Exam 350-401 topic 1 question 875 discussion

1. flow record v4/v6 Talkers -> Defines the flow record for IPv4/IPv6 traffic. 2. flow monitor v4/v6Talkers -> Activates NetFlow monitoring for IPv4/IPv6 traffic using the specified IPv4/IPv6 flow record. 3. The administrator wants to collect IPv4 and IPv6 traffic statistics, but avoid overwhelming the CPU during periods of high traffic. -> need to maintain traffic monitoring while reducing NetFlow's impact on the CPU. 4. sampler R-1-1024 mode random 1 out of 1024 -> This configures a sampler that randomly selects 1 out of every 1024 packets for analysis, reducing the number of packets processed and lowering CPU usage. 5. flow monitor v6Talkers sampler R-1-1024 input -> Enables IPv6 flow monitoring on the Gi0/0 interface using the v6Talkers flow monitor, while applying the R-1-1024 sampler to reduce CPU load by analyzing 1 out of every 1024 packets.

I'm not sure how useful 1/1024 packets NetFlow data will be.

A is correct

Answer A sampler R-1-1024 mode random 1 out-of 1024 interface Gi0/0 ip flow monitor v4 Talkers sampler R-1-1024 input ipv6 flow monitor v6 Talkers sampler R-1-1024 input

https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/netflow/configuration/xe-16/test/nf-xe-16-book/nflow-filt-samp-traff-xe.html "Random Sampled NetFlow provides NetFlow data for a subset of traffic in a Cisco router by processing only one randomly selected packet out of n sequential packets (n is a user-configurable parameter). Packets are sampled as they arrive (before any NetFlow cache entries are made for those packets). Statistical traffic sampling substantially reduces consumption of router resources (especially CPU resources) while providing valuable NetFlow data." 'load-interval' simply specifies the time interval over which collected traffic data is averaged, and will not reduce or influence the packet collection itself.

Sampler seems right