350-701 · Question #44
What is a characteristic of Cisco ASA NetFlow v9 Secure Event Logging?
The correct answer is A. It tracks flow-create, flow-teardown, and flow-denied events.. In stateful flow tracking, tracked flows go through a series of state changes. NSEL events are used to export data about flow status and are triggered by the event that caused the state The significant events that are tracked include flow-create, flow-teardown, and flow-denied (e
Question
What is a characteristic of Cisco ASA NetFlow v9 Secure Event Logging?
Options
- AIt tracks flow-create, flow-teardown, and flow-denied events.
- BIt provides stateless IP flow tracking that exports all records of a specific flow.
- CIt tracks the flow continuously and provides updates every 10 seconds.
- DIts events match all traffic classes in parallel.
How the community answered
(26 responses)- A92% (24)
- B4% (1)
- D4% (1)
Explanation
In stateful flow tracking, tracked flows go through a series of state changes. NSEL events are used to export data about flow status and are triggered by the event that caused the state The significant events that are tracked include flow-create, flow-teardown, and flow-denied (excluding those flows that are denied by EtherType ACLs). In addition, the ASA and ASASM implementation of NSEL generates periodic NSEL events, flow-update events, to provide periodic byte counters over the duration of the flow. These events are usually time-driven, which makes them more in line with traditional NetFlow; however, they may also be triggered by state changes
Topics
Community Discussion
No community discussion yet for this question.