Which two tasks allow NetFlow on a Cisco ASA 5500 Series firewall? (Choose two.)

The correct answer is C. Create a class map to match interesting traffic. E. Define a NetFlow collector by using the flow-export command.. Flow-export actions are not supported in interface-based policies. You can configure flow-export actions in a class-map only with the match access-list, match any, or class-default commands. You can only apply flow-export actions in a global service policy.

Submitted by helene.fr· Mar 30, 2026Visibility and Enforcement

Question

Options

ACreate an ACL to allow UDP traffic on port 9996.
BEnable NetFlow Version 9.
CCreate a class map to match interesting traffic.
DApply NetFlow Exporter to the outside interface in the inbound direction.
EDefine a NetFlow collector by using the flow-export command.

How the community answered

(14 responses)

B
14% (2)
C
79% (11)
D
7% (1)

Explanation

Flow-export actions are not supported in interface-based policies. You can configure flow-export actions in a class-map only with the match access-list, match any, or class-default commands. You can only apply flow-export actions in a global service policy.

Topics

#Cisco ASA NetFlow#NetFlow configuration

Community Discussion

No community discussion yet for this question.

Full 350-701 Practice