exam questions

Exam 350-701 All Questions

View all questions & answers for the 350-701 exam

Exam 350-701 topic 1 question 83 discussion

Actual exam question from Cisco's 350-701
Question #: 83
Topic #: 1
[All 350-701 Questions]

Which two tasks allow NetFlow on a Cisco ASA 5500 Series firewall? (Choose two.)

  • A. Define a NetFlow collector by using the flow-export command
  • B. Create a class map to match interesting traffic
  • C. Create an ACL to allow UDP traffic on port 9996
  • D. Enable NetFlow Version 9
  • E. Apply NetFlow Exporter to the outside interface in the inbound direction
Show Suggested Answer Hide Answer
Suggested Answer: AB 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Jeeves69
Highly Voted 3 years, 8 months ago
The Correct Answer is A and B. Reference: https://www.cisco.com/c/en/us/td/docs/security/asa/special/netflow/guide/asa_netflow.html#pgfId-1330480
upvoted 20 times
...
brownbear505
Highly Voted 2 years, 8 months ago
Selected Answer: AB
The Correct Answer is A and B. Reference: https://www.cisco.com/c/en/us/td/docs/security/asa/special/netflow/guide/asa_netflow.html#pgfId-1330480
upvoted 5 times
...
Marshpillowz
Most Recent 7 months, 2 weeks ago
Selected Answer: AB
A and B are correct
upvoted 1 times
...
yong08321
1 year, 6 months ago
Selected Answer: AB
The two tasks that are required to enable NetFlow on a Cisco ASA 5500 Series firewall are: B. Create a class map to match interesting traffic: A class map is used to identify the interesting traffic for which NetFlow data needs to be exported. It can be based on various parameters such as source and destination IP address, protocol, port numbers, etc. A. Define a NetFlow collector by using the flow-export command: This command is used to configure the NetFlow exporter parameters, such as the version, transport protocol, and template options. It also specifies the IP address and port number of the NetFlow collector that will receive the exported flow data.
upvoted 1 times
...
coentror
2 years, 11 months ago
access-list global_mpc extended permit ip any any ! flow-export destination inside 192.168.1.13 2055 ! class-map global_class match access-list global_mpc
upvoted 1 times
...
Sarbi
3 years, 2 months ago
A and B is the correct answer
upvoted 4 times
...
jmosilva
3 years, 3 months ago
A and B "Flow-export actions are not supported in interface-based policies. You can configure flow-export actions in a class-map only with the match access-list, match any, or class-default commands. You can only apply flow-export actions in a global service policy. "
upvoted 5 times
...
Raajaa
3 years, 4 months ago
A and B is the correct answer
upvoted 5 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago