MCQs

Disclaimer:

Educational Use Only:

The website links provided are to be used strictly for educational and knowledge-gaining purposes only.

No Misuse:

Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.

Respect for Websites and Businesses:

Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.

Acknowledge Value of Knowledge:

Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.

No Endorsement:

The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.

User Responsibility:

By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.

What type of data does NetFlow primarily provide?
a. Packet payloads
b. File contents
c. Metadata about network traffic
d. Email message headers
Answer: c. Metadata about network trafficlearningnetwork.cisco
Who developed the NetFlow protocol?
a. Microsoft
b. Cisco
c. Juniper
d. IBM
Answer: b. Ciscokentik
Which of the following best describes a “flow” in NetFlow terminology?
a. A single packet transmission
b. A connectionless session
c. A sequence of packets sharing the same five key fields
d. A set of emails sent over the network
Answer: c. A sequence of packets sharing the same five key fieldsauvik
The five fields that uniquely identify a NetFlow include source IP, destination IP, source port, destination port, and:
a. IP version
b. Protocol
c. MAC address
d. VLAN ID
Answer: b. Protocolauvik
Which device typically acts as a flow exporter in the NetFlow architecture?
a. Network printer
b. Router or firewall
c. Desktop computer
d. Load balancer
Answer: b. Router or firewallzenarmor+1
What is the primary function of a NetFlow collector?
a. Forward packets
b. Receive and store flow records
c. Encrypt network traffic
d. Convert protocols
Answer: b. Receive and store flow recordszenarmor+1
What does a NetFlow analyzer do with collected flow data?
a. Schedules packet retransmissions
b. Discards old data
c. Extracts and visualizes network insights
d. Calculates subnetting
Answer: c. Extracts and visualizes network insightsauvik+1
Why does NetFlow use active and inactive timeouts for flow expiration?
a. To maximize memory usage
b. To ensure timely reporting of flow data
c. To encrypt traffic
d. To prevent packet loss
Answer: b. To ensure timely reporting of flow datazenarmor+1
What is the default active timeout value on many NetFlow platforms?
a. 15 seconds
b. 30 minutes
c. 5 minutes
d. 1 minute
Answer: b. 30 minutesauvik+1
What NetFlow component periodically exports flow data to a collector?
a. Flow generator
b. Flow exporter
c. Flow cache manager
d. Flow refresher
Answer: b. Flow exporterauvik
What network traffic characteristics can NetFlow report?
a. Only packet payload
b. Only header data
c. Bandwidth usage, source IP, destination IP, ports
d. Application details and web content
Answer: c. Bandwidth usage, source IP, destination IP, portsaskfilo
NetFlow is most commonly used for which network function?
a. Providing wireless connectivity
b. Monitoring and analyzing IP traffic flows
c. Managing email communication
d. Optimizing video streaming
Answer: b. Monitoring and analyzing IP traffic flowskentik
In NetFlow data, which is a typical flow record element?
a. Device serial number
b. Source IP address
c. User password
d. Encryption keys
Answer: b. Source IP addresskentik+1
How does NetFlow help with network troubleshooting?
a. By blocking ports
b. By identifying high-bandwidth flows and traffic patterns
c. By replacing hardware devices
d. By generating usernames
Answer: b. By identifying high-bandwidth flows and traffic patternszenarmor+1
Flexible NetFlow is an evolution of classic NetFlow. What is its key advantage?
a. Lower memory usage
b. Customizable flow record fields
c. Replaces SNMP
d. Only runs on Windows
Answer: b. Customizable flow record fieldsipcisco
NetFlow is compared to which “real world” item by Cisco to explain its usage?
a. Electricity bill
b. Phone bill
c. Gas bill
d. Credit card statement
Answer: b. Phone billnetworklessons
In which format are NetFlow records typically exported?
a. CSV
b. Proprietary binary format
c. XML
d. PDF
Answer: b. Proprietary binary formatkentik
NetFlow provides insight into:
a. Only Layer 1 errors
b. Only application layer traffic
c. IP flow traffic at multiple OSI layers
d. Only physical interface usage
Answer: c. IP flow traffic at multiple OSI layerskentik
Which timeout in NetFlow determines flow expiration due to lack of activity?
a. Active timeout
b. Inactive timeout
c. Source timeout
d. Collector timeout
Answer: b. Inactive timeoutzenarmor+1
What is recommended for the active timeout setting for most networks?
a. 1 minute
b. 5 minutes
c. 10 minutes
d. 30 minutes
Answer: a. 1 minuteauvik+1
Which open standard is most similar to NetFlow?
a. SNMP
b. IPFIX
c. RADIUS
d. ARP
Answer: b. IPFIXgigamon
NetFlow data helps in which type of network planning?
a. Wireless Access Point placement only
b. IP address sizing and capacity planning for traffic growth
c. Data encryption planning
d. Voice network provisioning only
Answer: b. IP address sizing and capacity planning for traffic growthitexamanswers+1
Which version of NetFlow introduced support for IPv6?
a. Version 1
b. Version 5
c. Version 9
d. Version 3
Answer: c. Version 9gigamon+1
NetFlow records for TCP flows include which field?
a. TCP flags
b. HTTP method
c. DNS query response
d. DHCP lease time
Answer: a. TCP flagsauvik
NetFlow is used for what kind of network security analysis?
a. Antivirus scanning
b. Flow-based anomaly, intrusion, and attack detection
c. Cable testing
d. Device inventory
Answer: b. Flow-based anomaly, intrusion, and attack detectionitexamanswers+1
In classic NetFlow, which format was originally used for flow export?
a. ASCII
b. NetFlow Version 5
c. JSON
d. YAML
Answer: b. NetFlow Version 5gigamon+1
What determines when a NetFlow entry is exported due to being operational for an extended period?
a. Export interval
b. Active timeout
c. Inactive timeout
d. Flow type
Answer: b. Active timeoutzenarmor+1
What can NetFlow data reveal about malicious network activity?
a. Malware code signatures
b. Unusual or unauthorized connections and data transfers
c. Antivirus status
d. Server patch versions
Answer: b. Unusual or unauthorized connections and data transferskentik+1
Which protocol enhancement allows NetFlow records to be extensible for future features?
a. NetFlow v1
b. NetFlow v9
c. SNMP v2
d. IPFIX v2
Answer: b. NetFlow v9gigamon+1
NetFlow is typically enabled on which part of a network device?
a. Management port
b. Interface where traffic passes
c. Power supply
d. Console cable
Answer: b. Interface where traffic passesnetworklessons+1
The main benefit of using NetFlow over simple packet captures is:
a. Lower disk usage
b. Summarized traffic viewpoints at flow-level
c. Detailed Layer 1 analysis
d. Built-in security alerts
Answer: b. Summarized traffic viewpoints at flow-levelzenarmor+1
What is required to view NetFlow records in a readable way?
a. Web browser only
b. NetFlow analyzer or visualization tool
c. Network switch
d. Wireless adapter
Answer: b. NetFlow analyzer or visualization toolauvik+1
Which field in NetFlow is most critical for identifying the application protocol of a flow?
a. Source IP
b. Destination port
c. Flow duration
d. Packet size
Answer: b. Destination portzenarmor+1
NetFlow can be used to support which network compliance needs?
a. Physical cable labeling
b. Traffic audit trails and forensic analysis
c. Bluetooth compatibility
d. Printer management
Answer: b. Traffic audit trails and forensic analysisnetworklessons+1
How does NetFlow support network capacity management?
a. By reporting device firmware
b. By collecting data on byte and packet flow rates
c. By blocking non-compliant users
d. By encrypting traffic
Answer: b. By collecting data on byte and packet flow rateskentik+1
What is the minimum requirement for NetFlow deployment in a network?
a. At least one flow exporter and one flow collector
b. At least one web server
c. At least one managed switch
d. At least one wireless access point
Answer: a. At least one flow exporter and one flow collectorauvik+1
Which NetFlow version supports both IPv4 and IPv6 flow exports?
a. Version 7
b. Version 5
c. Version 9
d. Version 3
Answer: c. Version 9gigamon+1
NetFlow can help optimize network performance by:
a. Identifying bottlenecks and over-utilized links
b. Upgrading CPU hardware
c. Increasing cable length
d. Installing more printers
Answer: a. Identifying bottlenecks and over-utilized linkszenarmor+1
What should be monitored regularly to ensure NetFlow accuracy?
a. Flow cache expiration and export rates
b. System log messages only
c. Printer cartridge status
d. Fan speed sensors
Answer: a. Flow cache expiration and export ratesauvik+1
A NetFlow flow record does NOT include which of the following by default?
a. Application name
b. Source and destination IP
c. Ports
d. Protocol
Answer: a. Application namezenarmor+1
NetFlow data is considered especially useful for:
a. Short-term monitoring only
b. Long-term network traffic trend analysis
c. Wireless spectrum analysis
d. Only VLAN security
Answer: b. Long-term network traffic trend analysiskentik+1
When does a NetFlow entry typically expire and get exported?
a. When the packet size exceeds 1500 bytes
b. After active or inactive timeout period elapses
c. When a user disconnects from WiFi
d. When a network device reboots
Answer: b. After active or inactive timeout period elapsesauvik+1
What does a NetFlow “flow record” contain?
a. Metadata regarding a single flow, like IPs, ports, protocol, byte/packet count
b. Full application logs
c. Wireless channel info
d. Firmware checksums
Answer: a. Metadata regarding a single flow, like IPs, ports, protocol, byte/packet countkentik+1
NetFlow provides support for which aspect of network security monitoring?
a. Prohibiting all TCP connections
b. Tracking and analyzing suspicious IP flows
c. Decrypting SSL traffic
d. Generating VPN tunnels
Answer: b. Tracking and analyzing suspicious IP flowskentik+1
NetFlow is commonly used in which industries for network monitoring?
a. Retail only
b. Healthcare, banking, enterprise IT, education, government
c. Only hospitality
d. Only food processing
Answer: b. Healthcare, banking, enterprise IT, education, governmentkentik
Which of the following can increase the quality of NetFlow data analysis?
a. Running flow analyzer on an isolated server
b. Proper flow exporter and collector configurations
c. Increasing wireless transmission power
d. Using outdated firmware
Answer: b. Proper flow exporter and collector configurationszenarmor+1
NetFlow v5 can export flows with how many key fields?
a. 3
b. 4
c. 5
d. 7
Answer: c. 5gigamon
What is a limitation of classic NetFlow compared to IPFIX?
a. No support for IPv4
b. No support for extensible fields or templates
c. Cannot operate on routers
d. Cannot detect TCP traffic
Answer: b. No support for extensible fields or templatesgigamon
NetFlow can be used as a foundation for which type of network management function?
a. SNMP trap forwarding
b. Flow-based billing and usage accounting
c. Cable length detection
d. Channel interference checking
Answer: b. Flow-based billing and usage accountingnetworklessons+1
NetFlow data enhances visibility into network operations by:
a. Showing comprehensive flow-level traffic patterns over time
b. Hiding all network traffic
c. Blocking all downloads
d. Obscuring router logs
Answer: a. Showing comprehensive flow-level traffic patterns over timeauvik+1

Blog

Systemethic Technologies

Leave a Reply Cancel reply

Useful links

Other Terms & Policies

Contact Info