hardMultiple Choice
300-410 Practice Question: Runs the following command on Router R1: R1# show…
A network engineer runs the following command on Router R1:
R1# show flow monitor FLOW-MONITOR-1 cache format table
Cache type: Normal Cache size: 1000 Current entries: 1000 High Watermark: 1000
Flows added: 50000 Flows aged: 49000 - Active timeout (1800 secs) 40000 - Inactive timeout (15 secs) 8000 - Event aged 0 - Watermark aged 1000 - Emergency aged 0
Based on this output, what is the most likely issue?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The cache size is too small, causing watermark aging and potential loss of flow data.
The cache is full (1000 current entries, high watermark 1000), and watermark aging has occurred (1000 flows aged due to watermark). This indicates the cache is overflowing, causing flows to be aged prematurely to make room for new flows. This can lead to incomplete data.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
The cache size is too small, causing watermark aging and potential loss of flow data.
Why this is correct
The cache reached its 1000-entry maximum (High Watermark 1000), forcing 1000 flows to be aged via the watermark mechanism. With 50000 flows added against only 1000 slots, the cache is undersized, causing premature eviction and potential loss of flow data.
- ✗
The active timeout is set too low at 1800 seconds.
Why it's wrong here
Active timeout ages long-lived flows still exchanging packets, so 1800 seconds is normal for sustained sessions and does not indicate a fault. Lowering it would evict active flows prematurely. The cache is saturated at 1000 entries with 1000 watermark-aged evictions, so the cache size is undersized.
- ✗
The inactive timeout is set too low at 15 seconds.
Why it's wrong here
A 15-second inactive timeout ages only 8,000 of 49,000 flows, so it is not the dominant cause of cache churn. Active timeout accounts for 40,000 aged entries, and the 1,000-entry cache hit its high watermark, forcing watermark ageing. Shortening inactive timeouts suits high-volume, short-lived flow environments, not this sustained-traffic scenario.
- ✗
The flow exporter is not configured.
Why it's wrong here
The cache is full at 1000 entries with a high watermark of 1000, so new flows cannot be recorded; export configuration is irrelevant to cache saturation. A missing flow exporter would instead cause records to accumulate locally without being sent to a collector, which is the scenario this option describes.
Go deeper
Related to this question
About these practice questions
This 300-410 question is part of Courseiva's 1,401-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 300-410 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 300-410 exam.