350-401 Question #397: Real Exam Question with Answer & Explanation

Question

What are two features of NetFlow flow monitoring? (Choose two.)

Options

• ACopies all ingress flow information to an interface
• BInclude the flow record and the flow importer
• CCan track ingress and egress information
• DCan be used to track multicast, MPLS, or bridged traffic.
• EDoes not required packet sampling on interfaces

Explanation

NetFlow Flow Monitoring Explanation

NetFlow is a Cisco network protocol that monitors IP traffic flows, and option C is correct because NetFlow can capture both ingress (incoming) and egress (outgoing) traffic on an interface, giving administrators a complete bidirectional view of network flows. Option D is correct because NetFlow's monitoring capabilities extend beyond standard unicast IP traffic to include multicast, MPLS, and bridged traffic, making it a versatile traffic analysis tool.

Why the distractors are wrong:

• A is incorrect because NetFlow does not simply copy all ingress flow information - that describes SPAN (Switched Port Analyzer)
• B is incorrect because NetFlow components include a flow exporter (not importer), flow records, and a flow monitor/collector
• E is incorrect because NetFlow can require packet sampling (called Sampled NetFlow), especially on high-speed interfaces where full flow monitoring would be resource-intensive

💡 Memory Tip: Think of NetFlow as a "traffic census" - it counts flows in both directions (C) across all traffic types (D), unlike a simple mirror (SPAN). Remember the key components as "Record → Export → Collect" to avoid the importer trap in option B.

No community discussion yet for this question.