Cisco Exam 300-410 Topic 12 Question 74 Discussion

Actual exam question for Cisco's 300-410 exam

Question #: 74
Topic #: 12

Refer to the exhibit.

A junior engineer configured SNMP to network devices. Malicious users have uploaded different configurations to the network devices using SNMP and TFTP servers.

Which configuration prevents changes from unauthorized NMS and TFTP servers?

Aaccess-list 20 permit 10.221.10.11access-list 20 deny any log!snmp-server group NETVIEW v3 priv read NETVIEW access 20snmp-server group NETADMIN v3 priv read NETVIEW write NETADMIN access 20snmp-server community Cisc0Us3r RO 20snmp-server community Cisc0wrus3r RW 20snmp-server tftp-server-list 20

Baccess-list 20 permit 10.221.10.11access-list 20 deny any log!snmp-server group NETVIEW v3 priv read NETVIEW access 20snmp-server group NETADMIN v3 priv read NETVIEW write NETADMIN access 20snmp-server community Cisc0wrus3r RO 20snmp-server community Cisc0Us3r RW 20snmp-server tftp-server-list 20

Caccess-list 20 permit 10.221.10.11access-list 20 deny any log

Daccess-list 20 permit 10.221.10.11

Show Suggested Answer

Suggested Answer: C

by Elly at Aug 04, 2023, 08:20 PM

Limited Time Offer

25%

Off

Get Premium 300-410 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Ellsworth

13 days ago

Option D? Really? That's just letting the guy at 10.221.10.11 have full access. Might as well just give him the keys to the kingdom and call it a day. Option A is the way to go, even if the passwords are a bit questionable.

upvoted 0 times

...

24 days ago

Option A looks good, it's got all the necessary access-list and SNMP configurations to prevent unauthorized access. But who came up with those passwords? Cisc0Us3r and Cisc0wrus3r? Seriously, they're not even trying to be secure!

upvoted 0 times

Elinore

13 hours ago

User2: I agree, it has the necessary configurations to prevent unauthorized access.

upvoted 0 times

...

Esteban

6 days ago

User1: Option A is the best choice here.

upvoted 0 times

...

Paola

30 days ago

I think the answer is A because it includes access-list to permit specific IP and deny any unauthorized access.

upvoted 0 times

...