exam questions

Exam 200-105 All Questions

View all questions & answers for the 200-105 exam

Exam 200-105 topic 1 question 310 discussion

Actual exam question from Cisco's 200-105
Question #: 310
Topic #: 1
[All 200-105 Questions]

What are three values that must be the same within a sequence of packets for Netflow to consider them a network flow? (Choose three.)

  • A. source IP address
  • B. source MAC address
  • C. egress interface
  • D. ingress interface
  • E. destination IP address
  • F. IP next-hop ADE
Show Suggested Answer Hide Answer
Suggested Answer: Explanation 🗳️
Each packet that is forwarded within a router or switch is examined for a set of IP packet attributes. These attributes are the IP packet identity or fingerprint of the packet and determine if the packet is unique or similar to other packets.
Traditionally, an IP Flow is based on a set of 5 and up to 7 IP packet attributes. IP Packet attributes used by NetFlow:

IP source address -

IP destination address -

Source port -

Destination port -

Layer 3 protocol type -

Class of Service -

Router or switch interface -
All packets with the same source/destination IP address, source/destination ports, protocol interface and class of service are grouped into a flow and then packets and bytes are tallied. This methodology of fingerprinting or determining a flow is scalable because a large amount of network information is condensed into a database of NetFlow information called the NetFlow cache. http://www.cisco.com/c/en/us/products/collateral/ios-nx-os-software/ios-netflow/prod_white_paper0900aecd80406232.html

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
bitsuspect
5 years, 8 months ago
The correct answer A, D, E
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago