nerdexam
Cisco

350-701 · Question #587

Which two commands are required when configuring a flow-export action on a Cisco ASA? (Choose two.)

The correct answer is A. flow-export event-type B. policy-map. To configure flow-export on a Cisco ASA, a policy-map must be defined to classify traffic, and the flow-export event-type command specifies what types of events or flows to export.

Submitted by mateo_ar· Mar 30, 2026Security Monitoring

Question

Which two commands are required when configuring a flow-export action on a Cisco ASA? (Choose two.)

Options

  • Aflow-export event-type
  • Bpolicy-map
  • Caccess-list
  • Dflow-export template timeout-rate 15
  • Eaccess-group

How the community answered

(37 responses)
  • A
    89% (33)
  • C
    3% (1)
  • D
    5% (2)
  • E
    3% (1)

Why each option

To configure flow-export on a Cisco ASA, a policy-map must be defined to classify traffic, and the flow-export event-type command specifies what types of events or flows to export.

Aflow-export event-typeCorrect

The `flow-export event-type` command is essential for specifying which network events (e.g., flow-update, flow-create, flow-delete) or types of connections should be exported as flow records.

Bpolicy-mapCorrect

A `policy-map` is used to define an action (like flow-export) for specific traffic classes, typically involving a `class-map` to match traffic and then applying the flow-export command within the `policy-map`.

Caccess-list

An `access-list` is used to define traffic matching criteria, which can be referenced by a `class-map` within a `policy-map`, but it is not a direct command for configuring flow-export action itself.

Dflow-export template timeout-rate 15

The `flow-export template timeout-rate` command configures the frequency at which NetFlow templates are sent, which is a configuration detail of flow export but not one of the two core commands *required* for the action itself.

Eaccess-group

An `access-group` applies an access-list to an interface, primarily for traffic filtering or inspection, and is not directly used for configuring flow-export actions.

Concept tested: Cisco ASA NetFlow/IPFIX configuration

Source: https://www.cisco.com/c/en/us/td/docs/security/asa/asa96/configuration/firewall/asa-96-firewall-config/monitor-netflow.html

Topics

#Cisco ASA flow-export#NetFlow configuration

Community Discussion

No community discussion yet for this question.

Full 350-701 Practice