What is the recommended if SNMP is used? (Choose two)
A.
Allow only the appropriate management hosts access to the device you wish to manage.
B.
Configure SNMP with write-only community strings.
C.
Configure SNMP with read-only community strings.
D.
Allow only the firewall access to the device you wish to manage.
E.
Allow only the router access to the device you wish to manage.
Explanation:
When the community string is compromised, an attacker could reconfigure the device if read-write access via SNMP is allowed. Therefore, it is recommended that you configure SNMP with only read-only community strings. You can further protect yourself by setting up access control on the device you wish to manage via SNMP to allow only the appropriate management hosts access.
Reference: SAFE: Extending the Security Blueprint to Small, Midsize, and Remote-User Networks Page 72