350-501 · Question #341
Refer to the exhibit. A network engineer wants to monitor traffic from the application server and send the output to the external monitoring device at 172.16.20.5. Application server traffic should…
The correct answer is C. Configure the ip flow monitor FLOW-MONITOR-10 input command on the Ethernet1/0 interface. To monitor traffic originating from an application server, the ip flow monitor input command must be applied to the router interface directly connected to the server.
Question
Refer to the exhibit. A network engineer wants to monitor traffic from the application server and send the output to the external monitoring device at 172.16.20.5. Application server traffic should pass through the R1 Eth2/1 interface for further analysis after it is monitored. Which configuration must be applied on the R1 router?
Exhibit
Options
- AConfigure the FLOW-MONITOR-20 command.
- BConfigure the flow exporter EXPORTER-10 destination 192.168.20.4 command.
- CConfigure the ip flow monitor FLOW-MONITOR-10 input command on the Ethernet1/0 interface.
- DConfigure the ip flow monitor FLOW-MONITOR-10 output command on the Ethernet 2/1
How the community answered
(23 responses)- A4% (1)
- B9% (2)
- C83% (19)
- D4% (1)
Why each option
To monitor traffic originating from an application server, the `ip flow monitor input` command must be applied to the router interface directly connected to the server.
The command 'Configure the FLOW-MONITOR-20 command' is incomplete and does not specify where or how the monitor is applied.
The specified destination IP address (192.168.20.4) for the flow exporter does not match the external monitoring device's IP address (172.16.20.5) given in the question.
To monitor traffic originating from the application server, the NetFlow/IPFIX monitor must be applied to the router interface that connects to the server (e.g., Ethernet1/0) in the input direction. The `ip flow monitor FLOW-MONITOR-10 input` command specifies that traffic entering this interface will be processed by the defined flow monitor.
Applying the monitor in the `output` direction on Ethernet2/1 would monitor traffic leaving the router on that interface, not traffic from the application server as it enters the router.
Concept tested: NetFlow/IPFIX interface configuration - input monitoring
Source: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/netflow/configuration/15-mt/nf-15-mt-book/nf-overview.html#GUID-ED6C808E-047C-4318-97F4-29B639B078B3
Topics
Community Discussion
No community discussion yet for this question.