Exam Name: Riverbed Certified Solutions Professional - Network Performance Management

Transcription

1 Vendor: Riverbed Exam Code: Exam Name: Riverbed Certified Solutions Professional - Network Performance Management Version: Demo

2 QUESTION 1 When creating an analytic service, the discovery process requires a minimum of: A. At least three days of data available. B. At least three weeks of data available. C. The application specialist available. D. Some historical data and some starting point (a server, port, application). E. A customer network diagram available. Correct Answer: D QUESTION 2 Link Congestion policies apply to a specific interface and can: (Select 3) A. Warn if either inbound or outbound traffic increases abnormally B. Warn if an application component of traffic increases abnormally C. Warn if traffic to/from specific hosts exceeds a specific utilization level D. Warn if the response time across a link increases abnormally Correct Answer: ABC QUESTION 3 If a VLAN SPAN (VLAN101) is configured and monitored by Cascade Shark, which of the following is true? (Select 2) A. Inter VLAN101 traffic will be monitored; Intra VLAN101 traffic will not. B. Intra VLAN101 traffic will be monitored; Inter VLAN101 traffic will not. C. Both inter and intra VLAN101 traffic will be monitored. D. It is a best practice to configure the Cascade Shark monitoring port (the SPAN destination) with 'deduplication' enabled. E. It is a best practice to configure the Cascade Shark monitoring port (the SPAN destination) without 'deduplication' enabled. D QUESTION 4 Quality of Service information is obtained from what Cascade sources? A. Cascade Sensor only B. Cannot get QoS data on Cascade C. Cascade Sensor and Cascade Gateway D. CascadeFlow traffic only E. NetFlow and IPFIX traffic only QUESTION 5 Cascade Profiler provides identity information collected from Active Directory 2008 by installing and correctly configuring the 'Cascade Connector' agent software on: A. Every DNS server in the AD environment B. Any server in the MS domain C. Every client desktop in the AD environment D. Every NTP server in the MS domain E. The Microsoft Event Collector component in the AD environment

3 Correct Answer: E QUESTION 6 Which of the following statements is true regarding SNMP polling and NTP syncing among Cascade components? A. Cascade Gateway's poll via SNMP sources of Netflow, while Cascade Profiler, Cascade Gateway and Cascade Sensor sync NTP from a common source. B. Cascade Profiler's poll via SNMP sources of Netflow, while Cascade Profiler, Cascade Gateway and Cascade Sensor sync NTP from a common source. C. Cascade Profiler, Cascade Gateway and Cascade Sensor sync NTP from different sources, while Cascade Profiler's poll via SNMP sources of Netflow. D. Cascade Profiler, Cascade Gateway and Cascade Sensor sync NTP from different sources, while Cascade Gateway's poll via SNMP sources of Netflow. E. Cascade Profiler does all SNMP polling and is also the source of all NTP. Correct Answer: D QUESTION 7 Within Cascade Pilot, to analyze the round-trip time in a trace file, you can: A. Ask Riverbed Support to send you the proper View to use. B. Open the View folders in Cascade Pilot to look for a View named "Round-trip time". C. Use the View search box and enter "round". D. Use the Help menu and search for round. QUESTION 8 For DNS reverse lookup, Cascade Profiler caches as follows: A. Cache the most recent 500 IPs. B. Obey DNS TTLs. C. Cascade does not cache DNS responses. D. For 24 hours. QUESTION 9 What are two differences between NetFlow version 5 and NetFlow version 9 (select 2) A. NetFlow version 5 generally support ingress flow export only; NetFlow version 9 supports both ingress and egress export. B. NetFlow version 5 is used for Switches, NetFlow version 9 is used for Routers. C. NetFlow version 9 includes information about CPU, Power-status and other router performance characteristics; NetFlow version 5 does not. D. NetFlow version 9 includes the ability to export the Time-To-Live (TTL); NetFlow version 5 does not. E. NetFlow version 9 includes the ability to export the packet latency, NetFlow version 5 does not. Correct Answer: AD QUESTION 10 When changing the priority for a Layer 4 mapping on Cascade Profiler best practices indicate that Application Mappings should be given higher priorities based on: A. Longest Match B. Shortest Match

4 C. IP & Port D. IP Correct Answer: A QUESTION 11 What is the relationship between a Host Group and a Host Group Type in Cascade Profiler? A. A Host Group Type is a container that may contain multiple Host Groups. B. A Host Group Type defines the name of the Host Group. C. They are the same thing. D. Each Host Group must be defined by the Type of application it serves; this is the Host Group Type. Correct Answer: A QUESTION 12 Cascade Profiler's Switch Integration feature uses SNMP and adds the capability for Cascade to report on which of the following. (Select 2) A. User name B. Host IP address C. Host MAC address D. The physical switch port a specific host is connected to E. Switch port traffic levels F. Switch port status G. SNMP traps from the switch D QUESTION 13 What are the two types of dashboards available within the Cascade Profiler GUI? (select 2) A. Top Hosts B. Top Applications C. Public D. Private E. Devices and Interfaces Utilization D QUESTION 14 If unable to connect to the Cascade Shark Appliance from the Cascade Pilot console it could be because. (Select 2) A. The correct communication port(s) are NOT open on the firewall between Cascade Pilot and Cascade Shark. B. The Cascade Shark is placed in "passthru" mode so Cascade Pilot access is not available C. The Cascade Shark appliance has no capture jobs configured. D. You may be running Cascade Pilot-Personal-Edition (PE). You need the full version of Cascade Pilot to connect to Cascade Shark. E. Trend/Index data is disabled on the Cascade Shark Appliance. Correct Answer: AD QUESTION 15 What is a good way to know whether all internal IP addresses seen by the Cascade Profiler have been grouped in a particular group type?

5 A. Run Automatic grouping for all group types. B. Configure an Undefined group type with definition /0; confirm there are no entries when you 'view members' of this 'Undefined' group'. C. There is no way to do this and successfully capture all the IP addresses. D. Configure an Undefined group type with definition /32. E. Run a report by hosts and look for undefined groups. QUESTION 16 How do Cascade Performance Analytics assist with Performance Monitoring? A. By setting intelligent static thresholds for Application metrics and Interface metrics, tolerance can be determined. Cascade will use these thresholds and tolerances to report on deviations indicative of performance problems. B. The Customer only needs to identify their critical hosts, interfaces and/or applications, and Cascade will automatically baseline their behavior and report on deviations indicative of performance problems. C. The Performance Analytics use knowledge of hosts, interfaces, and/or applications are able to detect security threats such as host scans and worms. D. After baselining is completed, Cascade can re-route congested traffic to avoid congested application delivery paths. QUESTION 17 When editing a previously configured service policy, what options become available if you click the 'show advanced settings' checkbox? (Select 3) A. Allows enabling/disabling the detection of dips in the metric. B. Allows tuning of the tolerance range of the metric. C. Allows setting of a noise floor for the metric. D. Allows adjusting the notifications for the metric. E. Allows enabling/disabling the detection of spikes in the metric. Correct Answer: ACE QUESTION 18 Which of the following configuration changes can be used to reduce the number of alerts generated overall for a Service? A. Edit each Service policy to increase the Tolerance slider for Low and High alerts. B. Edit each Service policy and set a noise floor to specify the minimum amount of change that the policy can treat as deviation from normal behavior. C. Edit the Service and select fewer metrics to monitor for each segment that comprises the Service. D. Modify the location host group type used for monitoring end user traffic to use fewer groups (for example, Region instead of Site). E. A, B, C, and D. F. A and B only. Correct Answer: E QUESTION 19 If a report table on Cascade Profiler includes the "Server Delay" column but shows no value for "Server Delay" in some cells, what are the possible causes? (Select 3) A. The time span of the report does not cover any connection set-up points B. Server delay is zero.

6 C. The protocol used by the application in not TCP-based. D. Application traffic was not seen by a Cascade Sensor. E. The server plug-in is needed to measure "Server Delay" and not functioning correctly. Correct Answer: ACD QUESTION 20 Within the Cascade Pilot GUI, filtered items are often indicated: A. With red text. B. With yellow text. C. With a funnel icon. D. With a hash-mark icon. QUESTION 21 Which of the following metrics are monitored in an Application Performance Policy? (Select 4) A. Increase in Server Delay B. Decrease in Average Connection Application-level Throughput C. Increases in the number of TCP retransmissions D. Decreases in the number of new connections to the application servers E. Increase in the number of Active Connections CDE QUESTION 22 What are the two (at a minimum) devices you need to configure in Cascade Profiler for Switch Port Discovery integration to work for a portion of the network? A. At least one NetFlow sources (router, switch, or steelhead). B. At least one lookup router and at least one access tier switch. C. A Vulnerability Scanner and a Netflow source (router, switch, or steelhead). D. A Vulnerability Scanner and an External Link. QUESTION 23 Which fields are generally available for export using NetFlow technology? A. IP Addresses, Port Numbers, Protocol, TCP Flags, DSCP Marking, number of bits, number of packets, retransmitted bits B. IP Addresses, Port Numbers, Protocol, TCP Flags, DSCP Marking, number of bits, number of packets, inbound/outbound interface ID C. IP Addresses, MAC Addresses, Port Numbers, Protocol, DSCP Marking, number of bits, number of packets D. IP Addresses, Port Numbers, Protocol, Round Trip Time, DSCP Marking, number of bits, number of packets E. IP Addresses, Port Numbers, Protocol, Packet Latency, DSCP Marking, number of bits, number of packets QUESTION 24 In Cascade Profiler, what is the minimum amount of historical flow data required for an Application Performance analytic to initialize?

7 A. Three weeks B. Three days C. One day D. Configurable from one minute to three weeks QUESTION 25 In this scenario, you have created a host group called My_Computers on Cascade Profiler. In that group you have included the subnet /25. You have 10 devices in that group The rest of the addresses are unused. While running reports on this segment of the network you notice that when a report is run using the entire subnet you see traffic destined for When you run the same report specifying the host group the traffic does not appear. Why is this happening? A is not in the /25 subnet B has been input as a trusted host in a security policy C. Traffic to was not picked up by a Sensor D. Traffic to was not picked up by a Gateway E never sent any traffic Correct Answer: E QUESTION 26 In the Cascade Profiler GUI, what is a Port Group? A. A combination of IP Address and Port Number B. One or more protocol/port combinations mapped to a name C. Names mapped to IP subnets D. Layer-2 switch ports grouped into a logical name E. NetFlow interfaces grouped into a logical name QUESTION 27 In order to analyze data captured by a Cascade Shark appliance. (Select 3) A. You can connect directly to the Cascade Shark with Cascade Pilot to begin analysis. B. You can connect directly to the Cascade Shark with Cascade Gateway to begin analysis. C. You can start analysis on the Cascade Profiler based upon flow data that has been sent from Cascade Shark to Cascade Profiler. D. You can export data from a capture job directly to a packet capture (pcap) file and open in any tool that accepts pcap format. E. You can start by loading views of the data from the Cascade Shark Appliance Web GUI before export to Wireshark. Correct Answer: ACD QUESTION 28 How do I run a report on Cascade Profiler to show all hosts that have talked to server " " on TCP port 25? A. Under the traffic reports Advanced Tab, place " " in the Host field select "Acting as Server" in the drop down, enter "tcp/25" in the Protocol field and select "Hosts" in the "report-by" pull down. B. Under the traffic reports Advanced Tab, place " " in the Host field select "Acting as Server" in the drop down, enter "tcp/25" in the Protocol field and select "Peers Hosts" in the "report- by" pull down.

8 C. Under the traffic reports Advanced Tab, place " " in the Host field select "Acting as Client and Server" in the drop down, enter "tcp-25" in the Protocol field and select "Hosts" in the "report-by" pull down. D. Under the "Quick Reports" pull down from the dashboard page, select "Host" enter the IP Address and hit return. QUESTION 29 Which of the following are TRUE concerning packet capture jobs on the Cascade Shark appliance. (Select 4) A. Packets can be captured from multiple capture ports on one Cascade Shark appliance. B. The maximum length the packet data can be specified. C. Packets can be filtered on host IP addresses. D. SSL traffic can be decoded if the appropriate certificate are loaded in the Cascade Shark appliance. E. The maximum storage bandwidth for the job can be specified in bits/sec. F. Multiple packet capture jobs can run concurrently. Correct Answer: ABCF QUESTION 30 An interactive view within Cascade Pilot: A. Can be created from a single applied View. B. Can work on local trace files only. C. Can include more than two charts. D. Is not available in the regular Cascade Pilot installation. QUESTION 31 What does Cascade use as the flow key to identify a unique flow? A. sourceip, destip, protocol, sourceport, destport, QoS B. sourceip, destip, protocol, destport C. sourceip, destip, protocol, sourceport, destport D. destip, protocol, destport E. sourceip, destip, protocol QUESTION 32 Trace clips in Cascade Pilot allow you to: A. Save a time window to a trace file for post-capture analysis. B. Save a time window and apply Views to analyze a portion of a Capture Job. C. Analyze an indexed capture job with Views that support indexing. D. Clip a trace file to your desktop. QUESTION 33 When saving a new application performance analytic on Cascade Profiler, which of the following is true? A. You must have at least three days of history of 15 minute rollups before saving the analytic. B. You must have at least three days of history of 15 minute rollups before the analytic initializes.

9 C. If you include all possible metrics, but there is no possibility of measuring response time due to lack of Sensor coverage, the analytic will fail to initialize. D. The analytic will not alert for a minimum of 1 week during baseline collection. E. Both B and C. QUESTION 34 On Cascade Profiler, Which of the following account role permissions is not unique to administrator accounts? A. Creating or modifying custom host groups. B. Grant other users the ability to run user reports. C. Set or modify passwords for other users. D. View the audit trail page. E. Specify mitigation actions. Correct Answer: A QUESTION 35 A user wants to use the link congestion analytic policy on Cascade Profiler to monitor five key WAN links for an increase in traffic outside of the expected traffic that includes TCP/80, TCP/443, TCP25, and UDP/53. Can the link congestion policy be used for this scenario? A. No, because a link analytic can monitor only a single interface. B. Yes, one can define separate link congestion analytic policies for each WAN interface. C. No, because one can only define specific ports to include on a link congestion policy. D. Yes, because one can define a port group that includes every UDP and TCP port except for those that include the expected traffic, and that port group can be used for the link congestion analytic policy. E. No, and both A and C include valid reasons. Correct Answer: D QUESTION 36 When analyzing a large (100GB, for example) trace file within Cascade Pilot, you should: A. Copy the file onto a Cascade Shark to ensure better performance. B. Create an index so that processing of the View analytics will be faster. C. Apply a View with a specific filter. D. Use Wireshark tools to split the trace file in multiple and smaller trace files. QUESTION 37 Which of the following is a valid group definition on Cascade Profiler? (Select 4) A /23 United_States B / Worldwide C /32 CEO_Printer D / Printers E / My Computer Correct Answer: ABCD QUESTION 38 What is a benefit that Cascade Profiler might provide to Security Operations? (Select 3)

10 A. Ability to identify Scanners and Worm Propagations. B. Ability to provide information for a firewall rule when a user defined policy is violated. C. Ability to alert on security policy (e.g. an insecure policies, such as FTP, is in use). D. Ability to identify Worms by name. Correct Answer: ABC QUESTION 39 A system administrator needs to update their Cascade Profiler host group settings to remove references to a decommissioned office on the /24 subnet. What is the best way to do this?

11 A. echo "delete from hostinfo where ipaddr = ' /24';" psql mazu postgres B. Edit the Definition and remove the entry for /24 Bracknell_UK C. echo "delete from hostinfo where group = 'Bracknell_UK;" psql mazu postgres write_community_string D. Go to Host Groups and insert " # /24 Bracknell_UK" QUESTION 40 Why should all flow exporting devices use the same NTP (Network Time Protocol ) source? A. Ensures Cascade is able to recreate the packets. B. Essential for the flow de-duplication process. C. Ensures the flow is delivered to the correct Gateway. D. All of the above. E. None of the above. QUESTION 41 The "Policies Usage" that is reported under System Information pertains to which of the following: A. All Service-based application performance policies B. All Service-based policies plus all Performance and Availability analytic policies C. All Service-based policies plus all Performance and Availability analytic policies plus all User- Defined Policies D. All Service-based policies plus all Performance and Availability analytic policies plus all User- Defined Policies plus all Security policies E. None of the above QUESTION 42 Which of the following capabilities are supported by the Cascade Sensor appliance but are not supported by the Cascade Sensor-VE RSP package. (Select 2) A. Network Round Trip measurement B. Packet logging C. Server Delay measurement D. Connection Throughput measurement E. Retransmission measurement F. L7 application fingerprint checking F QUESTION 43 When you modify a filter in Cascade Pilot: A. Changes are saved only in the View to which the filter has been applied. B. The modified filter is saved on the machine on which Cascade Pilot is running. C. The modified filter is saved on any Cascade Shark that Cascade Pilot is connected to. D. The changes are lost when you close Cascade Pilot. QUESTION 44 Which of the following types of hosts are included in Cascade grouping on Cascade Profiler?

12 A. Internal hosts only B. External hosts only C. All hosts D. Internal and External hosts only E. Specified internal hosts plus the non-routable subnets Correct Answer: A QUESTION 45 Live interfaces within Cascade Pilot as shown in the sources panel devices tab include: A. Local interfaces, Cascade Shark port interfaces, Cascade Shark aggregating port interfaces, and virtual interfaces associated with capture job traces. B. Local interfaces, Cascade Shark port interfaces, Cascade Shark aggregating port interfaces, and virtual interfaces associated with trace clips. C. Local interfaces ONLY. Cascade Shark port interfaces must be viewed from the remote menu. D. Interfaces associated with Cascade Shark ports ONLY. Local interfaces must be viewed from the local menu. Correct Answer: A QUESTION 46 When links in a network are using WAN optimization, it is best if the Cascade Profiler or Express receives data from a or monitoring traffic on the LAN side of the Steelhead that is located on the server side of the optimized connection. This is necessary in order to determine server delay. (Select 2) A. Cascade Shark B. Router C. Layer 3 switch D. Steelhead appliance E. Cascade Sensor Correct Answer: AE QUESTION 47 Which content block can be used to compare traffic between two time periods on the Cascade Profiler Dashboard? A. Watched list as a bar chart B. Watched list as a stacked area chart C. Watched list as a line graph D. Watched list as a pie chart E. Top list as a bar chart Correct Answer: A QUESTION 48 On Cascade Profiler, in terms of retention of completed reports and reporting sources (one minute flow and rollup files), which of the following is true? (Select 4) A. One minute flow records are deleted from the file system FIFO (oldest first) once the appliance has filled the space that is allocated. B. There is a fixed amount of space on the filesystem for completed reports. C. A report template can be marked "keep until I delete it" so that any reports that are scheduled with this template are not automatically deleted from the filesystem. D. When the flows or rollup records have been deleted from the filesystem, any saved report that was

13 generated from those flow sources is no longer available. E. Users have the ability to allocate additional space to the 1 min flow logs in order to increase retention. This is done at the expense of other rollup resolutions. Correct Answer: ABCE QUESTION 49 The Discovery Wizard has been used to map a complex application to be monitored by Cascade's service monitoring for a company with 25 remote locations and one data center, each defined as a group within the group type used. There are two front-end segments to signify incoming end user connections, and 15 back-end connections among all of the servers. The only metric/policy activated for each segment is the 'Response Time' metric. How many policies on the Cascade Profiler will this service consume? A. 40 B. 65 C. 17 D. 55 E. 425 QUESTION 50 What is the maximum limit of configurable flows that can be exported from the Cascade Shark appliance? (Select 2) A. 200,000 flows per minute per port B. 300,000 flows per minute per port C. 500,000 flows per minute per port D. 500,000 flows per minute total E. 600,000 flows per minute total E QUESTION 51 Within Cascade Profiler you can set the recipient for policy notifications under Advanced configuration to: A. Log Only, SNMP Only, Only, SNMP and B. Log Only, Default, Owner, or any defined recipient C. Log Only, Default, Owner or any User Account D. Log Only, Default, Owner or any User Name obtained via the Identity Integration QUESTION 52 Which of the following are available integrations for Cascade Profiler? (Select 3) A. SNMP to send traps to trap receivers. B. SNMP to discover switch ports associated with IP addresses. C. SNMP to discover router interface capacities. D. SNMP to discover router CPU utilization. Correct Answer: ABC QUESTION 53 Which of the following best describes any limits that are enforced on the number of service, performance and availability policies that are supported on any Cascade Profiler?

14 A. Stratified policy limits ranging from 5000 for Cascade Profiler Express platforms to 10,000 for Cascade Enterprise Profiler platforms B. 5,000 for all platforms C. 15,000 for all platforms D. The Analytics license provides for an unlimited number of policies E. None of the above Correct Answer: A QUESTION 54 What mechanism does Cascade Profiler use to identify the switch port a host is attached to and the hosts associated MAC address? A. SNMP traps from the switches and routers B. NetFlow v9 C. SNMP polling of the switches and routers D. All of the above E. None of the above QUESTION 55 What report on Cascade Profiler would be used to show both sides of a conversation and the ports they communicated on? A. Peers B. Peers and Ports C. Host Pairs D. Ports E. Host Pairs and Ports Correct Answer: E QUESTION 56 In the Cascade Profiler Dashboard GUI, what types of content blocks can you create? (Select 4) A. Watched items (where items are hosts, interface, etc.) B. Top items (where items are hosts, interface, etc.) C. Top usernames D. Unacknowledged Events E. Current Events F. Last Day Events Correct Answer: ABDE QUESTION 57 Which version of SNMP traps can the Cascade Profiler and Cascade Express send? A. SNMPv1 Only B. SNMPv2 Only C. SNMPv1 and SNMPv2 D. SNMPv1 and SNMPv3 Correct Answer: D QUESTION 58 When working with capture job traces on a Cascade Shark appliance from Cascade Pilot:

15 A. Views should always be applied directly to the job trace. B. Trace clips should first be created, and views applied to them. C. Packets should be exported from the capture job trace before beginning analysis. D. The capture job trace should first be indexed by right-clicking on it and selecting "Index". QUESTION 59 Cascade Profiler is reporting the traffic on Steelhead optimized flows separately than the connections on tcp/7800 between two Steelheads. In other words, from Cascade you see flows for traffic on various ports used natively by the clients and servers across the steelhead as well as flows for tcp/7800. What does this indicate? A. This is normal in optimization environments and provides the proper reporting of traffic volume between locations. B. This indicates that Flow data is being reported on the optimized connection, between Steelheads and has no impact on reporting. C. This indicates that Flow data is being reported on the optimized connection, between Steelheads and can lead to Cascade double-counting volumes between locations. D. This cannot happen. QUESTION 60 In the Cascade Profiler GUI, where can you mark a TCP port as a Server Port? A. Definitions->Host Groups B. Definitions->Applications C. Definitions->Port Names D. Definitions->Port Groups E. Integration->Switch Port Discovery QUESTION 61 In defining a user defined policy on Cascade Profiler that triggers when the aggregate connection rate from any internal host to all external hosts exceeds a certain threshold, one has entered "within internal" for host/group A and "outside internal" for host/group B. How should the statistics be tracked for host/group A and B? A. host/group A "Track in aggregate" host/group B "track per host". B. host/group A "track per host" host/group B "track in aggregate". C. host/group A "track in aggregate" host/group B "track in aggregate". D. host/group A "track per user" host/group B "track per user". E. a user defined policy cannot support this scenario because it involves tracking traffic to external hosts. QUESTION 62 How does Cascade Profiler obtain switch port discovery and population information? A. Switch Port Discovery Protocol (SPDP) B. Merging of CAM + ARP tables, both gathered via SNMP C. Merging of IF and ARP tables, both gathered via SNMP D. Merging of IF and CAM tables, both gathered via SNMP

16 QUESTION 63 Some common protocols which may be observed on a network with visibility tools are listed below. Match the protocol name with the most common port used. 1. HTTP a) TCP/25 2. HTTPS b) TCP/ HTTPS through a proxy c) TCP/ SMTP d) TCP/80 5. CIFS e) TCP/8080 A. 1-d; 2-b; 3-c; 4-a; 5-b B. 1-e; 2-c; 3-d; 4-a; 5-b C. 1-d; 2-c; 3-e; 4-b; 5-a D. 1-d; 2-c; 3-e; 4-a; 5-b E. 1-e; 2-d; 3-c ; 4-b; 5-a Correct Answer: D QUESTION 64 How many Host Group Types can be tracked on the Dashboard within the Cascade Profiler GUI? A. Unlimited B. Ten C. Four D. Twenty QUESTION 65 What is the maximum number of custom applications (Layer 4 and 7 combined) permitted to be defined on a single Cascade Profiler? A. 50 B. 75 C. 100 D. 125 E. Unlimited QUESTION 66 A packet capture (pcap) file that is loaded into Cascade Pilot for the first time is indexed: A. When the file is opened in Cascade Pilot for analysis. B. When the file is imported into Cascade Pilot for analysis. C. When the first view is applied to the file. D. When "Add Trend Index" is selected from a right-click menu within Cascade Pilot. E. When the file is copied onto a Cascade Shark appliance. Correct Answer: D QUESTION 67 If there is a Layer 7 fingerprint and a Layer 4 mapping for a particular application, which of the following is true. (Select 5) A. If the Layer 4 mapping override policy is not "Unknown/Unclassified", the Layer 4 mapping applies to flows not passing a Sensor or other application fingerprinting device as well as to flows not matching

17 any defined Layer 7 fingerprint B. If the Layer 4 mapping override policy is "Always", then the Layer 7 fingerprint will never be used for flows matching both criteria C. If the Layer 4 mapping override policy is "Unclassified", the Layer 4 mapping only applies to flows not passing a Sensor or other application fingerprinting device D. If the Layer 4 mapping override policy is "Unknown/Unclassified", the Layer 4 mapping applies to flows not passing a Sensor or other application fingerprinting device as well as to flows not matching any defined Layer 7 fingerprint E. Care must be taken when defining reports and policies to reflect overlapping definitions and the Layer 4 override policy F. The traffic Expression "app L7_fingerprint or app L4_mapping" will catch all traffic flows for the application data in a report CDEF QUESTION 68 Technologies used for switching traffic between Virtual Machines under ESXi include: A. Traffic between Virtual machines is not switched; it is routed by the standard vrouter included with ESXi B. A standard or distributed vswitch which comes with ESXi must be used, there is not 3rd party software available C. A 3rd party virtual switch is required such as the CISCO Nexus 1000v as no standard vswitch exists with ESXi D. The included standard vswitch of the CISCO Nexus 7000 E. The included standard vswitch or the CISCO Nexus 1000v Correct Answer: E QUESTION 69 Simple Network Management Protocol can be used on Cascade Profiler for: A. Accessing the Cascade Profiler's MIB by third-party applications for monitoring. B. Obtaining interface information from routers. C. Obtaining host MAC address information from switches. D. Obtaining network device status through the Cascade Profiler receiving SNMP traps. E. A, B, and D. Correct Answer: E QUESTION 70 The Cascade Profiler authenticates users before logging them in. What are the possible choices for authentication? (Select 3) A. Cascade Profiler local database B. User account specifies authentication by RADIUS C. TACACS D. RADIUS server to authenticate the user Correct Answer: ABD QUESTION 71 What are the sources of Layer7 Fingerprints as shown in the Cascade Profiler GUI? (Select 4) A. from the Cascade Sensor B. NetFlow C. NBAR

18 To Read the Whole Q&As, please purchase the Complete Version from Our website. Trying our product! 100% Guaranteed Success 100% Money Back Guarantee 365 Days Free Update Instant Download After Purchase 24x7 Customer Support Average 99.9% Success Rate More than 69,000 Satisfied Customers Worldwide Multi-Platform capabilities - Windows, Mac, Android, iphone, ipod, ipad, Kindle Need Help Please provide as much detail as possible so we can best assist you. To update a previously submitted ticket: Guarantee & Policy Privacy & Policy Terms & Conditions Any charges made through this site will appear as Global Simulators Limited. All trademarks are the property of their respective owners. Copyright , All Rights Reserved.