Exam 300-415 topic 1 question 165 discussion

Authentication Protocol Select the authentication mechanism for the user: SHA-1 message digest. SHA-256 message digest. Note Starting from Cisco SD-WAN Release 20.5.1, SHA-256 authentication protocol was introduced. When you choose SHA-256 as the authentication protocol, you must set the security level as authPriv.

B, C is Correct

SNMP v3: Add User Name* Enter a name of the SNMP user. It can be 1 to 32 alphanumeric characters. Authentication Protocol Choose the authentication mechanism for the user: md5 sha Authentication Password Enter the authentication password either in cleartext or as an AES-encrypted key. Privacy Protocol Choose the privacy type for the user. aes-cfb-128: Use Advanced Encryption Standard cipher algorithm used in cipher feedback mode, with a 128-bit key. This is a SHA-1 authentication protocol. Correct anser is B &E

Cisco should avoid such questions if authentication protocols changes over time. It just causes a misunderstanding a uncertainty .

SHA-1 message digest SHA-256 message digest Note: MD5 authentication protocol is deprecated for Cisco Catalyst SD-WAN Release 20.3.2 and later releases.

Table 20 in the link below https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/snmp/snmp-book/snmp-book_2.html#Cisco_Concept.dita_Configure-SNMPv3-on-IOS-XE-Devices-Using-Cisco-vManage

When configuring SNMPv3 monitoring on a WAN Edge router, the two algorithms commonly used for user authentication are: B. MD5 C. SHA-2 These algorithms are used to ensure the integrity and authenticity of SNMP messages exchanged between the SNMP manager (such as vManage NMS) and the managed device (WAN Edge router).

Choose the authentication mechanism for the user: *MD5 digest. (deprecate for release 20.3.2 and later) *SHA-1 message digest. *SHA-256 message digest.(start from release 20.5.1) according to these types and question. there is not sha-256 between options and must accept B&E

I'll go for SHA-1 and MD5 See Authentication Protocol https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/snmp/snmp-book/snmp-book_2.html#Cisco_Concept.dita_Configure-SNMPv3-on-IOS-XE-Devices-Using-Cisco-vManage

To confirm my fellow specialists

Everyone is all over the place. One big guessing game we have here. More lost now than when started with all this

B and E for me Section "Configure SNMPv3 on Cisco vEdge Devices Using Cisco SD-WAN Manager" Table 12 says: "Choose the authentication mechanism for the user: MD5 digest. SHA-1 message digest. SHA-256 message digest." For the sake of the test I'm assuming it doesn't matter that MD5 isn't used anymore because AES-128 and AES-256 are used for encryption and SHA-2 isn't an option. Source: https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/snmp/snmp-book/snmp-book_2.html#Cisco_Concept.dita_Configure-SNMPv3-on-IOS-XE-Devices-Using-Cisco-vManage

New version - Answer A & E

Answer is B & C according to Cisco white papers!

https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/snmp/snmp-book/snmp-book_2.html Choose the authentication mechanism for the user: MD5 digest. SHA-1 message digest. SHA-256 message digest. SHA-256 - introduced in 20.5.1 MD5 - depracated 20.3.2 Official Cisco SD-WAN course: https://www.cisco.com/c/en/us/training-events/training-certifications/training/training-services/courses/implementing-cisco-sd-wan-solutions-ensdwi.html The course lab environment is built using Cisco vEdge Cloud routers and Cisco SD-WAN 20.3 code. They use 20.3, so SHA-256 has not been there yet, I would go with MD5 and SHA-1, but IMO every combination SHA1/SHA2/MD5 is correct, it depends on the software version that you choose, so this question is really dumb and very Cisco-way of making exams.

Answer is A & E, FYI MD5 is deprecated for cisco SDWAN release 20.3.2

The link says it is SHA-2