Riverbed Riverbed Certifications 299-01 Questions & Answers

• Question 121:

  Which of the following are default user-defined policies on Cascade Profiler? (Select 3) A. P2P application Activity

  B. SpamBot Activity

  C. Email traffic surge

  D. Port Scan

  E. P2P Port Activity

  Correct Answer: ABE

• Question 122:

  Cascade security baselines model all host-to-host interactions. A host is identified by:

  A. AD user name if available, falling back to MAC address if available, falling back to IP address.

  B. MAC address if available, falling back to IP address if available, falling back to AD user name.

  C. AD user name if available, falling back to IP address.

  D. MAC address if available, falling back to IP address.

  Correct Answer: D

• Question 123:

  What integrations are available when an enterprise already owns an SNMP monitoring technology (such as Solarwinds or HPOV)? (Select 2)

  A. Cascade Profiler can use switch port discovery to retrieve ARP and CAM tables directly from the NMS.

  B. Most NMS' can be configured to SNMP Poll Cascade Profiler to retrieve conversation information.

  C. Network API (from NMS via URL strings to get Cascade Reports)

  D. There are no integrations; NMS' are competitors to Cascade Profiler.

  E. External Links (from Cascade Profiler via URL strings to NMS)

  Correct Answer: CE

• Question 124:

  When drilling down from a Cascade Profiler traffic report to analyze the underlying packets in Cascade Pilot, which of the following is NOT required?

  A. The flows that are being viewed in Cascade Profiler must be reported by a Shark appliance.

  B. The user's workstation requires a licensed copy of Cascade Pilot.

  C. The user's workstation requires access to the Cascade Shark appliance on the appropriate TCP Port.

  D. If there are multiple capture jobs configured on the Cascade Shark appliance, the user must select which one to apply the trace clip against.

  E. All of the above.

  Correct Answer: E

• Question 125:

  When you create an index within Cascade Pilot for a trace filE. (Select 2)

  A. The index will be removed when Cascade Pilot is closed.

  B. The operation can take a few minutes.

  C. You cannot apply Views that do not support indexing.

  D. The trace file icon changes to a lightning bolt to indicate that it is indexed.

  Correct Answer: BD

• Question 126:

  What defines a "Recipient" for Cascade Profiler Notifications?

  A. An Email Address only

  B. An SNMP receiver only

  C. An SNMP receiver only tied to a set of Host Groups

  D. An Email Address and/or one or two SNMP receivers optionally tied to a set of Host Groups

  E. An Email Address and/or one or two SNMP receivers optionally tied to a set of User Accounts

  F. A User Account

  Correct Answer: D

• Question 127:

  How is QoS data obtained in a Cascade Profiler? (Select 2) A. From packets via the Cascade Sensor or Shark

  B. From NetFlow and other standard flow protocols

  C. From IP SLAs on any network-attached device

  D. From CDP

  E. From NBAR

  Correct Answer: AB

• Question 128:

  When using a Network Performance Management tool such as Cascade, TCP sessions can be observed as completed by observing:

  A. TCP Window size is observed as zero

  B. Buffering bits (zeros) are included in the last packet of the flow

  C. TCP is connectionless so there is no way to determine completion

  D. A RST or FIN flag is included in the flow

  E. A SYN or CPT flag is included in the flow

  Correct Answer: D

• Question 129:

  Which of the following data is required for Cascade Profiler to correctly calculate Round-Trip-Time (RTT) between a branch and the datacenter for Steelhead optimized traffic? (Select 2)

  A. NetFlow from router on WAN side of branch Steelhead

  B. NetFlow from router on LAN side of branch Steelhead

  C. CascadeFlow from branch Steelhead

  D. CascadeFlow from Data center Steelhead

  E. Sensor at Data center

  F. Sensor-VE sending Cascade flow data

  Correct Answer: CD

• Question 130:

  Within Cascade Pilot, Sequence Diagrams represent TCP Errors in which of the following ways: (Select 2)

  A. By listing lost packets in the expert window

  B. By using dotted-dashed lines for out-of-sequence segments

  C. By placing error names on the messages within the diagram

  D. By color-coding the messages on the diagram

  E. By using a thicker line for messages that include errors

  Correct Answer: CD