Riverbed 299-01 Online Practice Questions and Exam Preparation

Riverbed 299-01 Online Questions & Answers

• Question 51:

  In a Cascade deployment with Sensor and Profiler, what information does the Application Performance Policy report show? (Select 4)

  A. Number of connections per second
  B. Average response time
  C. TCP resets
  D. TCP retransmission
  E. Number of jumbo frames
  F. CPU and memory utilization of server
  A. Number of connections per second
  B. Average response time
  C. TCP resets
  D. TCP retransmission

• Question 52:

  The Cascade Shark de-duplication mode should be used:

  A. To de-duplicate duplicate flows sent to the Cascade Profiler appliance caused by the way different Cascade Shark ports may see the same UDP/TCP sessions.
  B. To de-duplicate duplicate flows sent to the Cascade Profiler appliance caused by use of the Aggregating Port seeing the same UDP/TCP sessions.
  C. To de-duplicate duplicate packets that may be collected by the Cascade Shark caused by the way Port Mirroring is configured on a switch.
  D. To de-duplicate duplicate packets that may be collected by the Cascade Shark caused by the way filtering is used on a capture job.
  E. All of the above
  C. To de-duplicate duplicate packets that may be collected by the Cascade Shark caused by the way Port Mirroring is configured on a switch.

• Question 53:

  Refer to the Exhibit.

  

  For a user defined host policy on Cascade Profiler, what would trigger this policy to generate an alert?

  A. Any traffic using application "X" or port range "Y"
  B. Any internal-only traffic using application "X" or port range "Y"
  C. Any internal-only traffic using application "X" and port range "Y"
  D. Any traffic between internal and external hosts using application "X" or port range "Y"
  E. Any traffic between internal and external hosts using application "X" and port range "Y"
  F. Any traffic from internal clients to external servers using application "X" or port range "Y"
  G. Any traffic from internal clients to external servers using application "X" and port range "Y"
  G. Any traffic from internal clients to external servers using application "X" and port range "Y"

• Question 54:

  What is the maximum number of custom applications (Layer 4 and 7 combined) permitted to be defined on a single Cascade Profiler?

  A. 50
  B. 75
  C. 100
  D. 125
  E. Unlimited
  C. 100

• Question 55:

  Which example, assuming we want the 192.168.1 subnet shown as "Tokyo", shows the correct syntax for setting up this host group under a host group type on Cascade Profiler?

  A. "192.168.1.0/24 Tokyo"
  B. "Tokyo = 192.168.1.0/24"
  C. "192.168.1.0-192.168.1.255 Tokyo"
  D. "192.168.1.0;255.255.255.0 Tokyo"
  A. "192.168.1.0/24 Tokyo"

• Question 56:

  In order for the Cascade solution to track an application based on its fingerprint, data can be used from which devices? (Select 3)

  A. Packeteer Device
  B. Cascade Gateway
  C. Cascade Sensor
  D. Cisco NBAR device
  A. Packeteer Device
  C. Cascade Sensor
  D. Cisco NBAR device

• Question 57:

  Filtering in Cascade Pilot: (Select 2)

  A. Is either a BPF or Wireshark Display filter only.
  B. Can be created from a chart.
  C. Can be changed after applying a View.
  D. Is the equivalent of the Wireshark "display filter input".
  B. Can be created from a chart.
  C. Can be changed after applying a View.

• Question 58:

  In Cascade, how are custom Layer 7 applications configured?

  A. On the Sensor, you must define either a hex string, text string, or URL.
  B. On the Profiler, you must define either a hex string, text string, or URL.
  C. On the Gateway, you must define either a hex string, text string, or URL.
  D. You have to first enable security analytics on the Profiler, then you define either a string or URL on either the Profiler or the Sensor.
  E. Custom applications cannot be defined, but the Sensor can identify most off-the-shelf programs.
  B. On the Profiler, you must define either a hex string, text string, or URL.

• Question 59:

  What are the sources of Layer7 Fingerprints as shown in the Cascade Profiler GUI? (Select 4)

  A. from the Cascade Sensor
  B. NetFlow
  C. NBAR
  D. Packeteer
  E. User Defined
  F. Enhanced sFlow
  A. from the Cascade Sensor
  C. NBAR
  D. Packeteer
  E. User Defined

• Question 60:

  A packet capture (pcap) file that is loaded into Cascade Pilot for the first time is indexed:

  A. When the file is opened in Cascade Pilot for analysis.
  B. When the file is imported into Cascade Pilot for analysis.
  C. When the first view is applied to the file.
  D. When "Add Trend Index" is selected from a right-click menu within Cascade Pilot.
  E. When the file is copied onto a Cascade Shark appliance.
  D. When "Add Trend Index" is selected from a right-click menu within Cascade Pilot.