Courseiva
hardMultiple SelectObjective-mapped

300-410 Practice Question: Which THREE statements about the NetFlow flow…

Which THREE statements about the NetFlow flow cache and export timing are correct? (Choose THREE.)

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

A flow is exported when it has been idle for the inactive timeout period, which defaults to 15 seconds.

The NetFlow flow cache stores active flows. Flows are exported when they become inactive (no new packets for a timeout period) or when they are long-lived (active timeout). The default active timeout is 30 minutes, and the default inactive timeout is 15 seconds. When the cache is full, the router may force-export the oldest flows to make room. The cache size is configurable but has a hardware-dependent maximum. Flow export does not wait for the cache to be full before exporting.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • A flow is exported when it has been idle for the inactive timeout period, which defaults to 15 seconds.

    Why this is correct

    Correct. The inactive timeout triggers export when no packets match the flow for the configured period; default is 15 seconds.

  • The default active flow timeout is 30 minutes, after which a long-lived flow is exported even if it is still active.

    Why this is correct

    Correct. The active timeout ensures that long flows are reported periodically; default is 30 minutes.

  • Flows are only exported when the flow cache becomes 100% full.

    Why it's wrong here

    Incorrect. Flows are exported based on timeouts, not cache fullness. When the cache is full, the router may force-export the oldest flows, but this is not the only trigger.

  • The 'ip flow-cache timeout active' command can be used to change the active timeout value.

    Why this is correct

    Correct. This command modifies the active timeout (in minutes). The inactive timeout is changed with 'ip flow-cache timeout inactive'.

  • The maximum number of flow cache entries is fixed at 64,000 and cannot be changed.

    Why it's wrong here

    Incorrect. The cache size is configurable using 'ip flow-cache entries' and varies by platform; 64,000 is a common default but not a fixed maximum.

About these practice questions

One of 1,966 original 300-410 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This 300-410 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 300-410 exam.