Implementing and Operating Cisco Security Core Technologies (SCOR) — Question 324

What is a capability of Cisco ASA NetFlow?

Answer options

• A. It sends NetFlow data records from active and standby ASAs in an active-standby failover pair.
• B. It logs all event types only to the same collector.
• C. It filters NSEL events based on traffic.
• D. It generates NSEL events even if the MPF is not configured.

Correct answer: C

Explanation

The correct answer is C because Cisco ASA NetFlow is capable of filtering NSEL events based on traffic patterns. Option A is incorrect as it describes data transmission rather than filtering; option B is wrong because it suggests a limitation that does not exist; and option D is not true as NSEL events generation is contingent on MPF configuration.