Question 1hardmultiple choice
Full question →hardmultiple choiceObjective-mapped
An administrator sees high interface utilization through SNMP graphs but wants to identify which conversations are responsible. Which addition best closes that visibility gap?
Answer choices
Why each option matters
Good practice is not just finding the correct option. The wrong answers often show the exact trap the exam wants you to fall into.
A
Best answer
NetFlow
This is correct because NetFlow adds detailed visibility into traffic conversations behind utilization.
B
Distractor review
Another DHCP scope
This is wrong because DHCP scopes do not explain bandwidth conversations.
C
Distractor review
A new STP priority
This is wrong because STP priority is unrelated to traffic-conversation visibility.
D
Distractor review
A larger OSPF metric
This is wrong because OSPF metrics do not identify which flows are consuming bandwidth.
Common exam trap
Common exam trap: answer the scenario, not the keyword
A frequent exam trap is selecting options that relate to network configuration or routing metrics rather than traffic visibility. For instance, choosing another DHCP scope or adjusting OSPF metrics might seem relevant because they affect network behavior, but they do not provide information about which hosts or applications consume bandwidth. Similarly, changing STP priority affects Layer 2 topology but does not reveal traffic flows. The trap is to confuse network management or routing functions with traffic analysis tools. The correct answer, NetFlow, specifically addresses the need to identify conversations behind interface utilization, which other options do not.
Technical deep dive
How to think about this question
NetFlow is a Cisco technology that captures detailed information about IP traffic flows passing through a router or switch interface. Unlike SNMP, which only provides aggregate interface statistics such as bandwidth utilization, NetFlow records metadata about individual conversations, including source and destination IP addresses, ports, protocols, and byte counts. This granular visibility enables network administrators to identify exactly which hosts and applications are generating traffic, facilitating precise traffic analysis and troubleshooting. When an administrator observes high interface utilization via SNMP graphs, the data only indicates that the interface is busy but does not reveal the traffic composition. Adding NetFlow closes this visibility gap by exporting flow records to a collector, which aggregates and analyzes the data to show conversation-level details. This allows network engineers to pinpoint bandwidth hogs, detect anomalies, and optimize network performance based on actual traffic patterns rather than just raw counters. A common exam trap is confusing interface-level metrics with flow-level visibility. For example, DHCP scopes or OSPF metrics do not provide traffic conversation details, and STP priorities relate only to Layer 2 topology decisions. NetFlow uniquely provides conversation-level insights, making it the correct choice for identifying which conversations cause high utilization. Practically, deploying NetFlow helps in capacity planning and security monitoring by revealing detailed traffic behavior beyond simple interface counters.
KKey Concepts to Remember
- NetFlow captures detailed metadata about IP traffic flows, including source and destination addresses, ports, and protocols, enabling conversation-level visibility.
- SNMP provides only aggregate interface statistics such as bandwidth utilization, without revealing which hosts or applications generate the traffic.
- Adding NetFlow to a network device allows exporting flow records to a collector for detailed traffic analysis and troubleshooting.
- DHCP scopes configure IP address pools and do not provide any information about traffic conversations or bandwidth usage.
- STP priority influences Layer 2 topology decisions and does not affect or reveal traffic flow visibility or bandwidth consumption.
- OSPF metrics determine routing path costs but do not identify which traffic flows consume bandwidth on an interface.
- NetFlow helps network administrators pinpoint bandwidth hogs and optimize network performance by revealing detailed traffic patterns.
- Confusing routing or Layer 2 configuration parameters with traffic analysis tools is a common exam mistake to avoid.
TExam Day Tips
- Watch for words such as best, first, most likely and least administrative effort.
- Review why wrong options are wrong, not only why the correct option is correct.
Related practice questions
Related 200-301 practice-question pages
Use these pages to review the topic behind this question. This is how one missed question becomes focused revision.
CCNA subnetting practice questions
Practise IPv4 subnetting, CIDR, masks, host ranges and subnet selection.
CCNA OSPF practice questions
Practise OSPF neighbours, router IDs, metrics, areas and routing-table interpretation.
CCNA VLAN practice questions
Practise VLANs, access ports, trunks, allowed VLANs and switching scenarios.
CCNA STP practice questions
Practise spanning tree, root bridge election, port roles and STP troubleshooting.
CCNA EtherChannel practice questions
Practise LACP, PAgP, port-channel behaviour and bundle requirements.
CCNA ACL practice questions
Practise standard and extended ACLs, permit/deny logic and traffic filtering.
CCNA NAT practice questions
Practise static NAT, dynamic NAT, PAT and inside/outside address translation.
CCNA DHCP practice questions
Practise DHCP scopes, relay, leases and troubleshooting.
CCNA show ip route practice questions
Practise routing-table output, longest-prefix match, AD and route selection.
CCNA show interfaces trunk practice questions
Practise trunk verification and VLAN forwarding across switches.
CCNA wireless security practice questions
Practise WLAN security, authentication and wireless architecture concepts.
CCNA IPv6 practice questions
Practise IPv6 addressing, routes, neighbour discovery and common IPv6 exam traps.
More questions from this exam
Keep practising from the same exam bank, or move into a focused topic page if this question exposed a weak area.
Question 1
A router learns the same prefix from both OSPF and EIGRP. Which route is installed by default?
Question 2
A router shows this output: R1#show ip ospf neighbor Neighbor ID Pri State Dead Time Address Interface 10.1.1.2 1 FULL/DR 00:00:34 192.168.12.2 GigabitEthernet0/0 10.1.1.3 1 2WAY/DROTHER 00:00:39 192.168.12.3 GigabitEthernet0/0 Which statement is correct?
Question 3
What is the OSPF metric called?
Question 4
A non-root switch has two uplinks toward the root bridge. One path has a lower total STP cost than the other. What role will the lower-cost uplink have?
Question 5
A router interface applies this ACL inbound: 10 deny tcp any any eq 80 20 permit ip any any A user reports that web browsing to a server by IP address fails, but ping works. Which statement best explains the behavior?
Question 6
A router learns route 198.51.100.0/24 from OSPF with AD 110 and also has a static route to the same prefix configured with AD 150. Which route is installed?
FAQ
Questions learners often ask
What does this 200-301 question test?
NetFlow captures detailed metadata about IP traffic flows, including source and destination addresses, ports, and protocols, enabling conversation-level visibility.
What is the correct answer to this question?
The correct answer is: NetFlow — The best addition is NetFlow because it provides conversation- and flow-level visibility, not just interface totals. In practical terms, SNMP can show that an interface is busy, but it does not by itself explain which hosts or applications are consuming the bandwidth. NetFlow adds that layer of detail. This is a common operations distinction between counters and flows.
What should I do if I get this 200-301 question wrong?
Then try more questions from the same exam bank and focus on understanding why the wrong options are tempting.
Discussion
Loading comments…
Sign in to join the discussion.