Which of the following are inband management tools that do not use encryption? (Select 3 choices.)
A.
SNMPv1
B.
SNMPv2
C.
SNMPv3
D.
Telnet
E.
SSH
Explanation:
Of the available choices, Simple Network Management Protocol version 1 (SNMPv1), SNMP version 2
(SNMPv2), and Telnet are all inband management tools that do not use encryption. Encryption is a method of
encoding network traffic so that it cannot be read intransit. Thus encryption can be used to defeat
eavesdropping attacks.
Simple Network Management Protocol (SNMP) is used to remotely monitor and manage network devices.
Telnet is used to create a terminal connection to remote devices. When a Cisco device is operating in its
normal state, another device can connect to it by using inband methods, such as virtual terminal (VTY)
application protocols.
Three versions of SNMP currently exist. SNMPv1 and SNMPv2 do not provide encryption? password
information, known as community strings, is sent as plain text with messages. SNMPv3 improves upon
SNMPv1 and SNMPv2 by providing encryption, authentication, and message integrity to ensure that the
messages are not tampered with during transmission.
Secure Shell (SSH) is a VTY protocol that can be used to securely replace Telnet. Telnet is considered to be an
insecure method of remote connection because it sends credentials over the network in clear text.
Therefore, you should replace Telnet with an encrypted application, such as SSH, where possible.Cisco: SNMP Configuration Guide, Cisco IOS XE Release 3SE (Catalyst 3850 Switches): Versions of SNMP
Cisco: Cisco Guide to Hardening IOS Devices: Use Secure Protocols When Possible