nerdexam
Cisco

350-401 · Question #397

What are two features of NetFlow flow monitoring? (Choose two.)

The correct answer is C. Can track ingress and egress information D. Can be used to track multicast, MPLS, or bridged traffic.. NetFlow Flow Monitoring Explanation NetFlow is a Cisco network protocol that monitors IP traffic flows, and option C is correct because NetFlow can capture both ingress (incoming) and egress (outgoing) traffic on an interface, giving administrators a complete bidirectional view o

Submitted by carter_n· Mar 6, 2026Network Assurance

Question

What are two features of NetFlow flow monitoring? (Choose two.)

Options

  • ACopies all ingress flow information to an interface
  • BInclude the flow record and the flow importer
  • CCan track ingress and egress information
  • DCan be used to track multicast, MPLS, or bridged traffic.
  • EDoes not required packet sampling on interfaces

How the community answered

(38 responses)
  • A
    3% (1)
  • B
    3% (1)
  • C
    95% (36)

Explanation

NetFlow Flow Monitoring Explanation

NetFlow is a Cisco network protocol that monitors IP traffic flows, and option C is correct because NetFlow can capture both ingress (incoming) and egress (outgoing) traffic on an interface, giving administrators a complete bidirectional view of network flows. Option D is correct because NetFlow's monitoring capabilities extend beyond standard unicast IP traffic to include multicast, MPLS, and bridged traffic, making it a versatile traffic analysis tool.

Why the distractors are wrong:

  • A is incorrect because NetFlow does not simply copy all ingress flow information - that describes SPAN (Switched Port Analyzer)
  • B is incorrect because NetFlow components include a flow exporter (not importer), flow records, and a flow monitor/collector
  • E is incorrect because NetFlow can require packet sampling (called Sampled NetFlow), especially on high-speed interfaces where full flow monitoring would be resource-intensive

Memory Tip: Think of NetFlow as a "traffic census" - it counts flows in both directions (C) across all traffic types (D), unlike a simple mirror (SPAN). Remember the key components as "Record → Export → Collect" to avoid the importer trap in option B.

Topics

#NetFlow#Flow monitoring#Traffic analysis#Network visibility

Community Discussion

No community discussion yet for this question.

Full 350-401 Practice