3.6 Monitoring Protocols CCIE-SECURITY Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   What is the key advantage of IPFIX over traditional NetFlow?

   • AIPFIX is a Cisco proprietary protocol with better integration
   • BIPFIX does not require a collector for data export
   • CIPFIX uses fixed-format records that are faster to parse
   • DIPFIX uses template-based records, allowing flexible field definitions
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Which statement is true regarding IPFIX and NetFlow?

   • AIPFIX is based on NetFlow version 5
   • BIPFIX is a proprietary Cisco protocol
   • CIPFIX is the IETF standard version of NetFlow
   • DIPFIX and NetFlow are completely unrelated protocols
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   What is the primary purpose of NSEL on Cisco ASA firewalls?

   • ATo generate security event logs for traffic flows through the firewall
   • BTo replace syslog for all firewall logging
   • CTo provide real-time packet capture on the firewall
   • DTo collect performance metrics from the ASA hardware
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   How does NSEL differ from traditional NetFlow?

   • ANSEL is designed for firewalls and includes security event information like access-list hits and user identity
   • BNSEL exports only flow statistics, not security events
   • CNSEL is a Cisco proprietary protocol that only works on routers
   • DNSEL uses UDP port 9996 for export, while NetFlow uses TCP
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   In SNMP architecture, what is the role of the MIB?

   • AIt is a database that defines the structure of management information
   • BIt is the protocol used to transport SNMP messages
   • CIt is the software that runs on the managed device to collect data
   • DIt is the network management station that sends requests
   Reveal Solution Discussion Select an answer first