350-401 Question #902: Real Exam Question with Answer & Explanation

Question

A network administrator need to configure Netflow on the devices in his network. He has Source IP Address, Destination IP Address, Source Port number & Destination port number. What additional information do he need to configure Netflow.

Options

• ALayer 3 Protocol type
• BEncryption type
• CToS (Type of Service) byte
• DInput Logical Interface
• EHashing Algorithm
• FTransform-set details

Explanation

NetFlow 7-Tuple Key Fields Explained

NetFlow identifies and tracks network flows using 7 specific key fields (also called the "7-tuple"), and the administrator already has 4 of them. The three missing fields are Layer 3 Protocol type (A) (e.g., TCP, UDP, ICMP - needed to distinguish traffic at the network layer), ToS byte (C) (which captures QoS/DSCP markings to differentiate traffic classes), and Input Logical Interface (D) (which identifies which interface the traffic arrived on, critical for flow tracking). Together, these 7 fields uniquely define a NetFlow flow and are mandatory for proper configuration.

Why the distractors are wrong:

• B (Encryption type) and F (Transform-set details) are IPSec/VPN concepts, not NetFlow parameters
• E (Hashing Algorithm) relates to security/authentication protocols, not flow monitoring

🧠 Memory Tip

Remember the NetFlow 7-tuple with the phrase "SAD TIP":

• Source IP, Source Port
• Destination IP, Destination Port
• ToS byte
• Input Interface
• Protocol type

If you can recall these 7 fields, you can quickly identify what's missing in any NetFlow scenario question!

No community discussion yet for this question.