CCNA AI and Network Operations Practice Question
Network Topology
You are connected to R1 via the console. SNMP v2c community strings (public RO, private RW) are already configured. The network has a management server at 10.1.1.100 and a NetFlow collector at 10.1.1.200. Configure SNMP traps to the management server for link status changes. Also configure NetFlow on interface GigabitEthernet0/0 to export version 9 to the collector, with a source interface of Loopback0 (10.255.255.1/32).
⚠ Common exam trap
Pay close attention to the IP addresses: the management server (10.1.1.100) is for SNMP traps, and the collector (10.1.1.200) is for NetFlow. Also, remember that SNMP traps use the read-only community, and NetFlow version must match the requirement (version 9).
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
snmp-server host 10.1.1.100 version 2c public snmp-server enable traps snmp linkdown linkup ip flow-export destination 10.1.1.200 2055 ip flow-export version 9 ip flow-export source Loopback0 interface GigabitEthernet0/0 ip flow ingress
The current configuration has SNMP community strings but lacks trap destinations and NetFlow export. To fix, you must configure snmp-server host 10.1.1.100 version 2c public to send traps, and snmp-server enable traps snmp linkdown linkup is required to send link status changes. For NetFlow, you need ip flow-export destination 10.1.1.200 2055 and then ip flow-export version 9 to set the export version. Also configure ip flow-export source Loopback0 and apply ip flow ingress on GigabitEthernet0/0. Verification commands confirm the settings.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
snmp-server host 10.1.1.100 version 2c public snmp-server enable traps snmp linkdown linkup ip flow-export destination 10.1.1.200 2055 ip flow-export version 9 ip flow-export source Loopback0 interface GigabitEthernet0/0 ip flow ingress
Why this is correct
This configuration is correct because it sends SNMPv2c traps to the management server at 10.1.1.100 using the read-only community string "public", and it explicitly enables only the required linkdown and linkup traps with the `snmp-server enable traps snmp linkdown linkup` command. NetFlow is exported to the collector at 10.1.1.200 on UDP port 2055 using version 9, which is the required template-based export format. The export source is set to Loopback0 for a stable IP address, and `ip flow ingress` on GigabitEthernet0/0 monitors inbound traffic as demanded by the question.
- ✗
snmp-server host 10.1.1.200 version 2c private snmp-server enable traps ip flow-export destination 10.1.1.100 2055 version 9 ip flow-export source Loopback0 interface GigabitEthernet0/0 ip flow egress
Why it's wrong here
This configuration is incorrect because the trap destination is set to the NetFlow collector (10.1.1.200) instead of the management server (10.1.1.100), and the NetFlow export destination is set to the management server instead of the collector. Additionally, NetFlow should be configured as ingress, not egress.
- ✗
snmp-server host 10.1.1.100 version 2c private snmp-server enable traps ip flow-export destination 10.1.1.200 2055 version 9 ip flow-export source Loopback0 interface GigabitEthernet0/0 ip flow ingress
Why it's wrong here
This configuration uses the read-write community string 'private' for SNMP traps instead of the read-only 'public'. While the trap destination and NetFlow settings are correct, the community string must match the read-only community for traps.
- ✗
snmp-server host 10.1.1.100 version 2c public snmp-server enable traps snmp linkdown linkup ip flow-export destination 10.1.1.200 2055 version 5 ip flow-export source Loopback0 interface GigabitEthernet0/0 ip flow ingress
Why it's wrong here
This configuration is almost correct but fails because it specifies NetFlow version 5 (`ip flow-export destination 10.1.1.200 2055 version 5`) instead of the explicitly required version 9. NetFlow v5 uses a fixed record format that lacks the flexibility and extensibility of v9's template-based structure, so it cannot support advanced features such as MPLS or IPv6 flow records. The SNMP trap destination, community string "public", link trap settings, export source Loopback0, and `ip flow ingress` are all correct; the sole defect is the incorrect NetFlow export version, which would prevent the collector from receiving the required v9 flow data.
Option-by-option analysis
Why each answer is right or wrong
Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The 200-301 exam frequently reuses these exact scenarios with slightly different constraints.
✓snmp-server host 10.1.1.100 version 2c public snmp-server enable traps snmp linkdown linkup ip flow-export destination 10.1.1.200 2055 ip flow-export version 9 ip flow-export source Loopback0 interface GigabitEthernet0/0 ip flow ingressCorrect answer▾
Why this is correct
This configuration is correct because it sends SNMPv2c traps to the management server at 10.1.1.100 using the read-only community string "public", and it explicitly enables only the required linkdown and linkup traps with the `snmp-server enable traps snmp linkdown linkup` command. NetFlow is exported to the collector at 10.1.1.200 on UDP port 2055 using version 9, which is the required template-based export format. The export source is set to Loopback0 for a stable IP address, and `ip flow ingress` on GigabitEthernet0/0 monitors inbound traffic as demanded by the question.
✗snmp-server host 10.1.1.200 version 2c private snmp-server enable traps ip flow-export destination 10.1.1.100 2055 version 9 ip flow-export source Loopback0 interface GigabitEthernet0/0 ip flow egressWrong answer — click to see why▾
Why this is wrong here
The specific factual error: The SNMP trap destination and NetFlow export destination are swapped, and the flow direction is egress instead of ingress.
Why candidates choose this
Candidates might confuse the management server and collector IPs, or think that NetFlow egress is equivalent to ingress.
✗snmp-server host 10.1.1.100 version 2c private snmp-server enable traps ip flow-export destination 10.1.1.200 2055 version 9 ip flow-export source Loopback0 interface GigabitEthernet0/0 ip flow ingressWrong answer — click to see why▾
Why this is wrong here
The specific factual error: SNMP traps should use the read-only community string 'public', not the read-write 'private'.
Why candidates choose this
Candidates may think any community string works for traps, or they may confuse the roles of read-only and read-write communities.
✗snmp-server host 10.1.1.100 version 2c public snmp-server enable traps snmp linkdown linkup ip flow-export destination 10.1.1.200 2055 version 5 ip flow-export source Loopback0 interface GigabitEthernet0/0 ip flow ingressWrong answer — click to see why▾
Why this is wrong here
The specific factual error: NetFlow export version is set to 5, but the requirement is version 9.
Why candidates choose this
Candidates might default to version 5 as it is older and commonly used, or they may not read the requirement carefully.
Analysis generated from the official 200-301blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”
Go deeper
Related to this question
Learn chapter
Agentic AI in Network Operations
Key term
NetFlow
NetFlow is a network protocol developed by Cisco that collects and monitors IP traffic data to provide visibility into network usage, performance, and security.
Key term
Interface
An interface is a point of connection or interaction between two systems, devices, or software components that allows them to exchange information or signals.
About these practice questions
This 200-301 question is part of Courseiva's 1,389-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 200-301 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 200-301 exam.