ETExamTower
Q34Secure Network Access, Visibility, and EnforcementMultiple answers

Which two advantages do Flexible NetFlow records provide? (Choose two.)

Select 2 answers.
← → navigate · a answer
Community votes
B
50% (5)
E
40% (4)
A
10% (1)
C
0% (0)
D
0% (0)
Discussion · 13
B, E 3
Selected Answer: BE Cisco IOS Flexible NetFlow benefits: Flexibility and scalability of flow data beyond traditional NetFlow Customized traffic identification Ability to focus and monitor specific network behavior Ability to monitor a broader range of packet information, producing new information about network behavior Enhanced network anomaly and security detection Convergence of multiple accounting technologies into one accounting mechanism
3
Netflow is only "IP traffic flows" not Layer2 Only B,E are correct
3
I found this: "With Deep Packet Inspection, different layer data can be anazled from layer "2 to layer 7" Ref: https://ipcisco.com/lesson/flexible-netflow/ So option C is not correct B, E are correct
2
https://www.cisco.com/c/en/us/products/ios-nx-os-software/flexible-netflow/index.html Cisco IOS Flexible NetFlow benefits: Flexibility and scalability of flow data beyond traditional NetFlow Customized traffic identification ( B ) Ability to focus and monitor specific network behavior Ability to monitor a broader range of packet information, producing new information about network behavior ( look like C ) Enhanced network anomaly and security detection Convergence of multiple accounting technologies into one accounting mechanism. ( E ) So its B,C,E
2
Netflow is only "IP traffic flows" not Layer2
2
From this link, Flexible Netflow can include data from Layer 2. https://www.cisco.com/c/en/us/td/docs/routers/ios/config/17-x/ntw-servs/b-network-services/m_fnf-l2-fields.pdf
2
Flexible NetFlow extends the capabilities of traditional NetFlow by letting it collect Layer 2 header information. Search for "match datalink" or "Layer 2" attributes: https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst9300/software/release/16-5/configuration_guide/nmgmt/b_165_nmgmt_9300_cg/b_165_nmgmt_9300_cg_chapter_01000.html
B, E 2
Selected Answer: BE Why not C? As others have pointed out, Flexible Netflow goes beyond L4. One example is Netflow combined with ETA. Netflow is used to collect information about the SSL/TLS session. https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_data_eta/configuration/xe-16-6/sec-data-encrypted-traffic-analytics-xe-16-6-book/sec-data-encrypted-traffic-analytics-xe-16-6-book_chapter_01.pdf
1
C and E https://www.cisco.com/c/en/us/products/ios-nx-os-software/flexible-netflow/index.html
B, E 1
Selected Answer: BE I lean toward B,E
1
B and E https://content.cisco.com/chapter.sjs?uri=/searchable/chapter/content/en/us/td/docs/ios-xml/ios/fnetflow/configuration/15-sy/fnf-15-sy-book/fnf-fnetflow.html.xml
A, B 1
Selected Answer: AB https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst9300/software/release/16-5/configuration_guide/nmgmt/b_165_nmgmt_9300_cg/b_165_nmgmt_9300_cg_chapter_01000.html#:~:text=A%20comprehensive%20IP%20accounting%20feature%20that%20can%20be%20used%20to%20replace%20many%20accounting%20features%2C%20such%20as%20IP%20accounting%2C%20Border%20Gateway%20Protocol%20(BGP)%20Policy%20Accounting%2C%20and%20persistent%20caches. it does not converge but it does replace....
1
I think A is a feature of NetFlow v9 and not of Flexible Netflow, which is a v2 enhanced by Cisco