Free 299-01 Exam Dumps PDF Preview

Question 1

Multiple choice

What integrations are available when an enterprise already owns an SNMP monitoring technology (such as Solarwinds or HPOV)? (Select 2)

A
Cascade Profiler can use switch port discovery to retrieve ARP and CAM tables directly from the NMS.
B
Most NMS' can be configured to SNMP Poll Cascade Profiler to retrieve conversation information.
C
Network API (from NMS via URL strings to get Cascade Reports)
D
There are no integrations; NMS' are competitors to Cascade Profiler.
E
External Links (from Cascade Profiler via URL strings to NMS)

Reveal answer details Close answer details

Correct answersC, E

Question 2

Multiple choice

On Cascade Profiler, Which of the following behavioral analytic policy types are available in CascadE. (Select 3)

A
Application performance
B
Link performance
C
Host performance
D
Application availability
E
Service level performance
F
Conformance verification
G
Link congestion

Reveal answer details Close answer details

Correct answersA, D, G

Question 3

Single choice

How do Cascade Performance Analytics assist with Performance Monitoring?

A
By setting intelligent static thresholds for Application metrics and Interface metrics, tolerance can be determined. Cascade will use these thresholds and tolerances to report on deviations indicative of performance problems.
B
The Customer only needs to identify their critical hosts, interfaces and/or applications, and Cascade will automatically baseline their behavior and report on deviations indicative of performance problems.
C
The Performance Analytics use knowledge of hosts, interfaces, and/or applications are able to detect security threats such as host scans and worms.
D
After baselining is completed, Cascade can re-route congested traffic to avoid congested application delivery paths.

Reveal answer details Close answer details

Correct answerB

Question 4

Single choice

Which of the following will show a list of all NetFlow sources sending data to the Cascade system?

A
The Network Operations Dashboard
B
The "Interface Information" Report available from the "Reports->Shortcuts" page
C
The "System > Information" page
D
The "System > Devices/Interfaces" page

Reveal answer details Close answer details

Correct answerD

Question 5

Multiple choice

Within Cascade Pilot, Sequence Diagrams represent TCP Errors in which of the following ways: (Select 2)

A
By listing lost packets in the expert window
B
By using dotted-dashed lines for out-of-sequence segments
C
By placing error names on the messages within the diagram
D
By color-coding the messages on the diagram
E
By using a thicker line for messages that include errors

Reveal answer details Close answer details

Correct answersC, D

Question 6

Single choice

When you modify a filter in Cascade Pilot:

A
Changes are saved only in the View to which the filter has been applied.
B
The modified filter is saved on the machine on which Cascade Pilot is running.
C
The modified filter is saved on any Cascade Shark that Cascade Pilot is connected to.
D
The changes are lost when you close Cascade Pilot.

Reveal answer details Close answer details

Correct answerB

Question 7

Single choice

Which of the following types of hosts are included in Cascade grouping on Cascade Profiler?

A
Internal hosts only
B
External hosts only
C
All hosts
D
Internal and External hosts only
E
Specified internal hosts plus the non-routable subnets

Reveal answer details Close answer details

Correct answerA

Question 8

Single choice

For Service policies that get applied to End User segments, by default separate policies are tracked by location for the client traffic.

Which of the following is NOT true regarding flexibility in configuration of these End User segments?

A
The default hostgroup type used can be changed from Configuration > General Settings.
B
Different hostgroup types can be used for monitoring End User segments for each Service.
C
While editing the Service one has the capability to select all sites or a subset of sites to include for monitoring.
D
When adding a Service Health by Location widget to a dashboard, one has the capability to include all locations or a subset (maximum of 10).
E
The default hostgroup type used for monitoring End User segments is ByLocation.

Reveal answer details Close answer details

Correct answerB

Question 9

Single choice

When troubleshooting a Steelhead deployment with Cascade you suspect that you may have packet ricochet.
Since you are exporting CascadeFlow from the Steelheads to the Cascade how can you use Profiler to see if there actually is packet ricochet?

A
Identify connection duration.
B
Look for high server side packet counts.
C
Look for high number of reset.
D
Run a report with a Connection Graph.
E
Run a report on the WAN Interface of the Steelhead.
F
Run a report with Flow List and look at the topology columns.

Reveal answer details Close answer details

Correct answerF

Question 10

Single choice

In the Cascade Profiler GUI, what is a Port Group?

A
A combination of IP Address and Port Number
B
One or more protocol/port combinations mapped to a name
C
Names mapped to IP subnets
D
Layer-2 switch ports grouped into a logical name
E
NetFlow interfaces grouped into a logical name

Reveal answer details Close answer details

Correct answerB

Question 11

Single choice

Company X wants to use Cascade for monitoring the performance of their SQL application to all remote sites before considering purchasing any WAN optimization technology. They would like to add a Cascade Sensor to their network, and therefore they must:

A
Enable SPAN or mirror port on a switch in their datacenter, which has visibility of the SQL traffic in question.
B
Enable a SPAN or mirror port all remote sites where users of the SQL application sit.
C
Enable NetFlow on at least all WAN routers that carry the SQL traffic.
D
Configure the SQL servers to send their SNMP traps to the Cascade Profiler.
E
Configure the SQL servers to send their SNMP traps to the Cascade Gateway.

Reveal answer details Close answer details

Correct answerA

Question 12

Single choice

How is the Cascade Pilot license activated?

A
The license key is entered during installation. The license is activated either through an Internet connection or by phone.
B
The license key is entered during installation. The license must be activated through an Internet connection.
C
The license key is entered during installation. There is no activation but Cascade Pilot will detect if the license is already in use on the network.
D
There is no license key activation. The software image is shipped with the license key installed.

Reveal answer details Close answer details

Correct answerA

Question 13

Single choice

Which content block can be used to compare traffic between two time periods on the Cascade Profiler Dashboard?

A
Watched list as a bar chart
B
Watched list as a stacked area chart
C
Watched list as a line graph
D
Watched list as a pie chart
E
Top list as a bar chart

Reveal answer details Close answer details

Correct answerA

Question 14

Single choice

Cascade Profiler is reporting the traffic on Steelhead optimized flows separately than the connections on tcp/7800 between two Steelheads. In other words, from Cascade you see flows for traffic on various ports used natively by the clients and servers across the steelhead as well as flows for tcp/7800.

What does this indicate?

A
This is normal in optimization environments and provides the proper reporting of traffic volume between locations.
B
This indicates that Flow data is being reported on the optimized connection, between Steelheads and has no impact on reporting.
C
This indicates that Flow data is being reported on the optimized connection, between Steelheads and can lead to Cascade double-counting volumes between locations.
D
This cannot happen.

Reveal answer details Close answer details

Correct answerC

Question 15

Multiple choice

On the Cascade Profiler, which of the following is not a Scanner Choice under Vulnerability Scan Setup? (Select 2)

A
Nessus
B
Rapid7
C
Qualys
D
Retina
E
nCircle
F
MBSA

Reveal answer details Close answer details

Correct answersD, F

Question 16

Multiple choice

If there is a Layer 7 fingerprint and a Layer 4 mapping for a particular application, which of the following is truE. (Select 5)

A
If the Layer 4 mapping override policy is not "Unknown/Unclassified", the Layer 4 mapping applies to flows not passing a Sensor or other application fingerprinting device as well as to flows not matching
any defined Layer 7 fingerprint
B
If the Layer 4 mapping override policy is "Always", then the Layer 7 fingerprint will never be used for
flows matching both criteria
C
If the Layer 4 mapping override policy is "Unclassified", the Layer 4 mapping only applies to flows not passing a Sensor or other application fingerprinting device
D
If the Layer 4 mapping override policy is "Unknown/Unclassified", the Layer 4 mapping applies to flows not passing a Sensor or other application fingerprinting device as well as to flows not matching any defined Layer 7 fingerprint
E
Care must be taken when defining reports and policies to reflect overlapping definitions and the Layer 4
override policy
F
The traffic Expression "app L7_fingerprint or app L4_mapping" will catch all traffic flows for the application data in a report

Reveal answer details Close answer details

Correct answersB, C, D, E, F

Question 17

Single choice

On the Cascade Shark Appliance, which User Groups on the appliance exist by default:

A
Administrators, Operators, Monitors
B
Read-Only-Group, Read-Write-Group, Full-Access Group
C
Administrators, Network-Operations, Network-Security
D
Administrators, NormalUsers, Viewers
E
Administrators, Operators, Monitors, Viewers

Reveal answer details Close answer details

Correct answerD

Question 18

Single choice

Can the same IP Address exist in Multiple Host Groups on Cascade Profiler?

A
No, you cannot do this.
B
Yes, either within the same Group Type, or across Group Types.
C
Yes, but only if the Host Groups are in different Group Types.
D
Yes, but only in the ByFunction Group Type.
E
Yes, but only in the ByLocation Group Type.

Reveal answer details Close answer details

Correct answerC

Question 19

Multiple choice

How are trace clips created in Cascade Pilot? (Select 2)

A
Select a Capture Job, right-click, and select "Create Trace Clip".
B
Drag a bar from a Bar Chart to the Capture Job.
C
Click the + button in the Capture Job item and select a time window.
D
Select a time window and apply a Cascade Pilot filter.

Reveal answer details Close answer details

Correct answersA, C

Question 20

Single choice

In defining a user defined policy on Cascade Profiler that triggers when the aggregate connection rate from any internal host to all external hosts exceeds a certain threshold, one has entered "within internal" for host/group A and "outside internal" for host/group B.

How should the statistics be tracked for host/group A and B?

A
host/group A "Track in aggregate" host/group B "track per host".
B
host/group A "track per host" host/group B "track in aggregate".
C
host/group A "track in aggregate" host/group B "track in aggregate".
D
host/group A "track per user" host/group B "track per user".
E
a user defined policy cannot support this scenario because it involves tracking traffic to external hosts.

Reveal answer details Close answer details

Correct answerB

Question 21

Single choice

Cascade security baselines model all host-to-host interactions. A host is identified by:

A
AD user name if available, falling back to MAC address if available, falling back to IP address.
B
MAC address if available, falling back to IP address if available, falling back to AD user name.
C
AD user name if available, falling back to IP address.
D
MAC address if available, falling back to IP address.

Reveal answer details Close answer details

Correct answerD

Question 22

Single choice

On an Enterprise Profiler, which Cascade software module usually runs on hardware with another software module, but can be placed on its own hardware to support extremely large clusters?

A
Event Manager
B
Dispatcher
C
User Interface
D
Database

Reveal answer details Close answer details

Correct answerB

Question 23

Single choice

Live interfaces within Cascade Pilot as shown in the sources panel devices tab include:

A
Local interfaces, Cascade Shark port interfaces, Cascade Shark aggregating port interfaces, and virtual interfaces associated with capture job traces.
B
Local interfaces, Cascade Shark port interfaces, Cascade Shark aggregating port interfaces, and virtual interfaces associated with trace clips.
C
Local interfaces ONLY. Cascade Shark port interfaces must be viewed from the remote menu.
D
Interfaces associated with Cascade Shark ports ONLY. Local interfaces must be viewed from the local menu.

Reveal answer details Close answer details

Correct answerA

Question 24

Single choice

How does Cascade track response time using its Sensor?

A
The Sensor watches TCP-three-way handshakes to measure Network RTT, Server Delay, and Response Time.
B
The Profiler will measure the delta between packets reported by each Sensor in the path.
C
The Sensor will measure HTTP page load times.
D
The Sensor will measure transaction times of over 100 applications using application signatures.

Reveal answer details Close answer details

Correct answerA

Question 25

Single choice

Some common protocols which may be observed on a network with visibility tools are listed below. Match the protocol name with the most common port used.

1. HTTP a) TCP/25
2. HTTPS b) TCP/445
3. HTTPS through a proxy c) TCP/443
4. SMTP d) TCP/80
5. CIFS e) TCP/8080

A
1-d; 2-b; 3-c; 4-a; 5-b
B
1-e; 2-c; 3-d; 4-a; 5-b
C
1-d; 2-c; 3-e; 4-b; 5-a
D
1-d; 2-c; 3-e; 4-a; 5-b
E
1-e; 2-d; 3-c ; 4-b; 5-a

Reveal answer details Close answer details

Correct answerD

Question 26

Single choice

How does Cascade Profiler track URL's?

A
Each URL that is seen by the Sensor is shown on the dashboard or searchable via reporting.
B
Customer defined URL's are mapped to an application name which can then be shown on the dashboard, searched via reporting, or used in Analytic definitions.
C
URL's are tracked by either a Cascade Sensor or via NetFlow version 5 (or higher) export.
D
Cascade does not track URL's.

Reveal answer details Close answer details

Correct answerB

Question 27

Multiple choice

What information is required to configure the Switch Port Discovery feature in the Cascade Profiler? (Select 2)

A
Periodically imported DHCP lease records
B
IP address of the outermost switches
C
IP address of the lookup router
D
IP address of mitigation router

Reveal answer details Close answer details

Correct answersB, C

Question 28

Multiple choice

If a VLAN SPAN (VLAN101) is configured and monitored by Cascade Shark, which of the following is true? (Select 2)

A
Inter VLAN101 traffic will be monitored; Intra VLAN101 traffic will not.
B
Intra VLAN101 traffic will be monitored; Inter VLAN101 traffic will not.
C
Both inter and intra VLAN101 traffic will be monitored.
D
It is a best practice to configure the Cascade Shark monitoring port (the SPAN destination) with
'deduplication' enabled.
E
It is a best practice to configure the Cascade Shark monitoring port (the SPAN destination) without
'deduplication' enabled.

Reveal answer details Close answer details

Correct answersC, D

Question 29

Multiple choice

Which is a true statement regarding choosing between a 2U and a 3U Cascade Shark base appliancE. (Select 2)

A
You must consider how many capture cards are required.
B
You must consider how much disk space is required.
C
You must consider the write-to-disk speed required.
D
You must consider how many Cascade Pilot consoles will be connecting.
E
You must consider how many Cascade Profilers the appliance will export to.

Reveal answer details Close answer details

Correct answersB, C

Question 30

Single choice

How many Group Types Can you create on your Cascade Profiler?

A
5
B
20
C
15
D
10
E
Unlimited

Reveal answer details Close answer details

Correct answerD

Question 31

Multiple choice

Which of the following is valid syntax for defining host groups? (Select 3)

A
192.168.0.100/255.255.0.255 Philadelphia
B
192/8 Baltimore
C
172.168.1.1 Phoenix
D
10/16 Chicago

Reveal answer details Close answer details

Correct answersA, B, C

Question 32

Multiple choice

Within Cascade Pilot, Sequence Diagrams allow you to display information between two end points. You have a choice of displaying information for two different layers in the network stack. Descriptions of the sequence diagrams for the two Layers follow: (Select 2)

A
Layer 1 information. For example, for Ethernet tap points this includes signal levels and attenuation.
B
Layer 2 information. For example, for Ethernet with 802.1Q encapsulation this includes the VLAN identifier and frame size between MAC Addresses
C
Layer 3 information. For example, for IPv4 this includes the protocol, time-to-live (TTL), and IP Identifier between IP Addresses
D
Layer 4 Transport information. For example, for TCP this includes TCP flags, size in bytes, and
sequence number between IP Addresses.
E
Application header information. For example, for Web traffic this includes HTTP methods and message numbers (e.g. "200", "404").

Reveal answer details Close answer details

Correct answersD, E

Question 33

Single choice

Once the Cascade Shark appliance has an initial configuration with an IP Address set to 10.1.1.1 you can connect to it from a web browser using the URL:

A
http://10.1.1.1
B
https://10.1.1.1
C
https://10.1.1.1:443
D
https://10.1.1.1:8080
E
http://10.1.1.1:8080

Reveal answer details Close answer details

Correct answerD

Question 34

Single choice

What is the relationship between a Host Group and a Host Group Type in Cascade Profiler?

A
A Host Group Type is a container that may contain multiple Host Groups.
B
A Host Group Type defines the name of the Host Group.
C
They are the same thing.
D
Each Host Group must be defined by the Type of application it serves; this is the Host Group Type.

Reveal answer details Close answer details

Correct answerA

Question 35

Multiple choice

Which of the following data is required for Cascade Profiler to correctly calculate Round-Trip-Time (RTT) between a branch and the datacenter for Steelhead optimized traffic? (Select 2)

A
NetFlow from router on WAN side of branch Steelhead
B
NetFlow from router on LAN side of branch Steelhead
C
CascadeFlow from branch Steelhead
D
CascadeFlow from Data center Steelhead
E
Sensor at Data center
F
Sensor-VE sending Cascade flow data

Reveal answer details Close answer details

Correct answersC, D

Question 36

Single choice

On the Cascade Shark appliance, packet de-duplication should be enabled when:

A
Capturing packets from a SPAN-Port/Port-Mirror whose configuration may generate duplicate packets
B
Capturing packets from an aggregating TAP
C
Removing duplicate flows across multiple interfaces
D
Capturing packets from a 10GB link

Reveal answer details Close answer details

Correct answerA

Question 37

Multiple choice

When sending data from a Gateway or Sensor to a Profiler which ports must be opened between the devices? (Select 3)

A
tcp/8443
B
udp/123
C
tcp/41017
D
tcp/42999
E
tcp/123

Reveal answer details Close answer details

Correct answersA, B, C

Question 38

Multiple choice

What is a benefit that Cascade Profiler might provide to Security Operations? (Select 3)

A
Ability to identify Scanners and Worm Propagations.
B
Ability to provide information for a firewall rule when a user defined policy is violated.
C
Ability to alert on security policy (e.g. an insecure policies, such as FTP, is in use).
D
Ability to identify Worms by name.

Reveal answer details Close answer details

Correct answersA, B, C