mediumMultiple Choice
300-410 Practice Question: Runs the following command to debug NetFlow…
A network engineer runs the following command to debug NetFlow export:
R1# debug ip flow export IP Flow export debugging is on
R1#
*Mar 1 00:05:23.123: FLOW: export v9 flow 1 with 30 packets *Mar 1 00:05:23.124: FLOW: export v9 flow 2 with 15 packets *Mar 1 00:05:23.125: FLOW: export v9 flow 3 with 22 packets *Mar 1 00:05:23.126: FLOW: export v9 flow 4 with 8 packets *Mar 1 00:05:23.127: FLOW: export v9 flow 5 with 12 packets
What does this output indicate?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
NetFlow version 9 export is functioning correctly, exporting multiple flows with their packet counts.
The debug output shows that NetFlow version 9 export is working, with flows being exported in real time. Each line shows a flow ID and the number of packets in that flow. This indicates that NetFlow is actively exporting flow data.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
NetFlow export is failing because the flows are too small.
Why it's wrong here
Packet counts of 8 to 30 are normal for NetFlow export; nothing indicates failure. It is tempting because small counts look suspicious, but the debug shows successful exports, and NetFlow has no minimum packet threshold that would cause drops.
- ✓
NetFlow version 9 export is functioning correctly, exporting multiple flows with their packet counts.
Why this is correct
The debug output shows flow records exported using NetFlow version 9, each with its packet count, confirming successful export to the collector. No error or retry messages appear, so the export process is operating correctly and the stated constraint of verifying NetFlow export functionality is met.
- ✗
Only one flow is being exported at a time.
Why it's wrong here
Five distinct flows appear in the same millisecond, showing concurrent export rather than serialisation. It is tempting because each line names one flow, but the timestamps prove multiple flows are exported together, not one at a time.
- ✗
The export is using NetFlow version 5.
Why it's wrong here
The debug lines explicitly show 'export v9', so version 5 is contradicted by the output itself. Version 5 is tempting because it is the common legacy default, but the log's version field names v9, which uses templates rather than fixed-format records.
Go deeper
Related to this question
About these practice questions
Courseiva writes every 300-410 question from scratch — 1,401 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 300-410 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 300-410 exam.