350-701 Question 80

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• 1

  A is correct and also there is another question that what is specific to ASA NSEL, it is the capability to delay events, as it is noisy. both are in below .https://www.cisco.com/c/en/us/td/docs/security/asa/special/netflow/asa_netflow.html#delaysending

• Chose A1

  A is correct

• 3

  A. It tracks flow-create, flow-teardown, and flow-denied events. Cisco ASA NetFlow v9 Secure Event Logging is a feature that allows the ASA to export detailed information about network traffic flow and security events to a NetFlow collector for analysis. The exported information includes information about flow-create, flow-teardown and flow-denied events, which provide insight into the behavior of the traffic passing through the firewall. This feature also allows for the collection of detailed information about the traffic passing through the firewall which can be used for security incident investigations, capacity planning and troubleshooting. It does not provide stateless IP flow tracking that exports all records of a specific flow (B) or tracks the flow continuously and provides updates every 10 seconds (C) and also it does not match all traffic classes in parallel (D)