Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Implementing and Operating Cisco Security Core Technologies (SCOR) · Cisco
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
C is correct
The correct Cisco ASA command to generate NetFlow records on traffic traversing the device is "flow-export destination inside 1.1.1.1 2055". The "flow-export destination inside" command is used to specify the IP address and port number of the NetFlow collector that will receive the exported flow data. In this case, the collector is located on the inside interface of the ASA. The IP address "1.1.1.1" and port number "2055" are just examples and should be replaced with the actual IP address and port number of the collector. Option A, "flow exporter <name>", is used to configure the NetFlow exporter parameters, such as the version, transport protocol, and template options. Option B, "ip flow-export destination 1.1.1.1 2055", is a command used on Cisco routers to configure the NetFlow collector destination. Option D, "ip flow monitor <name> input", is a command used on Cisco routers to enable NetFlow data export for the specified flow monitor. These commands are not used on the Cisco ASA.
"C" should be the correct answer. Add an NSEL collector to which NetFlow packets may be sent. flow-export destination interface-name ipv4-address | hostname udp-port Example: ciscoasa(config)# flow-export destination inside 209.165.200.225 2002 The destination keyword indicates that a NSEL collector is being configured. The interface-name argument is the name of the ASA and ASA Services Module interface through which the collector is reached. The ipv4-address argument is the IP address of the machine running the collector application. The hostname argument is the destination IP address or name of the collector. The udp-port argument is the UDP port number to which NetFlow packets are sent. You can configure a maximum of five collectors. After a collector is configured, template records are automatically sent to all configured NSEL collectors.