Question

Difficulty: Very hardNetwork Performance Monitoring and Metrics

An enterprise network operations team is analyzing complex performance anomalies and telemetry configurations across a hybrid WAN deployment. Match each observed network symptom or monitoring configuration requirement on the left with the correct network performance monitoring metric or protocol mechanism on the right.

  • High variation in end-to-end packet delivery delay causing buffer underruns and garbled audio in real-time UDP voice streams despite adequate total bandwidth.Jitter (Packet Delay Variation)
  • Exporting statistical packet-header sampling directly from ASIC hardware across high-density 100 GbE core switches without maintaining stateful flow cache tables.sFlow (Sampled Flow Technology)
  • Polling infrastructure device metrics with cryptographic user authentication and payload encryption using AES to protect sensitive OID data in transit.SNMPv3 using the USM authPriv Security Level
  • Aggregating IP traffic flow statistics based on matching 5-tuple attributes into cached records to identify top bandwidth-consuming applications across Layer 3 interfaces.IPFIX / NetFlow Telemetry

Answer

The correct pairings are: Packet delay variation affecting VoIP corresponds to Jitter; Stateless hardware packet sampling across 100 GbE interfaces corresponds to sFlow; Authenticated and encrypted OID polling corresponds to SNMPv3 using authPriv; Stateful 5-tuple flow aggregation corresponds to IPFIX / NetFlow Telemetry.
Each observed monitoring requirement correctly maps to its functional metric or protocol: Jitter measures packet arrival time variance; sFlow provides stateless hardware packet sampling for ultra-high-speed links; SNMPv3 authPriv provides authenticated and AES-encrypted management queries; IPFIX/NetFlow aggregates traffic flows based on 5-tuple attributes to identify top talkers.

Step-by-Step Solution

1
Analyze real-time traffic degradation metrics.
Variation in delivery latency for UDP audio streams defines Jitter (Packet Delay Variation).
VoIP audio degradation caused by irregular arrival timing without packet loss is caused by jitter.
2
Differentiate high-speed packet sampling mechanisms from flow caching.
Stateless ASIC sampling corresponds to sFlow, whereas cached flow tracking corresponds to NetFlow/IPFIX.
sFlow operates statelessly at the hardware level, suitable for 100 GbE links.
3
Evaluate SNMP security levels for data protection.
Cryptographic authentication combined with AES encryption requires SNMPv3 authPriv.
noAuthNoPriv offers no security, authNoPriv provides authentication without encryption, and authPriv provides both authentication and payload encryption.
4
Identify flow aggregation mechanisms for top-talker reporting.
5-tuple cached flow record aggregation corresponds to IPFIX / NetFlow.
NetFlow and IPFIX aggregate packet metadata matching key fields (5-tuple) into stateful flow records.

Key Concept

Distinguishing Network Performance Metrics, Flow Telemetry, and Secure Device Management Protocols
Rate this question