Exam 350-201 topic 1 question 69 discussion

Actual exam question from Cisco's 350-201

Question #: 69
Topic #: 1

A customer is using a central device to manage network devices over SNMPv2. A remote attacker caused a denial of service condition and can trigger this vulnerability by issuing a GET request for the ciscoFlashMIB OID on an affected device. Which should be disabled to resolve the issue?

A. SNMPv2
B. TCP small services
C. port UDP 161 and 162
D. UDP small services

Show Suggested Answer

Suggested Answer: A 🗳️
Reference:
https://nvd.nist.gov/vuln/detail/CVE-2018-0161

by AlphaOne1 at June 28, 2022, 11:19 a.m.

Comments

Submit Cancel

DrVoIP

7 months, 2 weeks ago

A. SNMPv2 should be disabled to resolve the issue. The vulnerability is related to SNMPv2 and can be triggered by issuing a GET request for the ciscoFlashMIB OID. Disabling SNMPv2 or restricting access to SNMPv2 is the recommended solution.

upvoted 1 times

...