What is the primary security risk in SNMP?
A.
Login names and passwords are not encrypted
B.
Damaging programs can be executed on the client
C.
Damaging programs can be executed on the server
D.
Passwords and Data is transferred in Cleartext
Explanation:
1D0-470
All data is transferred in cleartext. Not that we are discussing SNMP V1.
Incorrect Answers:
A: SNMP does not have login security at all. However, in place of a password, SNMP uses community names. You need to know the community name to gain access to the SNMP device. The community name, as well as the rest of the data, is in the clear. B, C: SNMP does provide for the execution of code on either the client or sever. There is a SNMP agent that runs on each device or node, but this is installed code which is not installed or modified unless actually doing maintenance on the node. It is not like sending a remote shell and executing programs.