Which protocol is used by the Cisco Cyber Threat Defense Solution to collect information about the traffic that traverses the network?

Which protocol is used by the Cisco Cyber Threat Defense Solution to collect information about the traffic that traverses the network?

• A. IPFIX
• B. NetFlow
• C. SNMP
• D. sFlow

Answer: (B)

NetFlow is the protocol used to export flow-based visibility into traffic traversing the network. A flow is defined by identifiers like source and destination IP addresses and ports, the transport protocol, and other fields; NetFlow records also include statistics such as bytes, packets, and duration. This flow-level data lets Cisco CTD see who is talking to whom, when, and how much, enabling effective threat detection and traffic analysis without capturing full packet contents. SNMP is for device management, not traffic flows; sFlow provides sampled data which can miss many flows; IPFIX is the standard version of flow data, but NetFlow is the protocol most closely associated with Cisco CTD in this context.

NetFlow is the protocol used to export flow-based visibility into traffic traversing the network. A flow is defined by identifiers like source and destination IP addresses and ports, the transport protocol, and other fields; NetFlow records also include statistics such as bytes, packets, and duration. This flow-level data lets Cisco CTD see who is talking to whom, when, and how much, enabling effective threat detection and traffic analysis without capturing full packet contents. SNMP is for device management, not traffic flows; sFlow provides sampled data which can miss many flows; IPFIX is the standard version of flow data, but NetFlow is the protocol most closely associated with Cisco CTD in this context.