hardMultiple Choice
300-410 Practice Question: Runs the following command on Router R1: R1# show…
A network engineer runs the following command on Router R1:
R1# show flow monitor FLOW-MONITOR-1 cache format table
Cache type: Normal Cache size: 1000 Current entries: 0 High Watermark: 0
Flows added: 0 Flows aged: 0 - Active timeout (1800 secs) 0 - Inactive timeout (15 secs) 0 - Event aged 0 - Watermark aged 0 - Emergency aged 0
R1# show flow interface GigabitEthernet0/1 Interface GigabitEthernet0/1
FNF: monitor Monitor: FLOW-MONITOR-1 direction: Input traffic-statistics: enabled
Based on both outputs, what is the most likely problem?
⚠ Common exam trap
The trap is assuming that an empty flow cache means the monitor isn't attached — candidates must cross-check 'show flow interface' to confirm attachment before concluding the problem is traffic-related.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The flow monitor is attached, but no traffic is flowing through the interface.
The 'show flow monitor ... cache format table' output shows Current entries: 0, Flows added: 0, and all aging counters at 0, meaning no flows have ever been recorded. The 'show flow interface' output confirms the monitor FLOW-MONITOR-1 is attached to GigabitEthernet0/1 in the Input direction with traffic-statistics enabled. Since the monitor is properly attached but no flows exist, the most likely cause is that no traffic is traversing the interface.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
The flow monitor is attached, but no traffic is flowing through the interface.
Why this is correct
The monitor is bound to GigabitEthernet0/1 in the input direction with traffic-statistics enabled, yet every counter reads zero, including flows added and the high watermark. That pattern means the cache has never received a single packet, so no traffic is traversing the interface.
- ✗
The flow monitor is not attached to the interface.
Why it's wrong here
The monitor is attached: `show flow interface` reports FLOW-MONITOR-1 monitoring input on GigabitEthernet0/1. Zero entries instead point to no matching traffic or an unapplied exporter/record. Attachment would be the fault if `show flow interface` showed no monitor, which is not the case here.
- ✗
The cache size is too small.
Why it's wrong here
Zero flows added with an empty cache points to no traffic being matched, not capacity exhaustion; a 1000-entry cache is ample. Cache sizing matters when entries overflow and the watermark saturates, ageing active flows prematurely.
- ✗
The flow exporter is misconfigured.
Why it's wrong here
The cache shows zero flows added despite the monitor being bound to the interface, so the exporter cannot be the fault — export happens only after entries are created. Exporters are tempting because they are the usual Flexible NetFlow misconfiguration, and a broken exporter would be correct if flows were cached but absent from the collector.
Go deeper
Related to this question
About these practice questions
One of 1,401 original 300-410 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Cisco exam blueprint
This 300-410 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 300-410 exam.