Riverbed Riverbed Certifications 201-01 Questions & Answers

• Question 61:

  What benefit does Cascade Profiler provide when obtaining SNMP information from an Access Tier switch?

  A. By combining the switch port table of an access tier switch with utilization characteristics of router interfaces obtained via flow, Cascade is able to identify where hosts are plugged into the infrastructure.

  B. By combining the switch port table of an access tier switch with the ARP table of a router with data obtained via flow, Cascade is able to identify where hosts are plugged into the infrastructure.

  C. Cascade is able to run a Vulnerability Scan across the switch.

  D. Cascade is able to get SNMP statistics for port level problems from the switch.

  Correct Answer: B

• Question 62:

  From the perspective of reporting from the Cascade Profiler, what are the differences between flow reported by a Cascade Sensor (minimum version 9.0) and a Cascade Shark (minimum version 3)?

  A. Flows reported by Cascade Shark will not include an application tag triggered by matching known signatures within the first 1000 bytes of the flow.

  B. The Cascade Shark can forward flow to only one destination Cascade Profiler.

  C. The communication between the Cascade Shark and Cascade Profiler is NOT encrypted as it is with Cascade Sensor and Cascade Profiler communication.

  D. All of the Above.

  Correct Answer: A

• Question 63:

  Which of the following devices could be the data source for Cascade Profiler? (Select 3)

  A. Cascade gateway

  B. Cascade Pilot software

  C. Wireshark software

  D. Cascade Sensor

  E. Cascade Shark

  Correct Answer: ADE

• Question 64:

  What types of filters are supported by a capture job on the Cascade Shark appliance?

  A. BPF filters

  B. Pilot filters

  C. WireShark display filters

  D. Riverbed filters

  Correct Answer: A

• Question 65:

  For Security Policies, we can suppress the alerting against a specific host or subnet through which of the following methods?

  A. Adding an alerting threshold for the policy in question

  B. Adding the host or subnet to the special pre-defined custom hostgroup called "trusted-hosts" that suppresses alerting from all security policies.

  C. Changing the Advanced Setting for the policy

  D. Changing the Global Policy Settings

  E. Suppressing events against a specific host or subnet is not possible

  Correct Answer: A

• Question 66:

  The trending/indexing setting on the Cascade Shark appliance apply to:

  A. A specific capture job

  B. All the capture jobs

  C. All the capture ports on the appliance

  D. A specific capture port on the appliance

  Correct Answer: A

• Question 67:

  To connect a Cascade Pilot for the first time to a Cascade Shark appliance, you must: (Select 2)

  A. Start Cascade Pilot and add a Probe.

  B. Always use port 61898 in the Probe window.

  C. Enter the 'admin' credentials, connect, and then change the user.

  D. Start Cascade Pilot and connect to a previously connected probe using the "remote" ribbon tab.

  Correct Answer: AD

• Question 68:

  The correct Profiler to use for a deployment with 800K flows per minute would be:

  A. Cascade Express 100

  B. Cascade Express 300

  C. Cascade Standard series

  D. Cascade Enterprise series

  Correct Answer: D

• Question 69:

  What statements are true regarding Cascade Sensors? (Select 3)

  A. use mirror ports or passive taps to collect data from a network segment.

  B. can forward packets to other network management systems.

  C. provide deep packet inspection to identify the application being accessed by a host.

  D. can decrypt secure protocols.

  E. communicate with Profiler appliance using compressed and encrypted data.

  Correct Answer: ACE

• Question 70:

  You can export a report in Cascade Pilot: A. Only in PDF format.

  B. Only if a View is applied on a trace file.

  C. For a single chart display from an applied View.

  D. For any on-screen displays resulting from one or more applied Views.

  Correct Answer: D