This enumerated value (yes, no, or ask) reports the device's SCP host-key validation policy: strict(yes) discards and aborts the copy if the SCP server's public key isn't already registered, no allows the device to register new host keys and proceed, and ask requires an interactive operator session and fails any non-interactive SNMP request. An admin uses this setting to control how strictly the device trusts new SCP server keys during file transfers. For example, setting this to yes would block an automated firmware copy from an SCP server whose key isn't already known to the device.