SolarWinds Certified Professional (SCP) — Question 1

Refer to the following configuration snippet of a Cisco IOS router: snmp-server community private RO 60 snmp-server host 192.168.15.4 private access-list 60deny 192.168.12.0 255.255.240.0 access-list 60 permit snmp 192.168.15.4
The network management system (NMS) IP address is 192.168.15.4, and it is receiving SNMP traps from the router, but it is not able to poll the router.
Why is the NMS unable to poll the router?

Answer options

• A. SNMP is not enabled on the router.
• B. No public community string is configured.
• C. The access-list is denying SNMP access from the NMS.
• D. The NMS requires a read-write community string.

Correct answer: C

Explanation

The correct answer is C because the access-list explicitly denies SNMP access from the NMS's IP address. Option A is incorrect as SNMP is enabled since traps are being sent. Option B is not the issue since the private community string is configured. Option D is irrelevant as the NMS is supposed to have read-only access with the private community string.