What is a characteristic of Cisco ASA Netflow v9 Secure Event Logging?

What is a characteristic of Cisco ASA Netflow v9 Secure Event Logging?
A . It tracks flow-create, flow-teardown, and flow-denied events.
B . It provides stateless IP flow tracking that exports all records of a specific flow.
C . It tracks the flow continuously and provides updates every 10 seconds.
D . Its events match all traffic classes in parallel.

View Answer

Answer: A

Explanation:

The ASA and ASASM implementations of NetFlow Secure Event Logging (NSEL) provide a stateful, IP flow tracking method that exports only those records that indicate significant events in a flow.

The significant events that are tracked include flow-create, flow-teardown, and flow-denied (excluding those flows that are denied by EtherType ACLs).

Reference: https://www.cisco.com/c/en/us/td/docs/security/asa/asa92/configuration/general/asa-general-cli/monitor-nsel.html