Which SNMP version should be used for secure network monitoring?

Which SNMP version should be used for secure network monitoring?

• A. SNMP v3
• B. SNMP v1
• C. SNMP v2c
• D. TLS

Answer: (A)

Securing monitoring data hinges on authenticating who asks for information, ensuring the data isn’t tampered with, and keeping the payload private. SNMP v3 provides this through its User-based Security Model, which adds strong authentication and encryption options plus granular access control. This means you can verify the requester, protect the content of the SNMP messages, and restrict what data different users can read or modify. Older versions rely on community strings that are often sent in clear text, making them easy to sniff, spoof, or tamper with—risking both data confidentiality and integrity. TLS is a general transport security protocol, not an SNMP version; while you could wrap SNMP traffic in a TLS tunnel, the built-in security features of SNMP v3 are purpose-built for secure management. So, for secure network monitoring, SNMP v3 is the best choice.

Securing monitoring data hinges on authenticating who asks for information, ensuring the data isn’t tampered with, and keeping the payload private. SNMP v3 provides this through its User-based Security Model, which adds strong authentication and encryption options plus granular access control. This means you can verify the requester, protect the content of the SNMP messages, and restrict what data different users can read or modify.

Older versions rely on community strings that are often sent in clear text, making them easy to sniff, spoof, or tamper with—risking both data confidentiality and integrity. TLS is a general transport security protocol, not an SNMP version; while you could wrap SNMP traffic in a TLS tunnel, the built-in security features of SNMP v3 are purpose-built for secure management.

So, for secure network monitoring, SNMP v3 is the best choice.