350-401 Question #1301: Real Exam Question with Answer & Explanation

Question

Refer to the exhibit. The DevOps team noticed missing NetFlow dataduring peak utilization times for remote branches. Which configuration allows for this issue to be minimized or resolved?

Options

• AChange the transport type from UDP to TCP.
• BConfigure NetFlow on the in and outbound directions
• CChange the flow monitor to IPv6 from IPv4.
• DConfigure long byte counters when specifying a flow record.

Explanation

To ensure comprehensive data collection and minimize missing NetFlow data during peak times, configure flow monitoring on both ingress and egress directions of an interface.

Common mistakes.

• A. Changing the transport type from UDP to TCP for NetFlow export is generally not recommended as UDP is more efficient for this purpose, and TCP would introduce overhead for retransmissions without directly addressing missing data.
• C. Changing the flow monitor to IPv6 from IPv4 only changes the IP address family being monitored, which is unrelated to ensuring all traffic is captured regardless of IP version.
• D. Configuring long byte counters in a flow record provides higher precision for traffic volume measurement but does not inherently ensure that all flows are captured in the first place.

Concept tested. NetFlow interface configuration for full visibility

Reference. https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/netflow/configuration/xe-16/nf-xe-16-book/nf-overview-xe.html

No community discussion yet for this question.