Q34Secure Network Access, Visibility, and EnforcementMultiple answers
Which two advantages do Flexible NetFlow records provide? (Choose two.)
Select 2 answers.
← → navigate · a answer
Community votes
Discussion · 13
B, E 3
Selected Answer: BE
Cisco IOS Flexible NetFlow benefits:
Flexibility and scalability of flow data beyond traditional NetFlow
Customized traffic identification
Ability to focus and monitor specific network behavior
Ability to monitor a broader range of packet information, producing new information about network behavior
Enhanced network anomaly and security detection
Convergence of multiple accounting technologies into one accounting mechanism
3
Netflow is only "IP traffic flows" not Layer2
Only B,E are correct
3
I found this:
"With Deep Packet Inspection, different layer data can be anazled from layer "2 to layer 7"
Ref: https://ipcisco.com/lesson/flexible-netflow/
So option C is not correct
B, E are correct
2
https://www.cisco.com/c/en/us/products/ios-nx-os-software/flexible-netflow/index.html
Cisco IOS Flexible NetFlow benefits:
Flexibility and scalability of flow data beyond traditional NetFlow
Customized traffic identification ( B )
Ability to focus and monitor specific network behavior
Ability to monitor a broader range of packet information, producing new information about network behavior ( look like C )
Enhanced network anomaly and security detection
Convergence of multiple accounting technologies into one accounting mechanism. ( E )
So its B,C,E
2
Netflow is only "IP traffic flows" not Layer2
2
From this link, Flexible Netflow can include data from Layer 2.
https://www.cisco.com/c/en/us/td/docs/routers/ios/config/17-x/ntw-servs/b-network-services/m_fnf-l2-fields.pdf
2
Flexible NetFlow extends the capabilities of traditional NetFlow by letting it collect Layer 2 header information.
Search for "match datalink" or "Layer 2" attributes:
https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst9300/software/release/16-5/configuration_guide/nmgmt/b_165_nmgmt_9300_cg/b_165_nmgmt_9300_cg_chapter_01000.html
B, E 2
Selected Answer: BE
Why not C? As others have pointed out, Flexible Netflow goes beyond L4. One example is Netflow combined with ETA. Netflow is used to collect information about the SSL/TLS session.
https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_data_eta/configuration/xe-16-6/sec-data-encrypted-traffic-analytics-xe-16-6-book/sec-data-encrypted-traffic-analytics-xe-16-6-book_chapter_01.pdf
1
C and E
https://www.cisco.com/c/en/us/products/ios-nx-os-software/flexible-netflow/index.html
B, E 1
Selected Answer: BE
I lean toward B,E
1
B and E https://content.cisco.com/chapter.sjs?uri=/searchable/chapter/content/en/us/td/docs/ios-xml/ios/fnetflow/configuration/15-sy/fnf-15-sy-book/fnf-fnetflow.html.xml
A, B 1
Selected Answer: AB
https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst9300/software/release/16-5/configuration_guide/nmgmt/b_165_nmgmt_9300_cg/b_165_nmgmt_9300_cg_chapter_01000.html#:~:text=A%20comprehensive%20IP%20accounting%20feature%20that%20can%20be%20used%20to%20replace%20many%20accounting%20features%2C%20such%20as%20IP%20accounting%2C%20Border%20Gateway%20Protocol%20(BGP)%20Policy%20Accounting%2C%20and%20persistent%20caches.
it does not converge but it does replace....
1
I think A is a feature of NetFlow v9 and not of Flexible Netflow, which is a v2 enhanced by Cisco