Refer to the exhibit. What is the effect of introducing the sampler feature into the Flexible NetFlow configuration on the router?
Refer to the exhibit. What is the effect of introducing the sampler feature into the Flexible NetFlow configuration on the router?
The sampler feature in Flexible NetFlow configuration reduces the number of packets that need to be analyzed, thereby reducing CPU and memory utilization on the router. This results in less resource consumption compared to full NetFlow analysis, which requires examining every single packet. The deterministic 1 out of 2 mode specified in the configuration indicates that only every second packet is analyzed, leading to the reduced resource usage.
"Flow sampling reduces the CPU overhead of analyzing traffic with Flexible NetFlow by reducing the number of packets that are analyzed." Taken from: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/fnetflow/configuration/xe-3se/3850/use-fnflow-redce-cpu.html
I'll pick A
I was thinking the same, HOWEVER, it doesn't appear that a Netflow collector even exists in this configuration. There's not even a flow exporter to send the data, so you can assume a collector doesn't exist if it's not showing one in the configuration. That said, C would be more accurate, since it still reduces system resources by only inspecting half of the records.
C is the answer, it's about what record the router is analyzing and not about what is been sent to the collector.
i will choose c
C. correct, on ISP core PE use 1:1000 or 1:5000 sampling to detect DDOS attacks for Arbor collectors. A. is wrong because the router sends flow when the current flow is finished (you can think TCP session) or when the session is UP but the flow timer is expired - the router sends every 10 min. flow data to the collector by default ...
C is correct
Answer is C The effect of introducing the sampler feature into the Flexible NetFlow configuration on the router is that CPU and memory utilization are reduced when compared with what is required for full NetFlow
Why not B?
Interface uses IPv6 not IPv4.