What are three reasons to collect Netflow data on a company network? (Choose three.)
A. To identify applications causing congestion. B. To authorize user network access. C. To report and alert link up / down instances. D. To diagnose slow network performance, bandwidth hogs, and bandwidth utilization. E. To detect suboptimal routing in the network. F. To confirm the appropriate amount of bandwidth that has been allocated to each Class of Service.
Correct Answers: A, D, F
Explanation:
NetFlow facilitates solutions to many common problems encountered by IT professionals.
+ Analyze new applications and their network impact
Identify new application network loads such as VoIP or remote site additions. + Reduction in peak WAN traffic
Use NetFlow statistics to measure WAN traffic improvement from application-policy changes; understand who is utilizing the network and the network top talkers. + Troubleshooting and understanding network pain points
Diagnose slow network performance, bandwidth hogs and bandwidth utilization quickly with command line interface or reporting tools. -> D is correct. + Detection of unauthorized WAN traffic
Avoid costly upgrades by identifying the applications causing congestion. -> A is correct. + Security and anomaly detection
NetFlow can be used for anomaly detection and worm diagnosis along with applications such as Cisco CS-Mars. + Validation of QoS parameters
Confirm that appropriate bandwidth has been allocated to each Class of Service (CoS) and that no CoS is over- or under-subscribed.-> F is correct.
What are three factors a network administrator must consider before implementing Netflow in the network? (Choose three.)
A. CPU utilization B. where Netflow data will be sent C. number of devices exporting Netflow data D. port availability E. SNMP version F. WAN encapsulation
Correct Answers: A, B, C
Explanation:
NetFlow has a reputation for increasing CPU utilization on your network devices. Cisco’s performance testing seems to indicate that newer hardware can accommodate this load pretty well, but you will still want to check it out before you turn on the feature. Some symptoms of high CPU utilization are very large jitter and increased delay. Services running
on the device may also be affected.
Another thing to keep in mind is the amount of data you’re going to be sending across the network. Depending on how much traffic you have and how you configure it, the traffic can be substantial. For example, you may not want to send NetFlow data from a datacenter switch to a NetFlow collector on the other side of a small WAN circuit. Also bear in mind that the flows from aggregating large numbers of devices can add up.