hardMultiple Choice
300-410 Practice Question: Which statement correctly describes the default…
Which statement correctly describes the default 'match' direction in a Flexible NetFlow flow record?
⚠ Common exam trap
The trap is assuming that the default match direction is 'both' or that it must always be specified; in reality, it defaults to 'input'.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The default match direction is 'input' (ingress).
In a Flexible NetFlow flow record, the default match direction is 'input' (ingress). This means that by default, the flow record matches on fields in the ingress direction. If you need to match on egress fields, you must explicitly configure the 'match direction output' command.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The default match direction is 'output' (egress).
Why it's wrong here
The default match direction is input, not output; egress matching requires explicit configuration. Output is tempting because egress flow data is valuable for certain accounting and QoS scenarios, but it is an opt-in setting rather than the built-in default.
- ✗
The default match direction is 'both' (input and output).
Why it's wrong here
Flexible NetFlow flow records default to matching only the input direction; 'both' must be explicitly configured. Selecting both directions is tempting because it captures bidirectional traffic in one record, which is a deliberate design choice rather than the default behaviour.
- ✓
The default match direction is 'input' (ingress).
Why this is correct
In a Flexible NetFlow flow record, the match direction defaults to input, meaning the record matches fields on ingress traffic. Egress matching must be configured explicitly, so the default behaviour captures inbound packets unless changed.
- ✗
There is no default direction; it must always be specified.
Why it's wrong here
A default direction does exist: match direction defaults to input, so it need not always be specified. Requiring explicit configuration is tempting because many flow record fields are mandatory, but direction is one of the parameters that carries an implicit default.
Go deeper
Related to this question
About these practice questions
This 300-410 question is part of Courseiva's 1,401-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Cisco exam blueprint
This 300-410 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 300-410 exam.