Riverbed 299-01 Online Practice Questions and Exam Preparation

Riverbed 299-01 Online Questions & Answers

• Question 131:

  Cascade Shark can export flow data to a Cascade Profiler. When configuring Cascade Shark, flow export can be configured:

  A. Per each capture job
  B. Per each trace clip
  C. Per each capture port
  D. Per each capture board/aggregating port
  E. Per each Cascade Shark appliance
  C. Per each capture port

• Question 132:

  What data do I need from netflow sources for the Cascade Profiler report-by "network segments" to work correctly?

  A. Netflow V5 or V9 with TTL export configured.
  B. NetflowV9 with TTL export configured.
  C. Any version of Netflow since they all export in/out interface information.
  D. UDP port.
  B. NetflowV9 with TTL export configured.

• Question 133:

  Which of the following are true about Trend/Index data on a Cascade Shark appliancE. (Select 3)

  A. Allows Cascade Pilot to load views that take advantage of the Index more quickly.
  B. Includes the number of bytes and packets for each conversation seen by the Cascade Shark appliance.
  C. It is configured on a per-port basis.
  D. It is configured using the sa-wizard as part of the initial configuration.
  E. It is enabled by default per capture job.
  A. Allows Cascade Pilot to load views that take advantage of the Index more quickly.
  B. Includes the number of bytes and packets for each conversation seen by the Cascade Shark appliance.
  E. It is enabled by default per capture job.

• Question 134:

  NetFlow v9 uses the concept of templates. How do you tell the Cascade Gateway the proper template information?

  A. You configure the NetFlow v9 template on the Gateway for each NetFlow v9 exporting device.
  B. You manually import the NetFlow v9 template for each device.
  C. The template is automatically learned by the Gateway.
  D. All of the above.
  E. None of the above.
  C. The template is automatically learned by the Gateway.

• Question 135:

  If Cascade is unable to keep a record of all hops traversed due to exceeding its limits, what is the order of preference for selecting which hops to preserve?

  A. Preserve order as received at Gateway.
  B. Preserve order as received at Profiler.
  C. Sensors, Sensor-VEs, Steelheads, xFlow (NetFlow, sFlow, Jflow, Cflow...).
  D. Steelheads, Sensors, Sensor-VEs, xFlow (NetFlow, sFlow, Jflow, Cflow...).
  E. xFlow (NetFlow, sFlow, Jflow, Cflow...), Steelheads, Sensors, Sensor-VEs.
  D. Steelheads, Sensors, Sensor-VEs, xFlow (NetFlow, sFlow, Jflow, Cflow...).

• Question 136:

  Additional data sources that Cascade Profiler can leverage besides flow data arE. (Select 3)

  A. Active Directory information for successful/failed login association to IPs
  B. DHCP for host IP to MAC address association.
  C. SNMP polling to routers, switches, and servers for CPU information.
  D. SNMP trap data from routers, switches, and servers for security events.
  E. SNMP polling to routers and switches for MAC address and physical switch port association.
  A. Active Directory information for successful/failed login association to IPs
  B. DHCP for host IP to MAC address association.
  E. SNMP polling to routers and switches for MAC address and physical switch port association.

• Question 137:

  A capture job definition on Cascade Shark may includE. (select 3)

  A. A BPF packet filter
  B. A disk space allocation
  C. Time-based display resolution
  D. Trend/Indexing parameters
  E. Access credential information
  A. A BPF packet filter
  B. A disk space allocation
  D. Trend/Indexing parameters

• Question 138:

  Which version of SNMP traps can the Cascade Profiler and Cascade Express send?

  A. SNMPv1 Only
  B. SNMPv2 Only
  C. SNMPv1 and SNMPv2
  D. SNMPv1 and SNMPv3
  D. SNMPv1 and SNMPv3

• Question 139:

  What conditions might prevent successful SNMP polling of a flow source? (Select 2)

  A. An ACL might exist on the flow source (router) and the Cascade Standard Profiler IP address is not in it.
  B. SNMP is not enabled.
  C. The correct IP address of the flow source was not entered into the GUI.
  D. The SNMP read string provided and entered might not be correct.
  E. The flow source is not using the same NTP source as the Cascade Gateway.
  B. SNMP is not enabled.
  D. The SNMP read string provided and entered might not be correct.

• Question 140:

  Which Cascade device actually polls for the SNMP information in the switch port Discovery process?

  A. Application Sensor
  B. Gateway
  C. Profiler
  D. All of the above
  E. None of the above
  C. Profiler