mediumMultiple Choice
300-410 Practice Question: Configures a Flexible NetFlow monitor to capture…
A network engineer configures a Flexible NetFlow monitor to capture traffic on a router's WAN interface. The flow record includes 'match ipv4 source address', 'match ipv4 destination address', and 'collect counter bytes'. After applying the monitor, 'show flow monitor name MONITOR cache' shows flows, but the collector receives no data. 'show flow exporter name EXPORTER statistics' shows 'Export packets sent: 0'. What is the most likely cause?
⚠ Common exam trap
300-410 often tests the three-component Flexible NetFlow model, and candidates frequently blame the exporter's destination or source settings when the real issue is that the monitor never references the exporter at all.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The flow monitor is not associated with any flow exporter.
The flow exporter statistics showing 'Export packets sent: 0' while the monitor cache contains flows indicates the monitor is collecting data but never invoking the exporter. In Flexible NetFlow, the flow monitor must reference a flow exporter via the 'exporter EXPORTER' command under flow monitor configuration; without that association, the monitor has no destination to send records to. This is the most direct cause of zero exports despite a populated cache.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The flow exporter is configured with the wrong destination IP address.
Why it's wrong here
A wrong destination IP would still increment 'Export packets sent' as UDP datagrams leave the router; the counter would only stay at zero if export never triggered. It is the correct cause when the counter rises but the collector receives nothing.
- ✓
The flow monitor is not associated with any flow exporter.
Why this is correct
Export packets sent: 0 means the monitor's cache never reaches an exporter, because no exporter is attached to the monitor. The 'flow exporter' command must be added under the monitor configuration; without that association, cached flows are never exported to the collector.
- ✗
The flow exporter is missing the 'source' interface command.
Why it's wrong here
A missing source interface affects the exporter's source address selection, not whether packets are sent at all; exports would still increment. Configuring source is correct when the collector filters by exporter address or multiple interfaces need distinct sources.
- ✗
The flow cache is full, preventing new exports.
Why it's wrong here
A full cache would still permit exports; it would simply drop or age out older flows. Zero export packets points to the export process itself never triggering, typically because the exporter is not attached to the monitor or no valid destination is configured. Cache capacity is a retention concern, not an export trigger.
Go deeper
Related to this question
About these practice questions
Courseiva writes every 300-410 question from scratch — 1,401 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Cisco exam blueprint
This 300-410 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 300-410 exam.