What does SNMP stand for?
SNMP stands for Simple Network Management Protocol. A protocol for monitoring and managing network devices. Use SNMPv3, which adds authentication and encryption; v1 and v2c use plaintext community strings.
SNMP is the protocol monitoring systems use to read the state of network devices: interface counters, processor load, temperature, uptime. A manager polls an agent on each device over UDP port 161, and the agent can send unsolicited alerts, called traps, to the manager on UDP port 162. Each value has an identifier in a tree called the MIB. Versions 1 and 2c protect access with a community string sent in clear text. Version 3 adds real authentication and encryption and is the one to use.
SNMP in practice: an example
A monitoring server polls every switch each minute and draws a graph of traffic per port. At 03:00 a power supply in a core switch fails. The switch does not wait for the next poll: it sends a trap, and the on-call engineer is paged within seconds.
What SNMP is confused with
SNMP vs syslog: what is the difference?
Syslog carries text log messages that a device chooses to send. SNMP lets a manager query specific numeric values on demand and receive traps about defined events.
SNMP vs SMTP: what is the difference?
The names look alike and nothing else does. SMTP transfers email between mail servers. SNMP monitors and manages network devices.
Which exams cover SNMP?
SNMP is on the official CompTIA acronym list for two of the four exams covered here.
- Security+ SY0-801: 4.4 (Security Operations).
- Network+ N10-009: 1.0 (Networking Concepts); 3.0 (Network Operations).
Each number is a CompTIA exam objective and the name in brackets is its domain. The exam puts the term in a scenario; it does not ask you to recite the expansion.
Check yourself: two practice questions
Written by CertSprint for this page. They are not taken from any exam.
1. A network administrator must monitor switches without exposing credentials or data on the network. Which SNMP version should be used?
- Version 1
- Version 2c
- Version 3
- Any version, since they are equivalent
Show the answer
C. Version 3. Version 3 adds authentication and encryption. Versions 1 and 2c send the community string in clear text.
2. A router must notify the monitoring system the moment an interface goes down, without waiting to be polled. What does it send?
- An SNMP trap
- A DHCP offer
- An ARP request
- A DNS zone transfer
Show the answer
A. An SNMP trap. A trap is an unsolicited message from the agent to the manager about an event. Polling would only discover the failure at the next interval.
Sources: RFC 3411: An Architecture for Describing Simple Network Management Protocol (SNMP) Management Frameworks; RFC 3414: User-based Security Model (USM) for SNMPv3; NIST glossary: Simple Network Management Protocol. The acronym and its expansion come from CompTIA's official acronym lists, linked from each exam glossary above. The explanation, example and questions are CertSprint's own, checked against these sources on 11 November 2026.