350-701 · Question #587
Which two commands are required when configuring a flow-export action on a Cisco ASA? (Choose two.)
The correct answer is A. flow-export event-type B. policy-map. To configure flow-export on a Cisco ASA, a policy-map must be defined to classify traffic, and the flow-export event-type command specifies what types of events or flows to export.
Question
Which two commands are required when configuring a flow-export action on a Cisco ASA? (Choose two.)
Options
- Aflow-export event-type
- Bpolicy-map
- Caccess-list
- Dflow-export template timeout-rate 15
- Eaccess-group
How the community answered
(37 responses)- A89% (33)
- C3% (1)
- D5% (2)
- E3% (1)
Why each option
To configure flow-export on a Cisco ASA, a policy-map must be defined to classify traffic, and the flow-export event-type command specifies what types of events or flows to export.
The `flow-export event-type` command is essential for specifying which network events (e.g., flow-update, flow-create, flow-delete) or types of connections should be exported as flow records.
A `policy-map` is used to define an action (like flow-export) for specific traffic classes, typically involving a `class-map` to match traffic and then applying the flow-export command within the `policy-map`.
An `access-list` is used to define traffic matching criteria, which can be referenced by a `class-map` within a `policy-map`, but it is not a direct command for configuring flow-export action itself.
The `flow-export template timeout-rate` command configures the frequency at which NetFlow templates are sent, which is a configuration detail of flow export but not one of the two core commands *required* for the action itself.
An `access-group` applies an access-list to an interface, primarily for traffic filtering or inspection, and is not directly used for configuring flow-export actions.
Concept tested: Cisco ASA NetFlow/IPFIX configuration
Source: https://www.cisco.com/c/en/us/td/docs/security/asa/asa96/configuration/firewall/asa-96-firewall-config/monitor-netflow.html
Topics
Community Discussion
No community discussion yet for this question.