mediumMultiple ChoiceObjective-mapped
300-410 Practice Question: Runs the following command on Router R1: R1# show…
A network engineer runs the following command on Router R1:
R1# show flow monitor FLOW-MONITOR-1 cache format table
Cache type: Normal Cache size: 1000 Current entries: 500 High Watermark: 800
Flows added: 15000 Flows aged: 14500 - Active timeout (1800 secs) 12000 - Inactive timeout (15 secs) 2500 - Event aged 0 - Watermark aged 0 - Emergency aged 0
Based on this output, what is a valid conclusion?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Most flows are long-lived, as indicated by the high number of active timeout expirations.
The cache has 500 current entries, with many flows added and aged. The high watermark of 800 indicates the cache has been near full, but no emergency aging occurred. The active timeout accounts for most aging, meaning flows are long-lived.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The cache is experiencing packet drops due to overflow.
Why it's wrong here
Emergency aged is 0, meaning no emergency aging occurred, so no drops due to overflow.
- ✓
Most flows are long-lived, as indicated by the high number of active timeout expirations.
Why this is correct
Active timeout (1800 secs) aged 12000 flows, meaning flows lasted longer than 30 minutes, indicating long-lived traffic.
- ✗
The inactive timeout is set too high at 15 seconds.
Why it's wrong here
15 seconds is a typical default; 2500 inactive timeouts indicate short-lived flows are also present.
- ✗
The cache size should be increased to 2000 entries.
Why it's wrong here
The high watermark is 800, below the cache size of 1000, so no immediate need to increase.
Go deeper
Related to this question
About these practice questions
Courseiva writes every 300-410 question from scratch — 1,966 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 300-410 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 300-410 exam.