hardMultiple ChoiceObjective-mapped
300-410 Practice Question: Runs the following command to debug Flexible…
A network engineer runs the following command to debug Flexible NetFlow cache events:
R1# debug flow monitor FLOW-MONITOR-1
Flow Monitor FLOW-MONITOR-1 debugging is on R1#
*Mar 1 00:10:15.123: FLOW MONITOR: Cache entry created for flow 10.0.0.1:1234 -> 192.168.1.100:80 (TCP) *Mar 1 00:10:15.124: FLOW MONITOR: Cache entry updated for flow 10.0.0.1:1234 -> 192.168.1.100:80 (TCP) - bytes: 1460, packets: 1 *Mar 1 00:10:15.125: FLOW MONITOR: Cache entry updated for flow 10.0.0.1:1234 -> 192.168.1.100:80 (TCP) - bytes: 2920, packets: 2 *Mar 1 00:10:45.123: FLOW MONITOR: Cache entry aged for flow 10.0.0.1:1234 -> 192.168.1.100:80 (TCP) - reason: inactive timeout
What does this output indicate?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The flow was created, updated twice, and then aged due to inactive timeout, indicating a normal flow lifecycle.
The debug output shows the lifecycle of a flow in the Flexible NetFlow cache. A flow is created, then updated as packets are received, and eventually aged out due to inactive timeout after 30 seconds of inactivity (the default is 15 seconds, but this may be configured differently). This is normal behavior for a TCP connection that has ended.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The flow was aged due to active timeout after 1800 seconds.
Why it's wrong here
The aging reason is 'inactive timeout', not active timeout.
- ✓
The flow was created, updated twice, and then aged due to inactive timeout, indicating a normal flow lifecycle.
Why this is correct
The debug shows creation, two updates as packets arrive, and eventual aging due to inactivity, which is expected.
- ✗
The flow was dropped because the cache was full.
Why it's wrong here
The flow was aged, not dropped, and no cache full condition is indicated.
- ✗
The flow is still active in the cache.
Why it's wrong here
The last message indicates the cache entry was aged, so it is no longer active.
Visual reference
Go deeper
Related to this question
About these practice questions
One of 1,966 original 300-410 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 300-410 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 300-410 exam.