { 1 | 2c | 3 username }] [ udp-port port ]

ASA(config)# snmp-server host inside 10.255.254.1 version 3 ? configure mode commands/options: Current available user name(s): ASA(config)# snmp-server host inside 10.255.254.1 version 3 andy require "Current available user name(s):" so D is correct

D is correct

An attempt to add the SNMP server with the command on the ASA firewall: See what the firewall expect as the input fw(config)# snmp-server host inside 172.16.0.94 ver 3 ? configure mode commands/options: Current available user name(s): snmpuser

Anser D is correct. snmp-server enable traps ! ! …or insted select just some traps, for example: ! snmp-server enable traps envmon fan shutdown supply temperature status ospf cpu ! snmp-server group trapgroup v3 priv snmp-server user trapuser trapgroup v3 auth sha AuthPass priv 3des PrivPass snmp-server host 10.1.1.161 traps version 3 priv trapuser

The correct answer is D

100% D For community-string, when version 1 or version 2c is specified, enter the password-like community string sent with the notification operation. When version 3 is specified, enter the SNMPv3 username https://www.cisco.com/c/en/us/td/docs/routers/ir910/software/release/1_1/configuration/guide/ir910scg/swsnmp.html

Configuration Example of SNMP v3 Currently the most secure SNMP version is v3. To configure this version you need first to create an SNMP group, then an SNMP server and lastly a host (NMS) which will communicate with the firewall for management purposes. Let’s configure SNMP v3 with the example below: ASA(config)# snmp-server enable ASA(config)# snmp-server group snmpgroup v3 auth <- create v3 group with authentication ASA(config)# snmp-server user administrator snmpgroup v3 auth sha strongpass <- create user “administrator” belonging to group “snmpgroup” ASA(config)#snmp-server host inside 10.1.1.1 version 3 administrator <- specify the NMS host Correct answer is D, administrator here is equal to andy

You associate the SNMP host config with a user not a group. D is the correct answer

B is correct myv3 is the host, Andy is an user on host myv3