A is the answer. While events can be delayed they are not delayed by default. The flow-create event is exported as soon as the flow is created if the flow-export delay flow-create command is not configured.
I’ll go with A since Cisco ASA supports configuring multiple NetFlow collectors, which allows flow data to be sent to more than one monitoring or analytics platform
The option D's wording implies that flow-create events are always delayed and this default action is a feature. However, flow-create events are actually optional and it is exactly this optionality makes it a feature.
https://www.cisco.com/c/en/us/td/docs/security/asa/asa91/configuration/general/asa_91_general_config/monitor_nsel.html
Whew this is a hard question. Is A because as previously mentioned, delaying the export of flow-create events is NOT a default action. A is the "more correct" answer. Cisco exams are a racket.
Question translates to : "What is a feature [only] of Cisco NSEL ?"
> A , its true for all Netflow implementations : IOS/IOS-XR/IOS-XE etc
> B,C are wrong
D is true and exists only on ASA's NSEL. So is the correct answer (even if delay is optional).
ref: https://www.cisco.com/c/en/us/td/docs/security/asa/asa91/configuration/general/asa_91_general_config/monitor_nsel.html
Some guys already pointed out the main point in the link "https://www.cisco.com/c/en/us/td/docs/security/asa/asa91/asdm71/general/asdm_71_general_config/monitor_nsel.pdf"
The ASA and ASASM implementations of NSEL provide the following major functions:
- Delays the export of flow-create events
I don't see any related keyword "Multiple" for Netflow in the document.
Besides, "Multiple NetFlow collectors are supported" is not a kind of core feature.
From the link "https://www.cisco.com/c/en/us/td/docs/security/asa/asa92/configuration/general/asa-general-cli/monitor-nsel.html", it said it can support to send to "different" collectors , but it still cannot send to "multiple" collectors once it matches.
Answer is A.
Based on the link -https://www.cisco.com/c/en/us/td/docs/security/asa/asa91/asdm71/general/asdm_71_general_config/monitor_nsel.pdf. What is delayed is the export not the flow-create.
Feature History for NSEL - NetFlow Filtering 8.1(2)
You can filter NetFlow events based on traffic and event type, then send records to different collectors. For example, you can log all flow-create events to one collector, and log flow-denied events to a different collector.
https://www.cisco.com/c/en/us/td/docs/security/asa/asa91/asdm71/general/asdm_71_general_config/monitor_nsel.pdf
This section is not available anymore. Please use the main Exam Page.350-701 Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Reece_S
Highly Voted 4 years agoSmileebloke
3 years, 3 months agoureis
2 years, 7 months agojaciro11
Highly Voted 3 years, 5 months agoCyberGhost666
Most Recent 1 month, 2 weeks agoDiegosuarezb
4 months, 1 week agokloug
9 months, 3 weeks agoMarshpillowz
1 year, 4 months agoStevens0103
1 year, 7 months agoStevens0103
1 year, 7 months agonep1019
2 years agojpapas
2 years agojku2cya
2 years, 1 month agodabance
2 years, 1 month agogc999
2 years, 1 month agogc999
2 years, 2 months agogc999
2 years, 2 months agoEmlia1
2 years, 8 months agofrancojaraba
3 years agoureis
2 years, 7 months agoPwned
3 years, 2 months agosemi1750
3 years, 4 months ago