nerdexam
Cisco

210-255 · Question #180

Refer to the exhibit. Which item is depicted in this output?

The correct answer is B. NetFlow data. NetFlow data is a flow-level traffic summary format that captures IP address, port, protocol, and byte or packet count metadata without including actual packet payloads.

Security Monitoring

Question

Refer to the exhibit. Which item is depicted in this output?

Exhibit

210-255 question #180 exhibit

Options

  • AWindows Security audit log
  • BNetFlow data
  • Cpacket capture exported text
  • DVLAN 10 traffic

How the community answered

(33 responses)
  • A
    3% (1)
  • B
    85% (28)
  • C
    3% (1)
  • D
    9% (3)

Why each option

NetFlow data is a flow-level traffic summary format that captures IP address, port, protocol, and byte or packet count metadata without including actual packet payloads.

AWindows Security audit log

A Windows Security audit log uses Windows Event Log format with fields such as EventID, account names, logon types, and Security Identifier values, which are structurally different from the IP flow tuple format of NetFlow.

BNetFlow dataCorrect

NetFlow records are structured summaries exported by network devices that include fields such as source and destination IP addresses, source and destination port numbers, IP protocol, input and output interfaces, and traffic volume measured in bytes and packets. This tabular format of flow-level statistics without any raw payload content is the defining characteristic of NetFlow output and distinguishes it from full packet captures or application log entries.

Cpacket capture exported text

A packet capture exported as text would include complete packet headers and payload data rendered as hex dumps or ASCII characters, not just the high-level flow summary statistics that NetFlow provides.

DVLAN 10 traffic

VLAN 10 traffic is a traffic segmentation classification and not a distinct data output format - traffic from any VLAN can be represented in NetFlow records, packet captures, or device logs.

Concept tested: Identifying NetFlow data output format and fields

Source: https://www.cisco.com/c/en/us/products/ios-nx-os-software/ios-netflow/index.html

Topics

#NetFlow#traffic analysis#network monitoring#log identification

Community Discussion

No community discussion yet for this question.

Full 210-255 Practice