Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS) — Question 98

How is NetFlow different from traffic mirroring?

Answer options

• A. NetFlow collects metadata and traffic mirroring clones data.
• B. Traffic mirroring impacts switch performance and NetFlow does not.
• C. Traffic mirroring costs less to operate than NetFlow.
• D. NetFlow generates more data than traffic mirroring.

Correct answer: A

Explanation

The correct answer is A because NetFlow focuses on collecting metadata about traffic flows, while traffic mirroring involves duplicating the actual traffic data for analysis. Option B is incorrect as both methods can impact performance differently. Options C and D are also incorrect since the cost and data generation depend on various factors and do not universally favor traffic mirroring over NetFlow.