Riverbed Riverbed Certifications 299-01 Questions & Answers

• Question 51:

  When sending data from a Gateway or Sensor to a Profiler which ports must be opened between the devices? (Select 3)

  A. tcp/8443

  B. udp/123

  C. tcp/41017

  D. tcp/42999

  E. tcp/123

  Correct Answer: ABC

• Question 52:

  Cascade accepts lease data from DHCP servers in order to: (Select 2)

  A. obtain MAC addresses.

  B. improve accuracy of the security baseline.

  C. force lease extensions longer to make tracking unique PCs easier.

  D. obtain an IP for itself.

  Correct Answer: AB

• Question 53:

  Which of the following statements are true (select 2)

  A. SNMP based technology can query a network device for statistics such as number of packets and bytes sent out an interface but typically doesn't have conversation-level details (such as which IP Addresses where talking at a given time)

  B. NetFlow based technology can query a network device for statistics such as number of packets and bytes sent out an interface but typically doesn't have conversation-level details (such as which IP Addresses where talking at a given time)

  C. NetFlow based technology does NOT typically include response time information, packet inspection is necessary to measure response times

  D. It is NOT possible to understand which conversations traversed a link without full packet capture

  E. SNMP based technology querying routers in the network can be used to view end to end conversations across a network to determine top talkers

  Correct Answer: AC

• Question 54:

  Which of the following will show a list of all NetFlow sources sending data to the Cascade system?

  A. The Network Operations Dashboard

  B. The "Interface Information" Report available from the "Reports->Shortcuts" page

  C. The "System > Information" page

  D. The "System > Devices/Interfaces" page

  Correct Answer: D

• Question 55:

  Which of the following statements are true? (Select 3)

  A. Cascade Standard Profiler can provide network reporting without any other Cascade component IF there are Steelhead appliances reporting to it.

  B. Cascade Shark appliance can provide/export pcap files without Cascade Pilot.

  C. Cascade Express Profiler can provide network reporting without any other Riverbed Product.

  D. Cascade Pilot (not Cascade Pilot Personal Edition (PE)) requires Cascade Shark appliance in order to analyze packets.

  E. Cascade Sensor can forward NetFlow to multiple Cascade Profilers.

  Correct Answer: BCE

• Question 56:

  What are possible explanations for no Server Delay measurement being reported for a particular flow? (Select 4)

  A. The flow includes the UDP protocol.

  B. The traffic was not reported by a Cascade Sensor or Cascade Shark appliance.

  C. The traffic was not reported by a Steelhead appliance's CascadeFlow

  D. The start time for the connection was prior to the timeframe selected for the traffic query.

  E. The packets involved in the initial setup of the TCP connection were not seen by a Cascade Sensor or Cascade Shark appliance.

  Correct Answer: ABDE

• Question 57:

  On Cascade Profiler, can you run a traffic report that shows all traffic from inside the network to outside the network, but excludes a proxy server?

  A. No, this cannot be done with Cascade.

  B. Set up the query to ask for all hosts between: Hosts "Within" a group "ByInternalHosts: All" (where All is a host grouping containing all inside address space) and for Peers set to "Outside oF. ByInternalHosts:All".

  C. Configure query as B above but also add the Proxy Server to the "Outside" list.

  D. Configure query as B above but also add the Proxy Server as a "not" in the Traffic Expression field. The expression to add would be "not host proxyhost " where proxyhost is the IP Address of the proxy.

  Correct Answer: D

• Question 58:

  Which example, assuming we want the 192.168.1 subnet shown as "Tokyo", shows the correct syntax for setting up this host group under a host group type on Cascade Profiler?

  A. "192.168.1.0/24 Tokyo"

  B. "Tokyo = 192.168.1.0/24"

  C. "192.168.1.0-192.168.1.255 Tokyo"

  D. "192.168.1.0;255.255.255.0 Tokyo"

  Correct Answer: A

• Question 59:

  How does Cascade acquire the Interface Name (ifname) and interface speed (ifspeed) for interfaces reporting to Cascade?

  A. SNMP polling from the Gateway

  B. SNMP polling from the Profiler

  C. SYSLOG

  D. All of the above

  E. None of the above

  Correct Answer: A

• Question 60:

  Where is one place Cascade Profiler can obtain Identity (user) information for use in reporting user activity on a network?

  A. Through Radius Server(s)

  B. From Domain Controller(s)

  C. Through LDAP queries

  D. Via SNMP queries

  Correct Answer: B