201-01 Practice Exam Questions with Answers Riverbed Certified Solutions Associate - Network Performance Management Certification

Cascade will send synthetic transactions to measure response time.

Cascade has a software agent that can be loaded on a Windows Server to provide response time metrics with most major applications

Cascade tracks Response Time metrics by observing live traffic. These metrics are used with other indicators to build baselines and analyze deviations that may be indicators to issues.

All the above.

Ensuring the interface of the Cascade Profiler is on the same subnet as the router, as NetFlow is not routable.

Using the “tcp/(n) + 1” port numbering scheme to ensure this router’s NetFlow is unique from all other routers.

Ensuring the router has IP connectivity to the Cascade Gateway.

Ensuring the interface of the Cascade Gateway is on the same subnet as the router, as NetFlow is not routable.

Using the “udp/(n) + 1” port numbering scheme to ensure this router’s NetFlow is unique from all other routers.

Advanced analytics using dynamic modeling of network behavior.

Comparisons to absolute thresholds.

Windows WMI data gathered from Application Servers.

Loss of connectivity based on three consecutive lost ICMP ping responses.

Error rated collected through SNMP Polling of Network Interfaces.

Database Performance mode

Application Stream Analysis boost mode

Server Boost mode

Web Transaction Analysis mode

The company must buy a new Standard Cascade Profiler and stop using their Express.

The company can continue to use their Express but must buy a new Cascade Profiler.

The Express can be further licensed to capture the currently dropped flows.

The company must buy a new Standard Cascade Profiler but can use the Express functioning as a remote Cascade Sensor.

The company must buy a new Standard Cascade Profiler and can continue to use their Express but the two Cascade Profilers must be used independent of one another.

The company can try to reduce the number of flows being seen by the Express.

By setting static thresholds for Application metrics and Interface metrics, tolerance can be determined. Cascade will use these thresholds and tolerances to report on deviations indicative of Performance problems.

The Customer only needs to identify their critical interfaces and applications, and Cascade will automatically baseline their behavior and report on deviations indicative of Performance problems.

The Performance Analytics are able to detect security threats such as host scans and worms.

After base-lining, Cascade can re-route congested traffic to avoid congested application delivery paths.

Drill down from Cascade Profiler

Indexing files for fast analysis

Visual troubleshooting and analysis

Distributed capture and analysis (Cascade Shark appliance)

Application Transaction diagrams

SMTP integration

SNMP integration

DHCP integration

There is only one method of getting MAC address information.

Line monitoring for ARP requests

There is a 30-minute waiting period before newly added users become active.

The user is probably using an unsupported web browser.

The user is probably lacking the Access permission.

None of the above.

Use out of the box report templates

Export any dashboard to PDF

With a right-click operation

All of the above

A logical collection of IP Addresses that can be grouped by region, application, and function.

A set of netflow collectors.

NetFlow senders.

A group of Ports.

A collection of MAC Addresses.

Ensure Internet connectivity and activate the application online during installation.

Install the application and activate it through the phone.

Install the application on your Linux or Windows system and then launch it.

Install the application on your Windows machine and then launch it.

By importing a display or capture filter from Wireshark.

By saving the filter applied in a View.

Only when you are connected to a Cascade Shark.

Only before applying a View.

The traffic will be double counted.

Cascade will discard one of the flow records.

If both flows types are the same (e.g. NetFlow) Cascade will de-duplicate the records but if they are of different flow types, one record will be discarded.

Cascade will de-duplicate and consolidate the flow records regardless of source and flow type.

This is not possible.

Packet Collection Only

Flow Collection Only

SNMP Statistics Only

Flow Collection or Packet Collection

SNMP Statistics or Packet Collection

NT 4.0

Windows Server 2003

Windows Server 2008

Windows Server 2005

A & D

XenApp

Any of them, but an agent on Citrix servers needs to be installed

NetScaler

XenDesktop

25,000 flows per minute

50,000 flows per minute

As many flows as can be collected from up to 5 other devices

100,000 flows per minute

Limited by the Cascade Profiler license limit

Fault Management

Application Performance Management (APM)

Network Behavior Analysis (NBA)

Flow based Network Monitoring and Analysis

From the User Management section of the Web Interface

From the Basic Settings page of the Web Interface

From the Users menu of Cascade Pilot

From the Advanced Settings page of the Web Interface

A packet capture (pcap) file that is open on the local file system for analysis by Cascade Pilot.

A packet capture (pcap) file that is exported on to the Cascade Shark OS disk for analysis by Cascade Pilot.

A capture job that is suspended or stopped.

A time filter into a job trace.

WAN optimization, WAN shaping, QoS Policy enforcement

WAN management, Application Performance, Data Center management

Reporting, Asset Inventory, Ticketing

SNMP Trap collection, Log consolidation, Correlation

A technique used to send Flow data from a switch or router.

A technique used to copy packet data traversing a switch or router to a packet capture device from a passively monitoring port on the switch or router.

A technique used to connect into a live link in a network using a network-tap in order to send all packet data traversing the live link to a packet capture device.

A technique for placing a link on a switch or router in loopback mode for troubleshooting purposes.

Cascade Express 100

Cascade Express 300

Cascade Standard series

Cascade Enterprise series

On Dashboards

In Reports

In User Defined Policies

In Application Performance Policies

All of the above

Smart Switch

Switch

Lookup Router

Hub

BGP AS number

IP address of Sensor

Default gateway of Internet router

Subnet mask for entire corporate network

Subnet mask for all Cascade Enterprise Profiler modules

Cascade can determine every URL that a client goes to out on the internet.

Cascade can identify applications at Layer7 which will aid in determining business versus non-business use-age of resources.

Cascade can identify applications that use multiple common ports based upon Layer7 to more readily track application dependencies.

Cascade can be configured with URLs, match those URL’s to application names and, in order to understand which applications are utilized on web servers that host multiple web applications over the same TCP port.

Cascade can identify unencrypted applications such as FTP and TELNET regardless of port number, and other applications (such as Peer to Peer) that may violate a company’s security policies.

Roll remote devices via SNMP at the request of NetProfiler.

Process up to tens of millions of raw flows per minute.

Provide analysis of incoming flows and identify anomalies in traffic patterns.

Selectively forward flows from original sources to third party colectors.

Selectively forward flows from original sources to NetProfiler(s).

A specific capture job

All the capture jobs

All the capture ports on the appliance

A specific capture port on the appliance

A downloadable customized view from the online Cascade community.

Any view that is applied to live devices and dynamically updated.

A view that can be created after drill-down from one view to another.

Any view that was created by applying a traffic filter.

All views within Cascade Pilot are considered interactive views.

A set of graphs showing top interfaces, top hosts, top users, and top protocols from which you can run reports.

A configurable set of content blocks for watched and top items (items including hosts, network interfaces, ports, protocols, and applications), which are updated with current information and from which you can run reports.

A configurable set of connection graphs for watched and top items (items including hosts, network interfaces, ports, protocols, and applications), which are updated with current information and from which you can run reports

A configurable set of fixed logarithmic graphs for watched and top items (items including hosts, network interfaces, ports, protocols, and applications), which are updated with current information and from which you can run reports.

BGP

Windows Messenger

SMTP

IM

Skype

User Defined Policies

SNMP Polling

Dashboards

Services

Navigate Network

There is no difference between an Express and Standard Profiler.

An Express Profiler has the option only for a built-in Sensor and cannot receive flow data.

A Standard Profiler has the option only for a built-in Sensor and cannot receive flow data.

An Express Profiler can handle more flows per minute then a Standard Profiler.

An Express Profiler has a built in Sensor and Gateway.

Manually created hosts are not monitored

Manually created relationships are not monitored

Thresholds need to be set

All of the above

Security Events

Performance and Availability Events

Current Events

Unacknowledged Events

Public Events

Private Events

Per User Events

Resolve host names using DNS

Resolve host names using /etc/hosts

Resolve host names for hosts managed by DHCP

Suppress DHCP/DNS search domains (ce.lab.nbttech.com,nbttech.com) from resolved hosts

In UI preferences

In behavior analysis - policies

In behavior analysis - notifications

In behaviors analysis - events

In configuration - general settings

Local user accounts

Active Directory

TACACS+

RADIUS

LDAP

Write-to-disk speed

NetFlow consumption rate required

Protocol support required

Capture port types required

Packet storage required

Definitions->Host Groups

Definitions->Applications

Definitions->Port Groups

Definitions->Port Names

Integration->Switch Port Discovery

None, alerts are accessible via the Cascade GUI only

SNMP traps only

SMTP email only

Pager only

One of SMTP email or SNMP trap but not both

SNMP traps and SMTP mail, each one optional, both allowed

change the Navigation Bar Position.

change were reports are saved on Profiler.

change data unit from Bytes to Bits.

change user Time Zone.

search for lost templates.

Packet Collection Only

Flow Collection Only

SNMP Statistics Only

Flow Collection or Packet Collection

SNMP Statistics or Packet Collection

XenApp

XenDesktop

Apache

VDI

NetExpress is only good for extremely tiny enterprises with a few hundred hosts that want a single, company-wide visibility monitoring solution.

Small enterprises with a few thousand hosts that want a single, company-wide visibility monitoring solution.

Large enterprises with hundreds of thousands of hosts that want a single, company-wide visibility monitoring solution.

NetExpress is a good solution for any sized organization that want a single, company-wide visibility monitoring solution.

Medium-size enterprises with tens of thousands of hosts that want a single, company-wide visibility monitoring solution.

Go to the Dashboard page and verify that the graphs display data.

Go to the System->Information page and assure that all status indications (System and Component, DNS Server) are displaying OK.

Go to the System->Devices/Interfaces page and assure that each data source that is expected to be available is listed and that no status indicators are red.

Go to the Reports->Traffic page. Near the bottom of the Report Criteria section, click Run now. Verify that a traffic report is displayed.

All of the Above

Select a graphic object in a View chart, and drag a View on the object.

Select a graphic object in a View chart, and drag a View on the trace file.

Select the View, right-click, and apply it with the filter associated with a graphic object.

Right-click in the View chart, and select "Drill-down" to select the View.

Packet-level detail with microsecond-level details.

Flow-level detail with one-minute level details.

Packet-level detail with nanosecond-level details.

Flow-level details with nanosecond-level details.

Packet-level detail with one-minute level details.

TRUE

FALSE

receive mail from others.

send reports.

send disk failure notifications.

send alerts.

2

10

100

No limit

Ensure the Cascade Gateway’s monitor interface is receiving packets from the SPAN destination interface.

Ensure the Cascade Sensor’s monitor interface is receiving packets from the SPAN destination interface.

Set the Cascade Sensor’s monitor interface to the same VLAN as the SPAN destination interface.

Set the Cascade Gateway’s monitor interface to the same VLAN as the SPAN destination interface.

Set the SPAN destination interface the same as at least one source interface to ensure complete coverage.

Sensor

Express

Shark

Gateway

Gateway-VE

You must run only a single version of the AD connector program.

Install the AD Connector 1.5 on all domain controllers.

Install the appropriate version of the AD Connector on each domain controller.

Install the AD Connector v2.0 on all domain controllers.

Install the AD Connector v2.0 on an Event Collector host.

Audit, Edit, Copy

Audit, Edit, Copy, Delete

Audit, Edit, Copy, Delete, Disable

Audit, View, Delete Disable

Low and High

Emergency, Critical, Alert, Error, Warning, Notice, Informational, and Debug

Critical, Warning, and Informational

System Down, System Impaired, Attack, SLA/SLO Violation, and Security Policy Violation

Low, Med, and High

Response Time

Layer 4 Application Classification Mapping

Layer 7 Application Classification Mapping

Network Throughput

Network Round Trip Time

SAN and Local Disk Storage

SAN only

Local Gateway-Storage

Hard Drive and Ethernet or USB-attached NAS

Local only

WAN Optimization

Data Center Consolidation

Router Configuration Management

Firewall Audit

One or all views from the main workspace.

Notes entered associated with a view.

Analyst and Client information entered.

A and B.

A, B and C.

When one host on the network attaches to a network printer-scanner device and is able to exploit the printer-scanner to download all material scanned on the device.

When one host on the network is infected with malware and the malware scans all of the files resident on the infected system looking for exploits.

When several hosts on the network send a high volume of traffic to a single host to try to exhaust the resources of the host.

When one host on the network send ping packets or other packet types to multiple other devices on the network to determine which hosts are available for further exploit.

Interface centric

Application centric

Host centric

Port centric

The Cascade Profiler does not have two approaches

Yes, always.

It depends on whether all of the segments initialize their baseline.

It depends on what criteria was used when defining the dashboard widget.

It depends on which user defined and committed the Service.

It depends on how many Services have already been configured.

Through the serial port.

Through a keyboard and monitor connected to the appliance.

Through the Cascade Shark appliance Web Interface using the default Cascade Shark appliance IP Address.

Through the Cascade Shark appliance Web Interface if the IP address of Cascade Shark appliance is assigned through a DHCP server.

Many organizations do not know all the aspects of a given application or service they provide, which makes it difficult to fully map that service and monitor it from end to end. NetProfiler has visibility into many different areas and can often see connections used by different parts of a service that may be unknown to different administrators. This visibility allows NetProfiler to identify all the different components of a service and prov

When monitoring an application, it is often necessary to think of that application as a service instead of an application. By utilizing NetProfiler Services, you are able to take your application and easily convert it to a service. This conversion allows you to treat the application differently so it can be more effectively monitored.

Applications are large and complex and often traverse different groups within a single organization. Without the concept of a service in NetProfiler, it would not be possible to monitor the traffic from a single application since each group would have no purchase their own NetProfiler to monitor their individual aspect of the application.

None of the above.

Cascade Gateway’s poll Netflow sources via SNMP, while Cascade Profiler, Cascade Gateway and Cascade Sensor sync NTP from a common source.

Cascade Profiler’s poll Netflow sources via SNMP, while Cascade Profiler, Cascade Gateway and Cascade Sensor sync NTP a common source.

Cascade Profiler’s poll Netflow sources via SNMP, while Cascade Profiler is the NTP source for Cascade Gateways and Cascade Sensors.

Cascade Gateway’s poll Netflow sources via SNMP, while Cascade Profiler is the NTP source for Cascade Gateways, Cascade Sensors and Cascade Sharks.

SNMP polling is not supported in Cascade.