mediumMultiple ChoiceObjective-mapped
300-410 Practice Question: Examine this partial configuration on router R3:…
Examine this partial configuration on router R3:
flow record RECORD-2 match ipv4 source address match ipv4 destination address match ipv4 protocol match transport source-port match transport destination-port collect counter bytes collect counter packets ! flow monitor MONITOR-3 record RECORD-2 cache timeout active 60 cache timeout inactive 15 !
interface GigabitEthernet0/3 ip flow monitor MONITOR-3 input ip flow monitor MONITOR-3 output
!
Which statement is true about this configuration?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The router will create separate flow records for traffic entering and leaving GigabitEthernet0/3, doubling the cache entries.
This question tests understanding of bidirectional flow monitoring and cache timeout interaction.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
The router will create separate flow records for traffic entering and leaving GigabitEthernet0/3, doubling the cache entries.
Why this is correct
Applying the same flow monitor in both input and output directions creates separate flow entries for each direction, effectively doubling the cache usage.
- ✗
The router will aggregate input and output flows into a single cache entry for each unique flow.
Why it's wrong here
Flexible NetFlow does not aggregate flows from different directions; each direction is tracked independently.
- ✗
The inactive timeout of 15 seconds will cause flows to be exported only after 15 seconds of inactivity, overriding the active timeout.
Why it's wrong here
Both timeouts are independent; active timeout exports ongoing flows every 60 seconds, while inactive timeout exports idle flows after 15 seconds.
- ✗
The configuration is invalid because a flow monitor cannot be applied to both input and output on the same interface.
Why it's wrong here
It is valid to apply the same flow monitor in both directions; this is a common practice for full traffic visibility.
Go deeper
Related to this question
About these practice questions
This 300-410 question is part of Courseiva's 1,966-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 300-410 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 300-410 exam.