Cisco Certified Network Associate (CCNA) Practice Exam

In SNMPv3, which feature enhances security compared to SNMPv2?

1. Community strings

2. Encryption

3. Inform protocol

4. Trap messages

The correct answer is: Encryption

Encryption is a key feature that enhances security in SNMPv3 compared to SNMPv2. In SNMPv2, communication between devices relies primarily on community strings for authentication, which are essentially plaintext passwords. This method lacks robust security as community strings can easily be intercepted. In contrast, SNMPv3 incorporates a more comprehensive security model that includes options for encryption of the SNMP messages themselves. This encryption secures the data being transmitted, making it significantly more difficult for unauthorized users to capture and read sensitive information, thus ensuring the confidentiality and integrity of data over the network. While the other options do describe elements of communication in SNMP, they do not contribute to security enhancements to the same extent as encryption does. For instance, community strings are a method of basic authentication but are not secure, as they can be easily compromised. The Inform protocol, on the other hand, is used for reliable message delivery but does not directly enhance security. Trap messages are notifications sent from an SNMP agent to a manager and likewise do not address security issues present in earlier versions.