299-01 Online Practice Questions and Answers

Which of the following configuration changes can be used to reduce the number of alerts generated overall for a Service?

A. Edit each Service policy to increase the Tolerance slider for Low and High alerts.

B. Edit each Service policy and set a noise floor to specify the minimum amount of change that the policy can treat as deviation from normal behavior.

C. Edit the Service and select fewer metrics to monitor for each segment that comprises the Service.

D. Modify the location host group type used for monitoring end user traffic to use fewer groups (for example, Region instead of Site).

E. A, B, C, and D.

F. A and B only.

How do I run a report on Cascade Profiler to show all hosts that have talked to server "192.168.1.100" on TCP port 25?

A. Under the traffic reports Advanced Tab, place "192.168.1.100" in the Host field select "Acting as Server" in the drop down, enter "tcp/25" in the Protocol field and select "Hosts" in the "report-by" pull down.

B. Under the traffic reports Advanced Tab, place "192.168.1.100" in the Host field select "Acting as Server" in the drop down, enter "tcp/25" in the Protocol field and select "Peers Hosts" in the "report- by" pull down.

C. Under the traffic reports Advanced Tab, place "192.168.1.100" in the Host field select "Acting as Client and Server" in the drop down, enter "tcp-25" in the Protocol field and select "Hosts" in the "report-by" pull down.

D. Under the "Quick Reports" pull down from the dashboard page, select "Host" enter the IP Address and hit return.

On Cascade Profiler, in terms of retention of completed reports and reporting sources (one minute flow and rollup files), which of the following is true? (Select 4)

A. One minute flow records are deleted from the file system FIFO (oldest first) once the appliance has filled the space that is allocated.

B. There is a fixed amount of space on the filesystem for completed reports.

C. A report template can be marked "keep until I delete it" so that any reports that are scheduled with this template are not automatically deleted from the filesystem.

D. When the flows or rollup records have been deleted from the filesystem, any saved report that was generated from those flow sources is no longer available.

E. Users have the ability to allocate additional space to the 1 min flow logs in order to increase retention. This is done at the expense of other rollup resolutions.

What are the sources of Layer7 Fingerprints as shown in the Cascade Profiler GUI? (Select 4)

A. from the Cascade Sensor

B. NetFlow

C. NBAR

D. Packeteer

E. User Defined

F. Enhanced sFlow

What information is required to configure the Switch Port Discovery feature in the Cascade Profiler? (Select 2)

A. Periodically imported DHCP lease records

B. IP address of the outermost switches

C. IP address of the lookup router

D. IP address of mitigation router

On Cascade Profiler, Active Directory user names and login information are obtained via the Active Directory Connector from:

A. On demand queries to the AD server(s)

B. A10 networks ID Series appliance

C. Active Directory audit logs

D. RADIUS

Cascade Profiler is able to report traffic using two different approaches (centricities). Two approaches can result in different results when using the same report criteria due to the way data is aggregated and counted. What are these two approaches? (Select 2)

A. Interface centric

B. Application centric

C. Host centric

D. Port centric

E. The Cascade Profiler does not have two approaches

Which of the following will show a list of all NetFlow sources sending data to the Cascade system?

A. The Network Operations Dashboard

B. The "Interface Information" Report available from the "Reports->Shortcuts" page

C. The "System > Information" page

D. The "System > Devices/Interfaces" page

Which of the following statements are true? (Select 3)

A. Cascade Standard Profiler can provide network reporting without any other Cascade component IF there are Steelhead appliances reporting to it.

B. Cascade Shark appliance can provide/export pcap files without Cascade Pilot.

C. Cascade Express Profiler can provide network reporting without any other Riverbed Product.

D. Cascade Pilot (not Cascade Pilot Personal Edition (PE)) requires Cascade Shark appliance in order to analyze packets.

E. Cascade Sensor can forward NetFlow to multiple Cascade Profilers.

When a Profiler or Enterprise Profiler receives flow over its licensed capacity what happens?

A. Profiler/Enterprise Profiler is entered into ICE (In Case of Emergency) mode to add 20% flow capacity. A total of 6 hours in ICE is licensed by default.

B. This limit is alarmed but flow capture is maintained until %110 of capacity is reached.

C. Flows over the flow limit are dropped.

D. Only source, destination, and total bites are entered into the database for over limit flows.