Part 3.2

Given a network environment, how would you use SNMP traps to detect unauthorized device access?

• By configuring SNMP traps to alert when unknown devices attempt to connect

• By disabling SNMP traps on all devices

• By only monitoring physical port status

• By using SNMP traps to block all network traffic

How can a Management Information Base (MIB) assist in network monitoring?

• By providing a structured database of network device information for SNMP queries

• By encrypting all network traffic

• By blocking unauthorized users from accessing the network

• By physically connecting devices

When comparing SNMP v2c and v3, how would you apply the correct version for a network requiring strong authentication?

• Use SNMP v3 for its enhanced authentication features

• Use SNMP v2c for its lack of authentication

• Use SNMP v1 for its simplicity

• Use SNMP v2c for its encryption capabilities

How would you utilize community strings in SNMP to improve network security?

• By setting unique, complex community strings for read and write access

• By using the default community string "public" for all devices

• By disabling community strings entirely

• By sharing community strings with all users

How can flow data be used to identify unusual network activity?

• By analyzing flow records for unexpected spikes in traffic or new communication patterns

• By only monitoring device uptime

• By ignoring flow data and focusing on packet headers

• By disabling flow data collection

What is an effective way to use packet capture to troubleshoot intermittent connectivity issues?

• Capture packets during the time of the issue and analyze for anomalies or errors

• Only capture packets when the network is idle

• Ignore packet capture and rely on user reports

• Capture packets from unrelated network segments

How would you establish baseline metrics for network performance?

• By collecting and averaging network performance data over a defined period under normal conditions

• By only recording data during outages

• By using random data points

• By ignoring historical data

How can anomaly alerting based on baseline metrics help in network monitoring?

• By notifying administrators when current metrics deviate significantly from established baselines

• By only alerting when the network is offline

• By ignoring all deviations

• By alerting for every packet sent

How would you use a syslog collector in a network monitoring solution?

• By aggregating logs from multiple devices for centralized analysis

• By deleting all logs after collection

• By only collecting logs from one device

• By disabling log collection

How can a Security Information and Event Management (SIEM) system enhance network monitoring?

• By correlating and analyzing security events from multiple sources in real time

• By only storing raw log files

• By ignoring security events

• By disabling event correlation