nerdexam
Cisco

350-401 · Question #835

Which component does Cisco Threat Defense use to measure bandwidth, application performance, and utilization?

The correct answer is C. NetFlow. NetFlow (Option C) is the correct answer because it is a network protocol developed by Cisco that collects and monitors IP traffic information, enabling measurement of bandwidth usage, application performance, and network utilization - making it a core telemetry component within

Submitted by kavita_s· Mar 6, 2026Network Assurance

Question

Which component does Cisco Threat Defense use to measure bandwidth, application performance, and utilization?

Options

  • ATrustSec
  • BAdvanced Malware Protection for Endpoints
  • CNetFlow
  • DCisco Umbrella

How the community answered

(28 responses)
  • A
    7% (2)
  • B
    4% (1)
  • C
    86% (24)
  • D
    4% (1)

Explanation

NetFlow (Option C) is the correct answer because it is a network protocol developed by Cisco that collects and monitors IP traffic information, enabling measurement of bandwidth usage, application performance, and network utilization - making it a core telemetry component within Cisco's Threat Defense framework.

Why the distractors are wrong:

  • TrustSec (A) is a Cisco security architecture focused on access control and network segmentation using Security Group Tags (SGTs), not traffic measurement.
  • Advanced Malware Protection for Endpoints (B) is an endpoint security solution designed to detect and respond to malware threats, not to measure network performance metrics.
  • Cisco Umbrella (D) is a cloud-based DNS security and secure web gateway solution that protects against threats at the DNS layer, not a bandwidth or utilization measurement tool.

Memory Tip: Think of NetFlow as a network "flow meter" - just like a water flow meter measures how much water passes through pipes, NetFlow measures how much data flows through your network, tracking bandwidth and application performance. The word "flow" in NetFlow is your key reminder!

Topics

#NetFlow#Network Monitoring#Cisco Threat Defense#Network Visibility

Community Discussion

No community discussion yet for this question.

Full 350-401 Practice