Trace clips in Cascade Pilot allow you to:
A. Save a time window to a trace file for post-capture analysis.
B. Save a time window and apply Views to analyze a portion of a Capture Job.
C. Analyze an indexed capture job with Views that support indexing.
D. Clip a trace file to your desktop.
Which of the following are TRUE concerning packet capture jobs on the Cascade Shark appliancE. (Select 4)
A. Packets can be captured from multiple capture ports on one Cascade Shark appliance.
B. The maximum length the packet data can be specified.
C. Packets can be filtered on host IP addresses.
D. SSL traffic can be decoded if the appropriate certificate are loaded in the Cascade Shark appliance.
E. The maximum storage bandwidth for the job can be specified in bits/sec.
F. Multiple packet capture jobs can run concurrently.
How do I run a report on Cascade Profiler to show all hosts that have talked to server "192.168.1.100" on TCP port 25?
A. Under the traffic reports Advanced Tab, place "192.168.1.100" in the Host field select "Acting as Server" in the drop down, enter "tcp/25" in the Protocol field and select "Hosts" in the "report-by" pull down.
B. Under the traffic reports Advanced Tab, place "192.168.1.100" in the Host field select "Acting as Server" in the drop down, enter "tcp/25" in the Protocol field and select "Peers Hosts" in the "report- by" pull down.
C. Under the traffic reports Advanced Tab, place "192.168.1.100" in the Host field select "Acting as Client and Server" in the drop down, enter "tcp-25" in the Protocol field and select "Hosts" in the "report-by" pull down.
D. Under the "Quick Reports" pull down from the dashboard page, select "Host" enter the IP Address and hit return.
In the Cascade Profiler GUI, what is a Port Group?
A. A combination of IP Address and Port Number
B. One or more protocol/port combinations mapped to a name
C. Names mapped to IP subnets
D. Layer-2 switch ports grouped into a logical name
E. NetFlow interfaces grouped into a logical name
In order to analyze data captured by a Cascade Shark appliancE. (Select 3)
A. You can connect directly to the Cascade Shark with Cascade Pilot to begin analysis.
B. You can connect directly to the Cascade Shark with Cascade Gateway to begin analysis.
C. You can start analysis on the Cascade Profiler based upon flow data that has been sent from Cascade Shark to Cascade Profiler.
D. You can export data from a capture job directly to a packet capture (pcap) file and open in any tool that accepts pcap format.
E. You can start by loading views of the data from the Cascade Shark Appliance Web GUI before export to Wireshark.
In Cascade Profiler, what is the minimum amount of historical flow data required for an Application Performance analytic to initialize?
A. Three weeks
B. Three days
C. One day
D. Configurable from one minute to three weeks
In this scenario, you have created a host group called My_Computers on Cascade Profiler. In that group you have included the subnet 192.168.1.0/25. You have 10 devices in that group 192.168.1.1-10. The rest of the addresses are unused. While running reports on this segment of the network you notice that when a report is run using the entire subnet you see traffic destined for 192.168.1.120. When you run the same report specifying the host group the traffic does not appear. Why is this happening?
A. 192.168.1.120 is not in the 192.168.1.0/25 subnet
B. 192.168.1.120 has been input as a trusted host in a security policy
C. Traffic to 192.168.1.120 was not picked up by a Sensor
D. Traffic to 192.168.1.120 was not picked up by a Gateway
E. 192.168.1.120 never sent any traffic
What are the two (at a minimum) devices you need to configure in Cascade Profiler for Switch Port Discovery integration to work for a portion of the network?
A. At least one NetFlow sources (router, switch, or steelhead).
B. At least one lookup router and at least one access tier switch.
C. A Vulnerability Scanner and a Netflow source (router, switch, or steelhead).
D. A Vulnerability Scanner and an External Link.
Which fields are generally available for export using NetFlow technology?
A. IP Addresses, Port Numbers, Protocol, TCP Flags, DSCP Marking, number of bits, number of packets, retransmitted bits
B. IP Addresses, Port Numbers, Protocol, TCP Flags, DSCP Marking, number of bits, number of packets, inbound/outbound interface ID
C. IP Addresses, MAC Addresses, Port Numbers, Protocol, DSCP Marking, number of bits, number of packets
D. IP Addresses, Port Numbers, Protocol, Round Trip Time, DSCP Marking, number of bits, number of packets
E. IP Addresses, Port Numbers, Protocol, Packet Latency, DSCP Marking, number of bits, number of packets
Which of the following metrics are monitored in an Application Performance Policy? (Select 4)
A. Increase in Server Delay
B. Decrease in Average Connection Application-level Throughput
C. Increases in the number of TCP retransmissions
D. Decreases in the number of new connections to the application servers
E. Increase in the number of Active Connections
Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only Riverbed exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your 299-01 exam preparations and Riverbed certification application, do not hesitate to visit our Vcedump.com to find your solutions here.