350-401 Question 214
Select 3An enterprise network engineer is tasked with configuring Flexible NetFlow on a Cisco router to monitor specific traffic patterns. The engineer wants to collect source and destination IP addresses, source and destination ports, and protocol type. Which of the following steps must the engineer perform to achieve this configuration?
- A
Create a flow monitor and apply it to the relevant interfaces.
- B
Define a flow record specifying the desired key and non-key fields.
- C
Enable NetFlow globally on the router using the 'ip flow-export' command.
- D
Create a flow exporter to specify where to send the collected data.
- E
Apply the flow record directly to the interface without using a flow monitor.
Show answer and explanation
Correct answers: A, B, D
Explanation
In Flexible NetFlow configuration, the engineer must define a flow record to specify the desired information to collect (e.g., source/destination IP, ports, protocol). A flow monitor associates the flow record and the flow exporter and is applied to the relevant interfaces. The flow exporter defines where the data is sent, such as to an external collector. Legacy NetFlow commands like 'ip flow-export' are not applicable in Flexible NetFlow configuration.
- A. Correct.
Correct. A flow monitor is required to associate the flow record and exporter with an interface.
- B. Correct.
Correct. The flow record is where you define the key fields (e.g., source/destination IP, ports, protocol) and any optional fields for Flexible NetFlow.
- C. Incorrect.
Incorrect. The 'ip flow-export' command is used in legacy NetFlow configurations and is not required for Flexible NetFlow.
- D. Correct.
Correct. The flow exporter specifies where the collected NetFlow data will be sent, such as to a collector.
- E. Incorrect.
Incorrect. A flow record cannot be applied directly to an interface. It must be used in conjunction with a flow monitor.