Which three components must be defined on the local device to implement NetFlow on an interface when you configure Flexible NetFlow? (Choose three.)
- NetFlow security
- NetFlow admin
- NetFlow monitor
- NetFlow client
- NetFlow record
- NetFlow export
Explanation: Configuring Flexible NetFlow on a Cisco device involves a specific four-step process that requires defining three core components on the local device before applying them to an interface. These components are:
- NetFlow record: This defines the "fingerprint" of the traffic. It consists of key fields (configured with match commands) to identify unique flows and non-key fields (configured with collect commands) to gather additional statistics for analysis.
- NetFlow export (Flow Exporter): This component specifies the destination for the captured data. It defines the IP address of the Flow Collector (the server), the transport protocol (typically UDP), and the specific port number used for the export.
- NetFlow monitor: This functions as the NetFlow database in the device's memory (cache). Its primary purpose is to bind the flow record and the flow exporter together so the device knows what data to collect and where to send it.
Once these three elements are established, the NetFlow monitor is applied to a Layer 3-enabled interface (usually for input monitoring) to start the actual flow capture.
Related exam: Modules 17 – 20: Checkpoint Exam: Virtualization and Network Services Answers (CCNP ENCOR v9)
