New Year Special Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: 70special

Examstrust Logo
examstrust mcafee
  1. Home
  2. Riverbed
  3. RCSP-NPM
  4. 299-01 - Riverbed Certified Solutions Professional - Network Performance Management

Riverbed 299-01 Riverbed Certified Solutions Professional - Network Performance Management Exam Practice Test

Page: 1 / 25
Total 245 questions
Get 299-01 Full Access Download 299-01 PDF

Riverbed Certified Solutions Professional - Network Performance Management Questions and Answers

Testing Engine

  • Product Type: Testing Engine
$37.5  $124.99
Add to Cart

PDF + Testing Engine

  • Product Type: PDF + Testing Engine
$52.5  $174.99
Add to Cart

PDF Study Guide

  • Product Type: PDF Study Guide
$33  $109.99
Add to Cart
Question 1

The Cascade Profiler account roles arE. (Select 5)

Options:

A.

Administrator

B.

Operator

C.

Monitor

D.

Dashboard Viewer

E.

dbadmin

F.

Event Viewer

Question 2

Cascade Profiler is able to report traffic using two different approaches (centricities). Two approaches can result in different results when using the same report criteria due to the way data is aggregated and counted. What are these two approaches? (Select 2)

Options:

A.

Interface centric

B.

Application centric

C.

Host centric

D.

Port centric

E.

The Cascade Profiler does not have two approaches

Question 3

How does Cascade acquire the Interface Name (ifname) and interface speed (ifspeed) for interfaces reporting to Cascade?

Options:

A.

SNMP polling from the Gateway

B.

SNMP polling from the Profiler

C.

SYSLOG

D.

All of the above

E.

None of the above

Question 4

For Service policies that get applied to End User segments, by default separate policies are tracked by location for the client traffic. Which of the following is NOT true regarding flexibility in configuration of these End User segments?

Options:

A.

The default hostgroup type used can be changed from Configuration > General Settings.

B.

Different hostgroup types can be used for monitoring End User segments for each Service.

C.

While editing the Service one has the capability to select all sites or a subset of sites to include for monitoring.

D.

When adding a Service Health by Location widget to a dashboard, one has the capability to include all locations or a subset (maximum of 10).

E.

The default hostgroup type used for monitoring End User segments is ByLocation.

Question 5

When sending data from a Gateway or Sensor to a Profiler which ports must be opened between the devices? (Select 3)

Options:

A.

tcp/8443

B.

udp/123

C.

tcp/41017

D.

tcp/42999

E.

tcp/123

Question 6

Can the same IP Address exist in Multiple Host Groups on Cascade Profiler?

Options:

A.

No, you cannot do this.

B.

Yes, either within the same Group Type, or across Group Types.

C.

Yes, but only if the Host Groups are in different Group Types.

D.

Yes, but only in the ByFunction Group Type.

E.

Yes, but only in the ByLocation Group Type.

Question 7

What versions of NetFlow export the TCP flags?

Options:

A.

v5 & v9

B.

v1

C.

v7 & v8

D.

All of the above

E.

None of the above

Question 8

What types of Layer-7 Application Signatures are available within the Cascade Profiler GUI? (Select 3)

Options:

A.

By URL

B.

By Regular Expression

C.

By Packet Start offset

D.

By ASCII String

E.

By Hex String

F.

By Error Code Type

Question 9

For a TCP conversation that is non-optimized but being reported by a branch Steelhead appliance, the data center Steelhead appliance, and a data center Cascade Shark appliance, how is the Network RTT calculated?"

Options:

A.

The network setup (time between SYN to 1st ACK) is added together across the three segments: client to branch Steelhead appliance, branch Steelhead to DC Steelhead appliance, DC Steelhead appliance to the Server.

B.

The Server Delay time minus the Client Delay time.

C.

The top talker (server) that has sent the most data.

D.

The network setup time reported by the Cascade Shark appliance, which is the time between the reported client-->server SYN and the 1st client-->server ACK.

Question 10

What is the maximum number of Cascade Profilers that can be configured in the Cascade Shark appliance as receivers of flows?

Options:

A.

1

B.

2

C.

3

D.

4

E.

Unlimited

Question 11

Which of the following will show a list of all NetFlow sources sending data to the Cascade system?

Options:

A.

The Network Operations Dashboard

B.

The "Interface Information" Report available from the "Reports->Shortcuts" page

C.

The "System > Information" page

D.

The "System > Devices/Interfaces" page

Question 12

On Cascade Profiler, can you run a traffic report that shows all traffic from inside the network to outside the network, but excludes a proxy server?

Options:

A.

No, this cannot be done with Cascade.

B.

Set up the query to ask for all hosts between: Hosts "Within" a group "ByInternalHosts: All" (where All is a host grouping containing all inside address space) and for Peers set to "Outside oF. ByInternalHosts:All".

C.

Configure query as B above but also add the Proxy Server to the "Outside" list.

D.

Configure query as B above but also add the Proxy Server as a "not" in the Traffic Expression field. The expression to add would be "not host proxyhost " where proxyhost is the IP Address of the proxy.

Question 13

What methodologies does the Cascade Profiler use to display MAC address information along with other host information?

Options:

A.

Import DHCP lease files or SNMP polling of switches.

B.

Manually enter MAC address information via the user interface.

C.

The Cascade Profiler cannot display MAC address information.

D.

This information is received via sFlow and/or NetFlow.

E.

MAC address information is stored as part of the information received from Cascade Sensors and Regional Gateways.

Question 14

Which of the following is false in regards to Cascade Profiler reporting and alerting? (Select 2)

Options:

A.

Any dependency (connection graph) can be exported to SVG (Visio) format.

B.

Reports are real time and can not be scheduled.

C.

Reports can be sent via PDF, HTML, CSV, or DOC format.

D.

Events can be sent via email or SNMP v1 or v3 traps.

E.

Events can be sent to both an email list AND SNMP target.

Question 15

Which of the following does the Cascade Sensor device provide that the Cascade Sensor-VE does not? (Select 2)

Options:

A.

Layer-7 Application Fingerprinting

B.

Connection Duration Statistics

C.

Riverbed RiOS Integration

D.

Rotating Packet Log

Question 16

In Cascade Profiler, which of the following is available as a Dashboard content block? (Select 3)

Options:

A.

Top Hosts

B.

Top URLs

C.

Watched Interfaces

D.

Current Events

Question 17

Cascade Profiler Dashboard can be configured to show: (Select 3)

Options:

A.

The top applications for the previous week.

B.

Only the IPs that a user is authorized to see.

C.

Bandwidth for a host group over the previous day.

D.

Bandwidth for interfaces from devices NOT sending flow data.

E.

Connections for interfaces from devices sending flow data.

Question 18

In the Cascade Profiler Dashboard GUI, which formats are available for Watched item content blocks? (Select 5)

Options:

A.

Line Graphs

B.

Stacked Area Graphs

C.

Pie Charts

D.

Bar charts

E.

Connection Graphs

F.

Tables

Question 19

How do I run a report on Cascade Profiler to show all hosts that have talked to server "192.168.1.100" on TCP port 25?

Options:

A.

Under the traffic reports Advanced Tab, place "192.168.1.100" in the Host field – select "Acting as Server" in the drop down, enter "tcp/25" in the Protocol field and select "Hosts" in the "report-by" pull down.

B.

Under the traffic reports Advanced Tab, place "192.168.1.100" in the Host field – select "Acting as Server" in the drop down, enter "tcp/25" in the Protocol field and select "Peers Hosts" in the "report-by" pull down.

C.

Under the traffic reports Advanced Tab, place "192.168.1.100" in the Host field – select "Acting as Client and Server" in the drop down, enter "tcp-25" in the Protocol field and select "Hosts" in the "report-by" pull down.

D.

Under the "Quick Reports" pull down from the dashboard page, select "Host" enter the IP Address and hit return.

Question 20

Within the Cascade Pilot GUI, filtered items are often indicated:

Options:

A.

With red text.

B.

With yellow text.

C.

With a funnel icon.

D.

With a hash-mark icon.

Question 21

What are the sources of Layer7 Fingerprints as shown in the Cascade Profiler GUI? (Select 4)

Options:

A.

from the Cascade Sensor

B.

NetFlow

C.

NBAR

D.

Packeteer

E.

User Defined

F.

Enhanced sFlow

Question 22

Which of the following are TRUE concerning packet capture jobs on the Cascade Shark appliancE. (Select 4)

Options:

A.

Packets can be captured from multiple capture ports on one Cascade Shark appliance.

B.

The maximum length the packet data can be specified.

C.

Packets can be filtered on host IP addresses.

D.

SSL traffic can be decoded if the appropriate certificate are loaded in the Cascade Shark appliance.

E.

The maximum storage bandwidth for the job can be specified in bits/sec.

F.

Multiple packet capture jobs can run concurrently.

Question 23

Which of the following capabilities are supported by the Cascade Sensor appliance but are not supported by the Cascade Sensor-VE RSP packagE. (Select 2)

Options:

A.

Network Round Trip measurement

B.

Packet logging

C.

Server Delay measurement

D.

Connection Throughput measurement

E.

Retransmission measurement

F.

L7 application fingerprint checking

Question 24

On Cascade Profiler, in terms of retention of completed reports and reporting sources (one minute flow and rollup files), which of the following is true? (Select 4)

Options:

A.

One minute flow records are deleted from the file system FIFO (oldest first) once the appliance has filled the space that is allocated.

B.

There is a fixed amount of space on the filesystem for completed reports.

C.

A report template can be marked "keep until I delete it" so that any reports that are scheduled with this template are not automatically deleted from the filesystem.

D.

When the flows or rollup records have been deleted from the filesystem, any saved report that was generated from those flow sources is no longer available.

E.

Users have the ability to allocate additional space to the 1 min flow logs in order to increase retention. This is done at the expense of other rollup resolutions.

Question 25

Cascade Profiler is reporting the traffic on Steelhead optimized flows separately than the connections on tcp/7800 between two Steelheads. In other words, from Cascade you see flows for traffic on various ports used natively by the clients and servers across the steelhead as well as flows for tcp/7800. What does this indicate?

Options:

A.

This is normal in optimization environments and provides the proper reporting of traffic volume between locations.

B.

This indicates that Flow data is being reported on the optimized connection, between Steelheads and has no impact on reporting.

C.

This indicates that Flow data is being reported on the optimized connection, between Steelheads and can lead to Cascade double-counting volumes between locations.

D.

This cannot happen.

Question 26

A system administrator needs to update their Cascade Profiler host group settings to remove references to a decommissioned office on the 10.63.32.0/24 subnet.

What is the best way to do this?

Options:

A.

echo "delete from hostinfo where ipaddr = '10.63.32.0/24';" | psql mazu postgres

B.

Edit the Definition and remove the entry for 10.63.32.0/24 Bracknell_UK

C.

echo "delete from hostinfo where group = 'Bracknell_UK;" | psql mazu postgres write_community_string

D.

Go to Host Groups and insert " #10.63.32.0/24 Bracknell_UK"

Question 27

The default group type for all Security Policies is:

Options:

A.

Application_Servers

B.

ByFunction

C.

ByLocation

D.

Automatic

Question 28

If a report table on Cascade Profiler includes the "Server Delay" column but shows no value for "Server Delay" in some cells, what are the possible causes? (Select 3)

Options:

A.

The time span of the report does not cover any connection set-up points

B.

Server delay is zero.

C.

The protocol used by the application in not TCP-based.

D.

Application traffic was not seen by a Cascade Sensor.

E.

The server plug-in is needed to measure "Server Delay" and not functioning correctly.

Question 29

Why should all flow exporting devices use the same NTP (Network Time Protocol ) source?

Options:

A.

Ensures Cascade is able to recreate the packets.

B.

Essential for the flow de-duplication process.

C.

Ensures the flow is delivered to the correct Gateway.

D.

All of the above.

E.

None of the above.

Question 30

Technologies used for switching traffic between Virtual Machines under ESXi include:

Options:

A.

Traffic between Virtual machines is not switched; it is routed by the standard vRouter included with ESXi

B.

A standard or distributed vSwitch which comes with ESXi must be used, there is not 3rd party software available

C.

A 3rd party virtual switch is required such as the CISCO Nexus 1000v as no standard vSwitch exists with ESXi

D.

The included standard vSwitch of the CISCO Nexus 7000

E.

The included standard vSwitch or the CISCO Nexus 1000v

Question 31

When defining a service which of the following are supported ways of aggregating the results? (Select 2)

Options:

A.

Client Ports

B.

Applications

C.

Ports

D.

Server

Question 32

Which of the following are valid syntax for host group definitions on Cascade Profiler? (Select 2)

Options:

A.

192.168.66.* Web Servers

B.

192.168.0.100/255.255.0.255 Database_Servers

C.

192.168.14.0/24 Mail_Servers

D.

192.168.*.* Boston

Question 33

What mechanism does Cascade Profiler use to identify the switch port a host is attached to and the hosts associated MAC address?

Options:

A.

SNMP traps from the switches and routers

B.

NetFlow v9

C.

SNMP polling of the switches and routers

D.

All of the above

E.

None of the above

Question 34

Which of the following is a valid group definition on Cascade Profiler? (Select 4)

Options:

A.

10.0.0.0/23 United_States

B.

0.0.0.0/0.0.0.0 Worldwide

C.

24.32.8.43/32 CEO_Printer

D.

192.168.0.5/255.0.255.0 Printers

E.

10.38.14.1/255.255.255.255 My Computer

Question 35

What are the two types of dashboards available within the Cascade Profiler GUI? (select 2)

Options:

A.

Top Hosts

B.

Top Applications

C.

Public

D.

Private

E.

Devices and Interfaces Utilization

Question 36

Simple Network Management Protocol can be used on Cascade Profiler for:

Options:

A.

Accessing the Cascade Profiler's MIB by third-party applications for monitoring.

B.

Obtaining interface information from routers.

C.

Obtaining host MAC address information from switches.

D.

Obtaining network device status through the Cascade Profiler receiving SNMP traps.

E.

A, B, and D.

Load More 299-01 Questions
Page: 1 / 25
Total 245 questions
Get 299-01 Full Access Download 299-01 PDF