If you are using SNMP for network management, you must make sure that?
A.
Configure SNMP for write-only community strings.
B.
Configure SNMP for read-only community strings.
C.
The access to the device you wish to manage is limited to one management host.
D.
Turn off logging.
Explanation:
When the community string is compromised, an attacker could reconfigure the device if read-write access via SNMP is allowed. Therefore, it is recommended that you configure SNMP with only read-only community strings.
Ref: Safe White papers 72
SAFE: Extending the Security Blueprint to Small, Midsize, and Remote-User Networks