mediumMultiple Choice
350-401 Practice Question: Examine the following configuration snippet:…
Examine the following configuration snippet:
interface GigabitEthernet0/1 ip flow monitor FLOW-MONITOR input ip flow monitor FLOW-MONITOR output
! flow monitor FLOW-MONITOR exporter EXPORTER-1 record netflow ipv4 original-input ! flow exporter EXPORTER-1 destination 192.168.1.100 transport udp 2055 !
What is the effect of this configuration?
⚠ Common exam trap
Cisco often tests the misconception that 'netflow ipv4 original-input' implies NetFlow v5 or that IPFIX is automatically used, when in fact the default version is v9 unless explicitly changed to v10 (IPFIX).
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
NetFlow v9 records are sent to the collector at 192.168.1.100 on UDP port 2055.
The configuration uses the 'netflow ipv4 original-input' record, which is a predefined record for NetFlow v9 (the default when no explicit version is specified). The exporter sends data to 192.168.1.100 on UDP port 2055, which is the standard port for NetFlow collectors. This results in NetFlow v9 records being exported to the collector.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
NetFlow v9 records are sent to the collector at 192.168.1.100 on UDP port 2055.
Why this is correct
The flow monitor in this configuration references the record type 'netflow ipv4 original-input' and is linked to a flow exporter that sends packets to 192.168.1.100 via UDP port 2055. Because the exporter does not explicitly set a version, Cisco IOS/IOS-XE defaults to NetFlow v9, which is the template-based format required for the flexible fields in this record. Therefore, the exported traffic is indeed NetFlow v9 records to that collector/port.
- ✗
NetFlow v5 records are sent to the collector at 192.168.1.100 on UDP port 2055.
Why it's wrong here
NetFlow v5 uses a fixed 24-field header and does not support the customizable fields defined by 'netflow ipv4 original-input', which is a flexible NetFlow record. Additionally, Cisco's default export version for this type of configuration is v9, not v5. To send v5, you would have to explicitly configure 'ip flow-export version 5', which is not present here.
- ✗
IPFIX records are sent to the collector at 192.168.1.100 on UDP port 2055.
Why it's wrong here
IPFIX (NetFlow v10) would only be sent if the exporter were configured with 'version ipfix' or if the record type were 'ipfix' specific, such as 'ipv4 ipfix original-input'. This configuration uses neither, so the exporter remains in its default NetFlow v9 mode. IPFIX also typically uses different UDP ports (like 4739/4740) unless explicitly overridden, whereas this clearly points to UDP 2055.
- ✗
The configuration is missing the 'ip flow-export source' command to specify the source interface.
Why it's wrong here
The 'ip flow-export source' command is a recommended but optional feature for setting the source IP of exported packets. If omitted, the router automatically selects the IP address of the egress interface toward the collector, which still allows the export to function correctly. This statement is incorrect because it claims the configuration is incomplete, yet the export will work without that command.
Go deeper
Related to this question
About these practice questions
Courseiva writes every 350-401 question from scratch — 1,923 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 350-401 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-401 exam.