Riverbed 299-01 Riverbed Certified Solutions Professional - Network Performance Management Exam Practice Test

Traffic between Virtual machines is not switched; it is routed by the standard vRouter included with ESXi

A standard or distributed vSwitch which comes with ESXi must be used, there is not 3rd party software available

A 3rd party virtual switch is required such as the CISCO Nexus 1000v as no standard vSwitch exists with ESXi

The included standard vSwitch of the CISCO Nexus 7000

The included standard vSwitch or the CISCO Nexus 1000v

Run Automatic grouping for all group types.

Configure an Undefined group type with definition 0.0.0.0/0; confirm there are no entries when you 'view members' of this 'Undefined' group'.

There is no way to do this and successfully capture all the IP addresses.

Configure an Undefined group type with definition 0.0.0.0/32.

Run a report by hosts and look for undefined groups.

Ability to identify Scanners and Worm Propagations.

Ability to provide information for a firewall rule when a user defined policy is violated.

Ability to alert on security policy (e.g. an insecure policies, such as FTP, is in use).

Ability to identify Worms by name.

A SPAN port captures traffic locally, an RSPAN captures traffic remotely

A SPAN port captures traffic consistently, an RSPAN captures traffic randomly

A SPAN port captures multiple ports while an RSPAN is "relational" and captures multiple VLANs (Relational LANs)

They are both the same with different terms being used by different vendors

A SPAN port is used on a Switch while a RSPAN is used on a Router

One minute flow records are deleted from the file system FIFO (oldest first) once the appliance has filled the space that is allocated.

There is a fixed amount of space on the filesystem for completed reports.

A report template can be marked "keep until I delete it" so that any reports that are scheduled with this template are not automatically deleted from the filesystem.

When the flows or rollup records have been deleted from the filesystem, any saved report that was generated from those flow sources is no longer available.

Users have the ability to allocate additional space to the 1 min flow logs in order to increase retention. This is done at the expense of other rollup resolutions.

1

2

3

4

5

Under the traffic reports Advanced Tab, place "192.168.1.100" in the Host field – select "Acting as Server" in the drop down, enter "tcp/25" in the Protocol field and select "Hosts" in the "report-by" pull down.

Under the traffic reports Advanced Tab, place "192.168.1.100" in the Host field – select "Acting as Server" in the drop down, enter "tcp/25" in the Protocol field and select "Peers Hosts" in the "report-by" pull down.

Under the traffic reports Advanced Tab, place "192.168.1.100" in the Host field – select "Acting as Client and Server" in the drop down, enter "tcp-25" in the Protocol field and select "Hosts" in the "report-by" pull down.

Under the "Quick Reports" pull down from the dashboard page, select "Host" enter the IP Address and hit return.

sourceIP, destIP, protocol, sourcePort, destPort, QoS

sourceIP, destIP, protocol, destPort

sourceIP, destIP, protocol, sourcePort, destPort

destIP, protocol, destPort

sourceIP, destIP, protocol

The correct communication port(s) are NOT open on the firewall between Cascade Pilot and Cascade Shark.

The Cascade Shark is placed in "passthru" mode so Cascade Pilot access is not available

The Cascade Shark appliance has no capture jobs configured.

You may be running Cascade Pilot-Personal-Edition (PE). You need the full version of Cascade Pilot to connect to Cascade Shark.

Trend/Index data is disabled on the Cascade Shark Appliance.

Cascade Profiler local database

User account specifies authentication by RADIUS

TACACS

RADIUS server to authenticate the user

Edit each Service policy to increase the Tolerance slider for Low and High alerts.

Edit each Service policy and set a noise floor to specify the minimum amount of change that the policy can treat as deviation from normal behavior.

Edit the Service and select fewer metrics to monitor for each segment that comprises the Service.

Modify the location host group type used for monitoring end user traffic to use fewer groups (for example, Region instead of Site).

A, B, C, and D.

A and B only.

When the file is opened in Cascade Pilot for analysis.

When the file is imported into Cascade Pilot for analysis.

When the first view is applied to the file.

When "Add Trend Index" is selected from a right-click menu within Cascade Pilot.

When the file is copied onto a Cascade Shark appliance.

The client or server that has changed the most (for the table metric) from the baseline (for example, impact).

The top talker (client) that has sent the most data.

The top talker (server) that has sent the most data.

Server Delay so that you can determine if it was a server problem.

Links that are 95% utilized.

Select two views from the views panel using control-click then right click on one and select "Create Interactive View" from the drop-down menu.

After a Drill-Down from one view to another, right click on the Drill-Down view in the sources panel and select "Create Interactive View" from the drop-down menu.

Select any item (such as a host IP Address, Port or Protocol name) in the main workspace and right click on the item, then select "Create Interactive View" from the drop-down menu.

Select any view in the views panel, right-click it and select "Create Interactive View" from the drop-down menu.

Open the filters panel, apply an existing or new filter to the view then select "save as interactive view" from the home menu.

IP Addresses, Port Numbers, Protocol, TCP Flags, DSCP Marking, number of bits, number of packets, retransmitted bits

IP Addresses, Port Numbers, Protocol, TCP Flags, DSCP Marking, number of bits, number of packets, inbound/outbound interface ID

IP Addresses, MAC Addresses, Port Numbers, Protocol, DSCP Marking, number of bits, number of packets

IP Addresses, Port Numbers, Protocol, Round Trip Time, DSCP Marking, number of bits, number of packets

IP Addresses, Port Numbers, Protocol, Packet Latency, DSCP Marking, number of bits, number of packets

11 for the Cascade Profiler, 3 Cascade Gateways

10 for the Cascade Profiler, 3 Cascade Gateways

11 for the Cascade Profiler, 5 Cascade Gateways

10 for the Cascade Profiler, 5 Cascade Gateways

12 for the Cascade Profiler, 4 Cascade Gateways

1-d; 2-b; 3-c; 4-a; 5-b

1-e; 2-c; 3-d; 4-a; 5-b

1-d; 2-c; 3-e; 4-b; 5-a

1-d; 2-c; 3-e; 4-a; 5-b

1-e; 2-d; 3-c ; 4-b; 5-a

Log Only, SNMP Only, Email Only, SNMP and Email

Log Only, Default, Owner, or any defined recipient

Log Only, Default, Owner or any User Account

Log Only, Default, Owner or any User Name obtained via the Identity Integration

TCP Resets are tracked via reading the TCP header on the Sensor.

TCP Resets are tracked by collecting the flag via NetFlow.

Both A and B.

Cascade does not track Resets.

If the Steelhead is running a RioS version older than 5.5.3, the Steelhead WAN interfaces need to be manually added, and marked as Steelhead interfaces.

If the Steelhead is running a RioS version 5.5.3 or higher, the Steelhead WAN interfaces are automatically added to the WAN page, but the user must manually mark them as Steelhead interfaces.

If the Steelhead is running a RioS version 6.0.1 or higher, the Steelhead WAN interfaces are automatically added to the WAN page and are also be marked as a Steelhead interface.

All of the above are true.

A and C only are true.

A BPF packet filter

A disk space allocation

Time-based display resolution

Trend/Indexing parameters

Access credential information

The Analytics license is required to generate traffic report.

The Analytics license is required to generate network operation dashboard.

The Analytics license is required to connect CMDB system.

The analytics license is required for the analytics defined as part of a service to begin the initialization process.

Layer 7 fingerprint matches always take priority over Layer 4 matches.

Layer 4 mappings with a higher priority number take precedence over Layer 4 mappings with a lower priority number.

Layer 4 mappings always take priority over Layer 7 fingerprint matches when the override is set to Unknown/Unclassified.

Layer 4 mappings with a lower priority number take precedence over Layer 4 mappings with a higher priority number when the override is set to Always.

C & D.

A, B & C.

"192.168.1.0/24 Tokyo"

"Tokyo = 192.168.1.0/24"

"192.168.1.0-192.168.1.255 Tokyo"

"192.168.1.0;255.255.255.0 Tokyo"

1

2

5

8

10

Cascade, User Defined, Packeteer, NBAR

Cascade, User Defined, Packeteer, NBAR, Steelhead appliance

Cascade, Packeteer, NBAR, Steelhead Appliance

Cascade, User Defined, Cisco, Netscreen, Steelhead appliance

Lock the trace clip.

Send the trace clip packets to file.

Detach the trace clip from the capture job trace.

A and B

A, B, and C.

QIP

ISC

Infoblox

Windows DHCP

All of the above

None of the above

Application performance

Link performance

Host performance

Application availability

Service level performance

Conformance verification

Link congestion

Import DHCP lease files or SNMP polling of switches.

Manually enter MAC address information via the user interface.

The Cascade Profiler cannot display MAC address information.

This information is received via sFlow and/or NetFlow.

MAC address information is stored as part of the information received from Cascade Sensors and Regional Gateways.

5

20

15

10

Unlimited

According to the Cascade Pilot time zone.

According to the time zone of the Cascade Shark to which you are connected.

According to Cascade Pilot time zone or optionally, to the Cascade Shark time zone as well.

According to UTC.

Use a BPF filter to speed up the View.

Apply a generic View and then define a filter by drilling-down through a more specific View.

Use a Cascade Pilot filter first and then a BPF filter.

Create a time filter and then apply a View with a Cascade Pilot filter.

Per each capture job

Per each trace clip

Per each capture port

Per each capture board/aggregating port

Per each Cascade Shark appliance

Controlling the portion of a packet capture (pcap) file analysed in the current view.

Creating a trace clip from a Cascade Shark appliance Capture job.

Controlling the size of a Capture Job created on a Cascade Shark appliance.

A and B

A, B, and C.

Guarantees that the ifIndex values for various interfaces remain stable across Steelhead appliance reboots and reconfiguration.

Guarantees that the ifIndex values for various interfaces remain stable across network disruptions preventing re-polling

Guarantees that the ifdescription values for various interfaces remain correctly mapped across Steelhead appliance reboots and reconfiguration.

Guarantees that the ifdescription values for various interfaces are remapped across Steelhead appliance service shutdowns.