Implementing and Operating Cisco Enterprise Network Core Technologies (ENCOR) v1.2InfrastructureMedium
A network operations team is implementing a new monitoring solution that requires detailed information about traffic flows, including source/destination IP addresses, port numbers, protocols, and byte counts, for capacity planning and security analysis. Which network service should they enable on their routers and switches?
- ASyslog
- BNetFlow
- CIP SLA
- DSNMP
Show answer & explanationAnswer & explanation
Correct answer: B. NetFlow
NetFlow is specifically designed to collect and export detailed information about IP traffic flows, including source/destination IP addresses, port numbers, protocols, and byte counts. This data is invaluable for capacity planning, security monitoring, and troubleshooting.
Why the other options are wrong
- A. Syslog collects system event messages and logs, not traffic flow data.
- C. IP SLA actively measures network performance between points, but doesn't collect information on all traffic flows.
- D. SNMP collects device status and interface statistics, but not detailed flow information.
NetFlow
A Cisco technology that collects IP traffic flow information, providing detailed insights into network usage, performance, and security.
- Collects flow data (source/destination IP, ports, protocol, byte counts).
- Used for network monitoring, capacity planning, and security.
- Exports data to a NetFlow collector for analysis.
Memory trick: NetFlow: The traffic cop that records every car's journey.