Riverbed RCSP-NPM 299-01 Questions & Answers

• Question 41:

  What versions of NetFlow export the TCP flags?

  A. v5 and v9

  B. v1

  C. v7 and v8

  D. All of the above

  E. None of the above

  Correct Answer: A

• Question 42:

  Cascade Shark can export flow data to a Cascade Profiler. When configuring Cascade Shark, flow export can be configured:

  A. Per each capture job

  B. Per each trace clip

  C. Per each capture port

  D. Per each capture board/aggregating port

  E. Per each Cascade Shark appliance

  Correct Answer: C

• Question 43:

  Which version of SNMP is supported for Switch Port Discovery on Cascade Profiler?

  A. SNMPv1 Only

  B. SNMPv2 Only

  C. SNMPv1 and SNMPv2

  D. SNMPv1 and SNMPv3

  Correct Answer: C

• Question 44:

  Layer 7 Fingerprints come from which of the following sources:

  A. Cascade, User Defined, Packeteer, NBAR

  B. Cascade, User Defined, Packeteer, NBAR, Steelhead appliance

  C. Cascade, Packeteer, NBAR, Steelhead Appliance

  D. Cascade, User Defined, Cisco, Netscreen, Steelhead appliance

  Correct Answer: A

• Question 45:

  For an analytic policy that monitors TCP retransmission bandwidth, which of the following best describes what is minimally required before a baseline can be established?

  A. Three weeks of historical traffic between the clients and servers defined on the policy.

  B. Three days of historical traffic between the clients and servers defined on the policy.

  C. Three weeks of historical traffic between the clients and servers defined on the policy, where retransmissions were reported in more than 50% of the 15 min windows over the three week period.

  D. Three days of historical traffic between the clients and servers defined on the policy, where retransmissions were reported in more than 50% of the 15 min windows over the three day period.

  E. The timeframe required to collect the baseline is not fixed, and is based on the variance of the traffic being monitored.

  Correct Answer: D

• Question 46:

  What are the three sections of a Cascade Service Incident Report page? (Select 3)

  A. Event List

  B. Exception List

  C. Report Criteria

  D. Alarm List

  E. Event Summary

  Correct Answer: ACE

• Question 47:

  For a worm security event to be triggered on Cascade Profiler, what event must have occurred first?

  A. Host Scan

  B. Port Scan

  C. Link Availability

  D. Suspicious Connection

  E. There is no event that triggers before a worm event.

  Correct Answer: A

• Question 48:

  Within Cascade Profiler, what can be done to prevent a data resolution from being available for selection on the Report Criteria section of traffic reports?

  A. Set the disk space for that data resolution to 0 in Configuration > Flow Log.

  B. Set the disk space for that data resolution to -1 in Configuration > Flow Log.

  C. Set the disk space for that data resolution to -1 in Configuration > General Settings.

  D. Set the disk space for that data resolution to 0 in Configuration > General Settings.

  Correct Answer: A

• Question 49:

  Cascade Pilot supports the following filter languages: (Select 4)

  A. Perl Regex

  B. Cascade Pilot Filter

  C. Wireshark Capture Filter (BPF)

  D. Wireshark Display Filter

  E. Time Interval

  F. Visual Basic

  Correct Answer: BCDE

• Question 50:

  What is the purpose of the snmp-server ifindex-persist command in regards to Riverbed Steelhead appliances and Cascade Profiler? (Select 2)

  A. Guarantees that the ifIndex values for various interfaces remain stable across Steelhead appliance reboots and reconfiguration.

  B. Guarantees that the ifIndex values for various interfaces remain stable across network disruptions preventing re-polling

  C. Guarantees that the ifdescription values for various interfaces remain correctly mapped across Steelhead appliance reboots and reconfiguration.

  D. Guarantees that the ifdescription values for various interfaces are remapped across Steelhead appliance service shutdowns.

  Correct Answer: AC