Cisco Exam 300-410 Topic 12 Question 74 Discussion

Actual exam question for Cisco's 300-410 exam

Question #: 74
Topic #: 12

Refer to the exhibit.

A junior engineer configured SNMP to network devices. Malicious users have uploaded different configurations to the network devices using SNMP and TFTP servers.

Which configuration prevents changes from unauthorized NMS and TFTP servers?

Aaccess-list 20 permit 10.221.10.11access-list 20 deny any log!snmp-server group NETVIEW v3 priv read NETVIEW access 20snmp-server group NETADMIN v3 priv read NETVIEW write NETADMIN access 20snmp-server community Cisc0Us3r RO 20snmp-server community Cisc0wrus3r RW 20snmp-server tftp-server-list 20

Baccess-list 20 permit 10.221.10.11access-list 20 deny any log!snmp-server group NETVIEW v3 priv read NETVIEW access 20snmp-server group NETADMIN v3 priv read NETVIEW write NETADMIN access 20snmp-server community Cisc0wrus3r RO 20snmp-server community Cisc0Us3r RW 20snmp-server tftp-server-list 20

Caccess-list 20 permit 10.221.10.11access-list 20 deny any log

Daccess-list 20 permit 10.221.10.11

Show Suggested Answer

Suggested Answer: C

by Elly at Aug 04, 2023, 08:20 PM

Limited Time Offer

25%

Off

Get Premium 300-410 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Ellsworth

2 months ago

Option D? Really? That's just letting the guy at 10.221.10.11 have full access. Might as well just give him the keys to the kingdom and call it a day. Option A is the way to go, even if the passwords are a bit questionable.

upvoted 0 times

Yasuko

2 days ago

We should always prioritize security over convenience when it comes to network configurations.

upvoted 0 times

...

Gracia

3 days ago

The passwords in Option A may not be the strongest, but at least it adds an extra layer of security.

upvoted 0 times

...

Shawnta

6 days ago

I agree, Option D is too permissive. We need to limit access to prevent unauthorized changes.

upvoted 0 times

...

Ty

2 months ago

Option A is definitely the best choice. It restricts access to only specific IP addresses.

upvoted 0 times

...

Sharika

2 months ago

Option B looks promising, but wait, did they swap the read and write communities? That's gonna cause some issues. I'd rather not risk it and go with Option A instead.

upvoted 0 times

Lyndia

1 months ago

User 2: Yeah, I noticed the mix-up in Option B too. Let's go with Option A to be safe.

upvoted 0 times

...

Lilli

2 months ago

User 1: I agree, Option A seems like the safer choice.

upvoted 0 times

...

Brandon

2 months ago

I'd go with Option C. Simple and straightforward, just the access-list to deny any unauthorized access. No need to complicate things with all those SNMP groups and passwords. Keep it simple, stupid!

upvoted 0 times

...

Glynda

2 months ago

I'm not sure, but I think option C might also work since it denies any unauthorized access. What do you think?

upvoted 0 times

...

Kent

2 months ago

I agree with Paola. Option A seems to be the most secure configuration to prevent changes from unauthorized servers.

upvoted 0 times

...

Margo

2 months ago

Option A looks good, it's got all the necessary access-list and SNMP configurations to prevent unauthorized access. But who came up with those passwords? Cisc0Us3r and Cisc0wrus3r? Seriously, they're not even trying to be secure!

upvoted 0 times