nerdexam
Cisco

200-201 · Question #117

Which IETF standard technology is useful to detect and analyze a potential security incident by recording session flows that occurs between hosts?

The correct answer is D. IPFIX. IPFIX (IP Flow Information Export) is an IETF standard that specifies the format for exporting network flow information, which is crucial for monitoring network traffic, detecting anomalies, and analyzing potential security incidents.

Submitted by saadiq_pk· Mar 6, 2026Security Monitoring

Question

Which IETF standard technology is useful to detect and analyze a potential security incident by recording session flows that occurs between hosts?

Options

  • ASFlow
  • BNetFlow
  • CNFlow
  • DIPFIX

How the community answered

(39 responses)
  • A
    3% (1)
  • B
    3% (1)
  • C
    5% (2)
  • D
    90% (35)

Why each option

IPFIX (IP Flow Information Export) is an IETF standard that specifies the format for exporting network flow information, which is crucial for monitoring network traffic, detecting anomalies, and analyzing potential security incidents.

ASFlow

sFlow is a sampling technology for network monitoring, but it is a multi-vendor standard initially developed by InMon, not an IETF standard like IPFIX, and relies on sampled data rather than comprehensive flow records.

BNetFlow

NetFlow is a Cisco-proprietary technology for collecting IP traffic information, while widely adopted, it is not an IETF standard itself; IPFIX is the IETF standard based on NetFlow concepts.

CNFlow

NFlow is not a recognized or standard network flow technology; it appears to be a fictitious option.

DIPFIXCorrect

IPFIX (IP Flow Information Export) is a standardized Internet Engineering Task Force (IETF) protocol (RFC 5101) for exporting network flow information, essentially a universal version of NetFlow. It allows network devices to collect and export data about IP traffic flows, which is then used by collectors for comprehensive network monitoring, security analysis, and incident detection by providing visibility into session flows between hosts.

Concept tested: Network flow monitoring standards (IPFIX)

Source: https://datatracker.ietf.org/doc/html/rfc5101

Topics

#IPFIX#NetFlow#network flow data#network monitoring standards

Community Discussion

No community discussion yet for this question.

Full 200-201 Practice