Implementing and Operating Cisco Security Core Technologies (SCOR) — Question 198

An engineer is configuring their router to send NetfFow data to Stealthwatch which has an IP address of 1.1.1.1 using the flow record Stealthwatch406143794 command. Which additional command is required to complete the flow record?

Answer options

• A. cache timeout active 60
• B. destination 1.1.1.1
• C. match ipv4 ttl
• D. transport udp 2055

Correct answer: C

Explanation

The command 'match ipv4 ttl' is essential because it enables the flow record to include the Time to Live (TTL) value, which is critical for analyzing the path taken by packets. The other options, while relevant to NetFlow configuration, do not specifically complete the required flow record setup for capturing important packet characteristics.