Which two tasks are required for configuring SNMP to send traps on a Cisco IOS device?

Which two tasks are required for configuring SNMP to send traps on a Cisco IOS device? (Choose
two.)

Which two tasks are required for configuring SNMP to send traps on a Cisco IOS device? (Choose
two.)

A.
Create access controls for an SNMP community.

B.
Configure SNMP notifications.

C.
Configure the SNMP agent.

D.
Configure SNMP status monitoring and troubleshooting.

E.
Configure SNMP server group names.

F.
Configure the SNMP server engine ID.



Leave a Reply 3

Your email address will not be published. Required fields are marked *


Scooby

Scooby

The best current practices recommend applying Access Control Lists (ACLs) to community strings
and ensuring that the requests community strings are not identical to notifications community
strings. Access lists provide further protection when used in combination with other protective
measures.
This example sets up ACL to community string:
access-list 1 permit 1.1.1.1 snmp-server community string1 ro 1
A key feature of SNMP is the ability to generate notifications from an SNMP agent. These
notifications do not require that requests be sent from the SNMP manager. Unsolicited
(asynchronous) notifications can be generated as traps or inform requests. Traps are messages
alerting the SNMP manager to a condition on the network. Inform requests (informs) are traps that
include a request for confirmation of receipt from the SNMP manager. Notifications can indicate
improper user authentication, restarts, the closing of a connection, loss of connection to a
neighbor router, or other significant events.
Reference:
http://www.cisco.com/c/en/us/td/docs/ios/12_2/configfun/configuration/guide/ffun_c/fcf014.html#wp
1007320

Ranger99

Ranger99

Task A is not a valid answer as they ask about *required* tasks, not *best practices*.

Task B is the only really required task to do: snmp enable traps and snmp host a.b.c.d version community traps. These commands automatically enable SNMP agent, so there’s no need to do task C.

CCIE-recert

CCIE-recert

Agreed, A is best practice but NOT REQUIRED.

C says configure the agent. Not enable it. I suppose configure could mean defining trap destination and community strings. So although the agent is enabled by configuring notifications nothing else is configured. You need to configure the agent with any further info needed.

So for me B and C are correct but it’s all in the wording. I have no idea how someone who’s 1st language is not English manages to pick up on the slight differences the wording can make to these questions. A bit unfair in my opinion. Ask a simple question. Not one that needs you to interpret words in it.