350-401 Network Assurance Practice Question
A network engineer is analyzing traffic flows using Cisco IOS NetFlow on a router. The engineer notices that the NetFlow cache is filling up rapidly, causing older entries to be exported prematurely before they can be properly aggregated. Which NetFlow configuration parameter should the engineer adjust to control the maximum number of entries in the cache?
⚠ Common exam trap
Watch out — candidates often confuse cache size limits with timeout settings; timeouts control when flows are exported, but 'cache entries' controls how many flows can be stored.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
cache entries
In Cisco IOS NetFlow, the cache has a maximum number of entries defined by the 'cache entries' command. When the cache reaches this limit, the router may prematurely export older flows to free space, leading to incomplete aggregation. Increasing the cache entries allows more flows to be stored, reducing premature exports. Other parameters like timeouts affect flow expiration but not the total capacity. The engineer should adjust 'cache entries' to match the traffic volume and available memory.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
cache entries
Why this is correct
The 'cache entries' command under the NetFlow cache configuration specifies the maximum number of entries that the NetFlow cache can hold. When the cache reaches this limit, the router may force-export older entries to make room for new ones. By increasing this value, the engineer can allow more entries to be stored, reducing premature exports. This directly addresses the issue of the cache filling up rapidly.
- ✗
cache timeout active
Why it's wrong here
The 'cache timeout active' command sets the active timeout, which determines how long a flow can remain active before being exported. Adjusting this timeout affects how frequently flows are exported, but it does not control the maximum number of entries in the cache. If the cache is filling rapidly, increasing the active timeout would not prevent premature export due to cache size limits; it might even worsen it by keeping flows longer.
- ✗
ip flow-export destination
Why it's wrong here
The 'ip flow-export destination' command configures the IP address and port of the external NetFlow collector to which flow data is exported. It does not influence the cache size or entry limits. While exporting to a collector is important for analysis, it does not address the local cache filling up. The engineer needs to adjust cache parameters, not export settings.
- ✗
cache timeout inactive
Why it's wrong here
The 'cache timeout inactive' command sets the inactive timeout, which determines how long a flow can remain inactive before being exported. This parameter affects how quickly idle flows are removed, but it does not control the total number of entries in the cache. Adjusting it would not solve the problem of the cache filling up due to high traffic volume; it might help remove idle flows faster, but that is not the primary control for cache size.
Go deeper
Related to this question
About these practice questions
Courseiva writes every 350-401 question from scratch — 1,923 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Cisco exam blueprint
This 350-401 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-401 exam.