mediumMultiple Choice
300-410 Practice Question: Runs the following command on Router R1: R1# show…
A network engineer runs the following command on Router R1:
R1# show flow monitor FLOW-MONITOR-1 cache format table
Cache type: Normal Cache size: 1000 Current entries: 0 High Watermark: 0
Flows added: 0 Flows aged: 0 - Active timeout (1800 secs) 0 - Inactive timeout (15 secs) 0 - Event aged 0 - Watermark aged 0 - Emergency aged 0
Based on this output, what is the most likely problem?
⚠ Common exam trap
The trap is focusing on cache size or timeout values as the cause; the exam expects you to recognize that zero flows added across all counters points to the monitor not being applied to an interface, not to a configuration parameter being wrong.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The flow monitor is not applied to any interface.
The output shows 'Current entries: 0', 'Flows added: 0', and all aging counters at 0, which means the flow monitor cache is not receiving any flow data. The most likely cause is that the flow monitor (or its associated flow exporter/record) has not been applied to any interface, so no traffic is being monitored. If the monitor were applied, even with no matching traffic, you would typically see some cache activity or at least the monitor would be active; zero flows added across all counters strongly indicates the monitor is not attached to an interface.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The cache size is too small at 1000 entries.
Why it's wrong here
Even with a small cache, flows would be added before aging. 0 flows added suggests no capture.
- ✓
The flow monitor is not applied to any interface.
Why this is correct
Zero flows added with an empty cache indicates the monitor is not receiving traffic, because it is not bound to any interface. Applying the flow monitor to an interface via the flow monitor command populates the cache, satisfying the stem's diagnosis of the missing binding.
- ✗
The active timeout is too long at 1800 seconds.
Why it's wrong here
Timeout values affect aging, not the addition of flows.
- ✗
The cache type is Normal, which requires a sampler.
Why it's wrong here
Normal cache type does not require a sampler; it captures all packets.
Go deeper
Related to this question
About these practice questions
This 300-410 question is part of Courseiva's 1,401-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Cisco exam blueprint
This 300-410 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 300-410 exam.