📝 SNMP messages and PDUs (26 MCQs)
📖 From Data Communication and Networks • 27. Network Management • 26 questions available
What is SNMP messages and PDUs?
SNMP uses Protocol Data Units (PDUs) such as GetRequest, GetNextRequest, SetRequest, Response, and Trap to communicate between manager and agent; each PDU carries operation type, request ID, variable bindings, and optional error status to facilitate precise management actions.
📝 All SNMP messages and PDUs MCQs
Q1. What does SNMP stand for?
📖 Explanation: Simple Network Management Protocol is the standard name for SNMP, a protocol used to monitor and manage network devices. The other options are fabricated terms that do not correspond to the widely accepted definition, making option A the correct choice.
Q2. In SNMP, what is an OID?
📖 Explanation: An OID, or Object Identifier, uniquely identifies a managed object in the MIB hierarchy. The other choices are unrelated acronyms, so the correct answer is the one that defines the term used throughout SNMP specifications.
Q3. What does MIB represent in SNMP?
📖 Explanation: MIB stands for Management Information Base, a collection of object definitions used by SNMP to represent device information. The remaining options are invented and do not match the established meaning, so option A is correct.
Q4. If an SNMP manager sends a GetRequest to an agent that lacks the requested OID, what is the most likely response?
📖 Explanation: When an agent cannot locate the requested OID, it still replies with a GetResponse PDU, setting the error‑status field to a non‑zero value indicating \noSuchName\. This behavior is defined in the SNMP protocol, making option B correct.
Q5. When the SNMP community string is set to 'public', which of the following is most likely?
📖 Explanation: The default community string 'public' is conventionally used for read‑only operations, allowing managers to retrieve information but not modify it. Therefore, the expected effect is limited to read‑only access, corresponding to option A.
Q6. If an SNMP manager does not receive a response within the timeout period, it will retry up to the configured retry count. How does increasing the retry count affect network traffic?
📖 Explanation: Each retry generates an additional request packet, so raising the retry count adds more packets to the network, proportionally increasing traffic. The other options contradict the retry mechanism, making option B the accurate description.
Q7. When an SNMPv3 user is configured with authentication but no privacy, what is the impact on the confidentiality of transmitted data?
📖 Explanation: Authentication without privacy means the manager can verify the sender's identity, but the payload remains in clear text. Hence confidentiality is not protected, while integrity is, which matches option B.
Q8. If an SNMP manager requires acknowledgment of a notification, which type of message should it request from the agent, and why?
📖 Explanation: Inform messages are a variant of traps that require the manager to acknowledge receipt, ensuring reliable delivery. Traps do not provide acknowledgment, so the manager must request an Inform to guarantee confirmation, making option B correct.
Q9. Which scenario best illustrates why relying solely on SNMP traps may be insufficient for monitoring critical events?
📖 Explanation: Traps are sent asynchronously and can be dropped due to network congestion or agent failures. Consequently, critical events might be missed if traps are the only monitoring mechanism, which is why option B is the most accurate.
Q10. Which statement correctly differentiates SNMPv1 from SNMPv2c?
📖 Explanation: SNMPv2c introduced the GETBULK operation, allowing efficient retrieval of large tables, whereas SNMPv1 lacks this capability. The other statements describe features not introduced in those versions, so option A is correct.
Q11. What is the primary functional difference between SNMP GET and GETNEXT operations?
📖 Explanation: A GET request targets an exact OID supplied by the manager, while GETNEXT walks the MIB by returning the next OID after the one specified. Therefore, the key distinction is that GET is precise, matching option A.
Q12. In terms of network overhead, how does periodic SNMP polling compare to event‑driven SNMP traps for a large number of managed devices?
📖 Explanation: Polling requires the manager to send regular requests to every device, creating many packets, whereas traps are sent only when events occur. For many devices, this results in higher overall traffic for polling, so option C is correct.
Q13. Considering security, which SNMP version provides the strongest protection against eavesdropping and why?
📖 Explanation: SNMPv3 supports both authentication (auth) and privacy (priv) using cryptographic algorithms, encrypting the payload and preventing eavesdropping. Versions 1 and 2c lack encryption, and v3 with only auth does not hide data, making option C the best answer.
Q14. If an organization uses the default community string 'public' for all devices, what is the most likely security risk?
📖 Explanation: The default 'public' string grants read‑only access to anyone who knows it, allowing attackers to harvest configuration and status information. While it does not permit writes, the exposure of data is a significant risk, supporting option A.
Q15. When designing a custom MIB module for temperature sensors, which practice best ensures scalability?
📖 Explanation: Allocating a distinct subtree for each sensor (e.g., .1, .2, .3…) allows new devices to be added without renumbering existing OIDs, supporting scalable growth. The other approaches either limit expansion or introduce instability.
Q16. For retrieving a large table of interface statistics, which SNMP operation is most efficient and why?
📖 Explanation: GETBULK can return multiple rows in a single response, dramatically reducing the number of round‑trips compared with repeated GETNEXT calls. This efficiency makes it the preferred choice for large tables, so option C is correct.
Q17. How could an SNMP manager monitor the throughput of the TCP echo server described in the code snippet?
📖 Explanation: Embedding a custom MIB object that increments each time the server sends data provides a direct measure of throughput. The manager can poll this counter to obtain real‑time statistics, making option A the appropriate method.
Q18. If you wanted to integrate SNMP trap generation into the echo server after each successful echo, which architectural change is most appropriate?
📖 Explanation: Injecting a trap transmission immediately after the existing send() call preserves the server’s TCP behavior while providing asynchronous notifications to the manager. The other options either change the transport protocol or eliminate SNMP functionality.
Q19. Applying the principle of least privilege, how should community strings be configured for read‑only monitoring of the echo server?
📖 Explanation: Creating a dedicated read‑only community string (e.g., 'monitor') limits access to viewing data and prevents accidental modifications, aligning with the least‑privilege principle. Using the default 'public' for both read and write would violate this principle.
Q20. Design a scalable SNMP monitoring scheme for 500 echo servers distributed across subnets, ensuring minimal impact on network performance. Which combination is most effective?
📖 Explanation: SNMPv3 provides security, bulk retrieval reduces round‑trips, and inform messages guarantee delivery without overwhelming the network. This combination balances performance, reliability, and security across many devices, making option B optimal.
Q21. Which OID subtree would be most logical for grouping all echo server instances if the enterprise number is 12345?
📖 Explanation: Enterprise‑specific objects are placed under .1.3.6.1.4.1.<enterprise>. Assigning a dedicated branch (e.g., .1) for echo servers follows standard MIB structuring, making option A the most appropriate choice.
Q22. An organization mandates that all SNMP communications be encrypted. Which configuration satisfies this requirement while maintaining backward compatibility with legacy devices that only support SNMPv2c?
📖 Explanation: Implementing SNMPv3 with authentication and privacy meets encryption needs, and a translation gateway can expose v2c interfaces for legacy devices, preserving compatibility. The other options either lack encryption or eliminate SNMP entirely.
Q23. To ensure continuous monitoring despite occasional packet loss, which SNMP feature should be enabled on the manager?
📖 Explanation: Inform requests combine the asynchronous nature of traps with acknowledgment, allowing the manager to detect lost notifications and request retransmission. This provides resilience against packet loss, whereas the other options either reduce reliability or stop monitoring.
Q24. Which SNMP operation would you use to change the maximum buffer size of the echo server remotely?
📖 Explanation: The SET operation is designed to modify the value of a writable MIB object, such as a buffer size parameter. GET retrieves values, GETNEXT walks the tree, and INFORM sends notifications, so option B is correct.
Q25. If an SNMP manager does not receive a response within the timeout period, it will retry up to the configured retry count. How does increasing the retry count affect network traffic?
📖 Explanation: Each retry generates an additional request packet, so raising the retry count adds more packets to the network, proportionally increasing traffic. The other options contradict the retry mechanism, making option B the accurate description.
Q26. If an SNMP manager uses the community string 'private' for write access on a subset of devices, but the same string is also configured on other devices for read‑only, what is the most likely security implication?
📖 Explanation: Using the same community string for both read‑only and read‑write contexts creates ambiguity; agents that interpret 'private' as write‑enabled could permit unauthorized modifications across all devices, representing a significant security risk.