A network administrator at XYZ Corp notices unusual traffic from an external IP address targeting their network devices. Upon investigation, it is found that the attacker is using SNMP queries to gather information about routers and switches. The attacker successfully retrieves the ARP table and routing information. What is the MOST likely reason the attacker was able to enumerate SNMP successfully?
The SNMP service was disabled on all devices.
❌
The System doesn't use the antimalware
❌
The default community strings (e.g., "public") were not changed
✅
The Device using the SNMP v3
❌

Question

A network administrator at XYZ Corp notices unusual traffic from an external IP address targeting their network devices. Upon investigation, it is found that the attacker is using SNMP queries to gather information about routers and switches. The attacker successfully retrieves the ARP table and routing information. What is the MOST likely reason the attacker was able to enumerate SNMP successfully?

The SNMP service was disabled on all devices.

❌

The System doesn't use the antimalware

❌

The default community strings (e.g., "public") were not changed

✅

The Device using the SNMP v3

❌

Accepted Answer

The default community strings (e.g., "public") were not changed

Answer

The SNMP service was disabled on all devices.

Answer

The System doesn't use the antimalware

Answer

The Device using the SNMP v3

Crowdly

A network administrator at XYZ Corp notices unusual traffic from an external IP ...

Want instant access to all verified answers on moodle.polytechnic.bh?