| Q1: | The SNMP protocol uses which transport protocol and which ports? |
| A1: | SNMP mostly uses UDP port 161; port 162 is used for SNMP traps. |
| Q2: | What is the name of the message that an agent can send in an unsolicited manner when an event occurs? |
| A2: | A trap message |
| Q3: | What layer of the TCP/IP model does RMON 1 address? |
| A3: | The Network Access layer |
| Q4: | What layers of the TCP/IP model does RMON 2 address? |
| A4: | RMON 2 addresses all layers of the protocol stack. |
| Q5: | I want to monitor cyclical changes in the traffic level on my network. Should I use SNMP or RMON? |
| A5: | SNMP is used primarily to monitor network devices. RMON captures data directly from the network media and therefore is usually a better choice for monitoring network traffic. |