299-01 Online Practice Questions and Answers

What are two differences between NetFlow version 5 and NetFlow version 9 (select 2)

A. NetFlow version 5 generally support ingress flow export only; NetFlow version 9 supports both ingress and egress export.

B. NetFlow version 5 is used for Switches, NetFlow version 9 is used for Routers.

C. NetFlow version 9 includes information about CPU, Power-status and other router performance characteristics; NetFlow version 5 does not.

D. NetFlow version 9 includes the ability to export the Time-To-Live (TTL); NetFlow version 5 does not.

E. NetFlow version 9 includes the ability to export the packet latency, NetFlow version 5 does not.

Within the Cascade Pilot GUI, filtered items are often indicated:

A. With red text.

B. With yellow text.

C. With a funnel icon.

D. With a hash-mark icon.

On Cascade Profiler, in terms of retention of completed reports and reporting sources (one minute flow and rollup files), which of the following is true? (Select 4)

A. One minute flow records are deleted from the file system FIFO (oldest first) once the appliance has filled the space that is allocated.

B. There is a fixed amount of space on the filesystem for completed reports.

C. A report template can be marked "keep until I delete it" so that any reports that are scheduled with this template are not automatically deleted from the filesystem.

D. When the flows or rollup records have been deleted from the filesystem, any saved report that was generated from those flow sources is no longer available.

E. Users have the ability to allocate additional space to the 1 min flow logs in order to increase retention. This is done at the expense of other rollup resolutions.

How does Cascade Profiler obtain switch port discovery and population information?

A. Switch Port Discovery Protocol (SPDP)

B. Merging of CAM + ARP tables, both gathered via SNMP

C. Merging of IF and ARP tables, both gathered via SNMP

D. Merging of IF and CAM tables, both gathered via SNMP

Some common protocols which may be observed on a network with visibility tools are listed below. Match the protocol name with the most common port used.

1.

HTTP a) TCP/25

2.

HTTPS b) TCP/445

3.

HTTPS through a proxy c) TCP/443

4.

SMTP d) TCP/80

5.

CIFS e) TCP/8080

A. 1-d; 2-b; 3-c; 4-a; 5-b

B. 1-e; 2-c; 3-d; 4-a; 5-b

C. 1-d; 2-c; 3-e; 4-b; 5-a

D. 1-d; 2-c; 3-e; 4-a; 5-b

E. 1-e; 2-d; 3-c ; 4-b; 5-a

What defines a "Recipient" for Cascade Profiler Notifications?

A. An Email Address only

B. An SNMP receiver only

C. An SNMP receiver only tied to a set of Host Groups

D. An Email Address and/or one or two SNMP receivers optionally tied to a set of Host Groups

E. An Email Address and/or one or two SNMP receivers optionally tied to a set of User Accounts

F. A User Account

You can analyze data on Cascade Pilot received from live interfaces iF. (Select 2)

A. Cascade Pilot is started with administrator privileges.

B. Cascade Shark is configured to show capture ports.

C. You apply a View to the interface and create a Watch on Web traffic.

D. You have privileges to do so in your user profile.

A strip chart within Cascade Pilot shows data points:

A. According to the Cascade Pilot time zone.

B. According to the time zone of the Cascade Shark to which you are connected.

C. According to Cascade Pilot time zone or optionally, to the Cascade Shark time zone as well.

D. According to UTC.

In order for the Cascade solution to track an application based on its fingerprint, data can be used from which devices? (Select 3)

A. Packeteer Device

B. Cascade Gateway

C. Cascade Sensor

D. Cisco NBAR device

Cascade Profiler Dashboard can be configured to show: (Select 3)

A. The top applications for the previous week.

B. Only the IPs that a user is authorized to see.

C. Bandwidth for a host group over the previous day.

D. Bandwidth for interfaces from devices NOT sending flow data.

E. Connections for interfaces from devices sending flow data.

What is the chart granularity possible through the Cascade Pilot UI? (Select 2)

A. 1 second on a local System, 10 milliseconds on Cascade Sharks.

B. 1 millisecond for any View.

C. 1 millisecond for specific Views.

D. Generally minimum 1 second, maximum 1 day.

Which DHCP Server Product(s) are supported with the Cascade DHCP integration?

A. QIP

B. ISC

C. Infoblox

D. Windows DHCP

E. All of the above

F. None of the above

In Cascade Profiler, which of the following is available as a Dashboard content block? (Select 3)

A. Top Hosts

B. Top URLs

C. Watched Interfaces

D. Current Events

Which of the following does the Cascade Sensor device provide that the Cascade Sensor-VE does not? (Select 2)

A. Layer-7 Application Fingerprinting

B. Connection Duration Statistics

C. Riverbed RiOS Integration

D. Rotating Packet Log

What is the relationship between a Host Group and a Host Group Type in Cascade Profiler?

A. A Host Group Type is a container that may contain multiple Host Groups.

B. A Host Group Type defines the name of the Host Group.

C. They are the same thing.

D. Each Host Group must be defined by the Type of application it serves; this is the Host Group Type.