MCQs

Disclaimer:

Educational Use Only:

The website links provided are to be used strictly for educational and knowledge-gaining purposes only.

No Misuse:

Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.

Respect for Websites and Businesses:

Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.

Acknowledge Value of Knowledge:

Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.

No Endorsement:

The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.

User Responsibility:

By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.

1. Which SNMP version is considered the most secure for network management?
   a. SNMPv1
   b. SNMPv2c
   c. SNMPv3
   d. SNMPv2
   Answer: c. SNMPv3automationcommunity+2
2. What feature in SNMPv3 prevents unauthorized access to network devices?
   a. Community strings
   b. Authentication
   c. Traps
   d. Bulk requests
   Answer: b. Authenticationtechnichegroup+2
3. Which security aspect is enhanced in SNMPv3 compared to previous versions?
   a. Data encryption
   b. Trap forwarding
   c. MIB browsing
   d. OID allocation
   Answer: a. Data encryptionnotes.networklessons+2
4. What component does SNMPv3 use to verify the integrity of transferred messages?
   a. Ping
   b. Cryptographic checksum
   c. Packet sniffers
   d. VLAN tagging
   Answer: b. Cryptographic checksumtechnichegroup+1
5. Which algorithm is commonly used for authentication in SNMPv3?
   a. DES
   b. SHA
   c. RC4
   d. Blowfish
   Answer: b. SHAitglue+2
6. SNMPv3 employs which encryption algorithm for privacy?
   a. RC4
   b. AES
   c. RSA
   d. ECC
   Answer: b. AESnotes.networklessons+2
7. What is the function of VACM in SNMPv3?
   a. User registration
   b. View-based access control
   c. Dynamic IP allocation
   d. Network address translation
   Answer: b. View-based access controlgeeksforgeeks+2
8. How does SNMPv3’s User-Based Security Model (USM) strengthen security?
   a. Allows passwordless login
   b. Uses user authentication and privacy
   c. Enables telnet access
   d. Allows direct database edits
   Answer: b. Uses user authentication and privacysnmp+2
9. Which best practice secures SNMP community strings?
   a. Enable SNMP on all interfaces
   b. Use strong, randomly generated strings
   c. Use default ‘public’ and ‘private’
   d. Share strings across all devices
   Answer: b. Use strong, randomly generated stringsmsp360+2
10. Which protocol port does SNMP normally use for queries?
    a. TCP 80
    b. UDP 161
    c. TCP 25
    d. UDP 53
    Answer: b. UDP 161msp360+1
11. What is the benefit of restricting SNMP to trusted IP ranges?
    a. Improves SNMP throughput
    b. Blocks unauthorized management queries
    c. Allows wider public monitoring
    d. Reduces device power consumption
    Answer: b. Blocks unauthorized management queriescisco+1
12. What should be done to SNMP agents not in use?
    a. Disable them
    b. Assign public strings
    c. Set to default configuration
    d. Enable verbose logging
    Answer: a. Disable themsolutions.netreo+2
13. What does ‘NoAuthNoPriv’ in SNMPv3 mean?
    a. No authentication and no encryption
    b. Authentication only
    c. Encryption only
    d. Both authentication and encryption
    Answer: a. No authentication and no encryptiongeeksforgeeks+1
14. When using SNMPv3 with ‘AuthNoPriv’, what feature is provided?
    a. No authentication
    b. Authentication, but no encryption
    c. Both authentication and encryption
    d. Encryption only
    Answer: b. Authentication, but no encryptionnotes.networklessons+1
15. ‘AuthPriv’ in SNMPv3 signifies what?
    a. Authenticated, encrypted communication
    b. Unauthenticated, unencrypted communication
    c. No authentication or encryption
    d. Only encryption
    Answer: a. Authenticated, encrypted communicationgeeksforgeeks+1
16. What is a recommended configuration action when implementing SNMPv3?
    a. Use default usernames
    b. Assign users to security groups
    c. Disable authentication
    d. Permit all IP addresses
    Answer: b. Assign users to security groupsitglue+1
17. What is a security risk with SNMPv1 and SNMPv2c?
    a. Lack of message privacy
    b. Too much bandwidth usage
    c. Complex configuration
    d. Excessive logging
    Answer: a. Lack of message privacyautomationcommunity+2
18. How can community strings be protected from interception?
    a. Use SNMPv1 exclusively
    b. Transmit them over encrypted channels
    c. Share them in plaintext emails
    d. Set them as ‘public’
    Answer: b. Transmit them over encrypted channelsrapid7+1
19. Which practice enhances SNMP security monitoring?
    a. Disable logging
    b. Monitor SNMP traffic for anomalies
    c. Ignore trap alerts
    d. Allow default community strings
    Answer: b. Monitor SNMP traffic for anomaliesmsp360
20. What is a key step in SNMP hardening?
    a. Enable SNMP on all ports
    b. Audit and classify SNMP-enabled endpoints
    c. Remove all SNMP agents
    d. Share credentials publicly
    Answer: b. Audit and classify SNMP-enabled endpointsmsp360
21. Which SNMPv3 command sets both authentication and privacy on Cisco IOS?
    a. snmp-server user … auth md5 priv aes
    b. snmp enable security
    c. enable encrypt snmp
    d. username add snmp
    Answer: a. snmp-server user … auth md5 priv aesnotes.networklessons
22. Why should SNMP not traverse the open Internet?
    a. SNMP is bandwidth-intensive
    b. Increases risk of eavesdropping and attacks
    c. SNMP is a proprietary protocol
    d. It only supports TCP
    Answer: b. Increases risk of eavesdropping and attackscisco+1
23. What security challenge is associated with SNMPv3 implementation?
    a. Configuration complexity
    b. Lack of vendor support
    c. Inability to encrypt data
    d. Limited compatibility with traps
    Answer: a. Configuration complexityitglue
24. Which access control feature does SNMPv3 provide?
    a. IPsec tunnels
    b. View-based access control
    c. Spanning-tree protocol
    d. Broadcast control
    Answer: b. View-based access controlitglue+1
25. Why is regular changing of community strings necessary?
    a. To increase network performance
    b. To minimize risk if compromised
    c. To enable SNMPv2c features
    d. To support MIB browsing
    Answer: b. To minimize risk if compromisedrapid7+1
26. Which security level should be used for highest SNMPv3 protection?
    a. NoAuthNoPriv
    b. AuthPriv
    c. AuthNoPriv
    d. ReadOnly
    Answer: b. AuthPrivgeeksforgeeks+1
27. SNMP management systems should be placed in which network segment?
    a. Management VLAN
    b. Public subnet
    c. DMZ
    d. External cloud
    Answer: a. Management VLANsolutions.netreo+1
28. Enabling SNMP trap destination filtering helps in
    a. Preventing irrelevant trap data
    b. Increasing bandwidth
    c. Boosting SNMP polling rate
    d. Disabling logging
    Answer: a. Preventing irrelevant trap dataauvik
29. The default SNMPv2c community strings are
    a. ‘public’ and ‘private’
    b. ‘user’ and ‘admin’
    c. ‘read’ and ‘write’
    d. ‘test’ and ‘trap’
    Answer: a. ‘public’ and ‘private’rapid7+1
30. SNMP MIB defines
    a. Managed objects
    b. Device MAC addresses
    c. VLAN IDs
    d. IPsec sessions
    Answer: a. Managed objectstechnichegroup+1
31. Why should physical security measures be combined with SNMP security?
    a. SNMP cannot prevent physical breaches
    b. Physical access can override SNMP restrictions
    c. SNMP disables device ports
    d. SNMP enables software upgrades
    Answer: b. Physical access can override SNMP restrictionscisco+1
32. Which mechanism strengthens SNMP message integrity?
    a. Message authentication codes
    b. Plaintext transmission
    c. Telnet session
    d. Default credentials
    Answer: a. Message authentication codestechnichegroup+1
33. SNMP security vulnerabilities are most commonly exploited by
    a. Unauthorized network scans
    b. Excessive SNMP polling rates
    c. Trap destination overflow
    d. ARP spoofing
    Answer: a. Unauthorized network scansmsp360
34. What should be logged for effective SNMP event monitoring?
    a. Trap messages
    b. All syslog messages
    c. HTTP requests
    d. ICMP timeouts
    Answer: a. Trap messagesauvik+1
35. When should SNMPv3 be piloted?
    a. After full rollout on routers
    b. First on non-critical devices
    c. Before VLAN segmentation
    d. Only on firewalls
    Answer: b. First on non-critical devicesmsp360
36. What does the ‘priv’ security level in SNMPv3 configure?
    a. Encryption of the SNMP packet
    b. Device MAC address filtering
    c. Disables authentication
    d. Enables hardware interrupts
    Answer: a. Encryption of the SNMP packetnotes.networklessons+1
37. Which is a recommended SNMPv3 authentication protocol?
    a. SHA
    b. DES
    c. TLS
    d. ECC
    Answer: a. SHAtechnichegroup+2
38. SNMP can be used to monitor which device type?
    a. Switches
    b. Servers
    c. Routers
    d. All of the above
    Answer: d. All of the aboveitglue+2
39. Limiting SNMP traffic with ACLs provides
    a. Increased security
    b. Higher SNMP polling frequency
    c. Reduced logging
    d. Expanded broadcast domains
    Answer: a. Increased securitycisco+1
40. Which SNMPv3 component manages access rights for users?
    a. View-based Access Control Model (VACM)
    b. RFC1918 model
    c. OSPF neighbor filter
    d. BGP policy map
    Answer: a. View-based Access Control Model (VACM)snmp+2
41. If SNMP is not required, network security best practice is
    a. Disable SNMP
    b. Keep it running with default strings
    c. Allow public Internet SNMP requests
    d. Enable verbose logging
    Answer: a. Disable SNMPsolutions.netreo+2
42. Why is encryption essential for SNMP messages?
    a. Prevents message interception and tampering
    b. Increases device uptime
    c. Allows SNMP access for all users
    d. Boosts network bandwidth
    Answer: a. Prevents message interception and tamperingtechnichegroup+2
43. Which SNMP trap destination configuration improves incident response?
    a. Filtering and specifying relevant destinations
    b. Allowing all hosts unlimited access
    c. Using default SNMPv1 traps
    d. Disabling trap logging
    Answer: a. Filtering and specifying relevant destinationsauvik
44. What type of network addresses should be whitelisted for SNMP polling?
    a. Trusted management engine IPs
    b. All Internet IP addresses
    c. Broadcast addresses
    d. Guest VLAN addresses
    Answer: a. Trusted management engine IPscisco+1
45. What method is used to classify SNMP device criticality?
    a. Audit and sort by firmware age
    b. Enable SNMP on all devices
    c. Power off unused switches
    d. Increase VLAN size
    Answer: a. Audit and sort by firmware agemsp360
46. SNMPv3 message privacy is achieved by
    a. AES and DES encryption
    b. MD5 signing only
    c. Default community string modification
    d. Removing all SNMP traps
    Answer: a. AES and DES encryptionnotes.networklessons+2
47. What is the core improvement in SNMPv3?
    a. Authentication and encryption
    b. Rapid MIB browsing
    c. UDP port flexibility
    d. Device MAC address learning
    Answer: a. Authentication and encryptiongeeksforgeeks+2
48. Which protocol is recommended for strong SNMP payload encryption?
    a. AES
    b. DES
    c. RC4
    d. MD5
    Answer: a. AESitglue+2
49. What should be periodically reviewed to maintain SNMP security?
    a. SNMP scan results
    b. Device MAC tables
    c. VLAN segment counts
    d. ARP cache size
    Answer: a. SNMP scan resultsmsp360
50. How does SNMPv3 guarantee message integrity?
    a. Cryptographic checksums and user authentication
    b. Plain password authentication
    c. Telnet-based verification
    d. Open relay testing
    Answer: a. Cryptographic checksums and user authenticationtechnichegroup+2

1. https://automationcommunity.com/snmp-questions-and-answers/
2. https://technichegroup.com/why-snmpv3-matters-enhancing-network-monitoring-security/
3. https://www.itglue.com/blog/what-is-snmpv3/
4. https://www.geeksforgeeks.org/computer-networks/overview-of-snmpv3/
5. https://notes.networklessons.com/snmp-version-3-security-levels
6. https://snmp.com/snmpv3/snmpv3_intro.shtml
7. https://www.msp360.com/resources/blog/common-snmp-security-vulnerabilities/
8. https://rapid7.com/blog/post/2016/01/27/simple-network-management-protocol-snmp-best-practices/
9. https://www.cisco.com/c/en/us/support/docs/ip/simple-network-management-protocol-snmp/20370-snmpsecurity-20370.html
10. https://solutions.netreo.com/docs/snmp-security-best-practices
11. https://www.auvik.com/franklyit/blog/snmp-traps/
12. https://www.sanfoundry.com/computer-networks-questions-answers-snmp/
13. https://examradar.com/network-management-snmp-mcq-data-communication-networking/
14. https://www.sanfoundry.com/computer-network-questions-answers-snmp-management/
15. https://www.placementpreparation.io/mcq/computer-network/page/5/
16. https://networkwalks.com/snmp-quiz-online/
17. http://verticalhorizons.in/wp-content/uploads/2011/09/Multiple-Choice-Questions-on-NMSEMS-SNMP.pdf
18. https://edurev.in/test/7077/Test-SNMP-Application-Layer
19. https://www.scribd.com/document/260955921/MULTIPLE-CHOICE-QUESTIONS-WITH-ANSWERS-ON-NETWORK-MANAGEMENT-SYSTEMS
20. https://mcqslearn.com/cs/computer-networks/snmp-protocol.php