Riverbed 201-01 Riverbed Certified Solutions Associate - Network Performance Management Exam Practice Test

Cascade Shark interfaces and captures job traces appear under the devices tab within the sources panel.

Cascade Shark interfaces appear under the devices tab of the sources panel AND Cascade Shark capture job traces appear under the files tab of the sources panel.

Cascade Shark interfaces and captures job traces appear in the views panel.

Cascade Shark interfaces must be selected from the home menu to begin a capture.

Identity integration to identify which users are logged into which client machines.

Integration with synthetic transaction tools to obtain response time information.

A fully functional CLI that is easier to use than a Web based GUI.

A Web based GUI that does not require a password or HTTPS connection allowing for easier connection.

By importing a display or capture filter from Wireshark.

By saving the filter applied in a View.

Only when you are connected to a Cascade Shark.

Only before applying a View.

25,000 flows per minute

50,000 flows per minute

75,000 flows per minute

100,000 flows per minute

Ability to view link usage over the last few months for capacity planning purposes.

Ability to consolidate and view all Steelhead and Router configurations across the network.

Ability to view applications and protocols used across the enterprise.

Ability to view WAN use by top hosts, top servers, top application, top ports, top protocols, and QOS markings.

Sensor

Express

Shark

Gateway

Gateway-VE

TCP sessions are easily determined as completed through the existence of flags included; this isn’t true for UDP sessions

UDP sessions are easily determined as completed through the existence of flags included; this isn’t true for TCP sessions

Both TCP and UDP sessions are easily determined as completed through the existence of flags included

Neither TCP nor UDP sessions can be determined as completed unless 20 minutes has passed since the last packet is observed

MTU size changes can be used to determine that a session is complete for either TCP or UDP

They are cached for later processing.

They are ignored/dropped.

The user is able to choose which flows to keep and which to ignore.

All flows are processed but an alert is sent to the user.

No additional value, deployed only as a necessity when NetFlow is not available.

The Sensor adds synthetic transactions to track response time.

The Sensor adds trace-route capability to map out Application paths.

The Sensor adds Application identification and Response time metrics for TCP sessions.

A time selection on a trace file.

A time selection on a Capture Job.

A selection of packets stored for a Capture Job.

A copy of packets stored for a Capture Job.

Business Groups

Web Applications

Defined Applications

Server Applications

When one host on the network attaches to a network printer-scanner device and is able to exploit the printer-scanner to download all material scanned on the device.

When one host on the network is infected with malware and the malware scans all of the files resident on the infected system looking for exploits.

When several hosts on the network send a high volume of traffic to a single host to try to exhaust the resources of the host.

When one host on the network send ping packets or other packet types to multiple other devices on the network to determine which hosts are available for further exploit.

You must run only a single version of the AD connector program.

Install the AD Connector 1.5 on all domain controllers.

Install the appropriate version of the AD Connector on each domain controller.

Install the AD Connector v2.0 on all domain controllers.

Install the AD Connector v2.0 on an Event Collector host.

HTML: For defining labels, hyperlinks, and other HTML-based text

Static Image: For defining an uploaded image

URL Image: For defining an image from a URL

All of the above

BGP

Windows Messenger

SMTP

IM

Skype

Every 15 seconds

Every 15 minutes

Every 5 minutes

Every 1 minute

Every 1 hour

the same encryption strength and protocol selected for sending data from Gateways and Sensors to Profiler.

always 256bit AES, accept for international customers who are not eligible for encryption.

Cascade does not encrypt data while at rest.

Configurable under Definitions ? Encryption.

admin/admin

root/sharkappliance

root/root

root/riverbed

admin/cacetech

Fault Management

Application Performance Management (APM)

Network Behavior Analysis (NBA)

Flow based Network Monitoring and Analysis

An optional module that is licensed separately and not available in the Cascade Pilot Personal Edition (PE) product.

A module that automatically generates expert reports of traffic selection in PDF format.

The source of packet traffic – either a device or a packet capture file.

Network traffic analysis displays that can be applied to traffic.

MAC address of the host

IP address of the host

Port number

IP protocol

Application name

User name

Cascade will de-duplicate/Coalesce data from all sources, both flow and sensor data. Other vendors have you look at each source’s data separately

Cascade Profiler will provide nanosecond granularity from flow data to detect micro-bursts.

Cascade can also accept SNMP traps from other devices.

Cascade integrates with sflow but not NetFlow.

If both the trace clip and View support indexing.

If the trace clip is not indexed and the View does not support indexing.

Any time you like.

If the capture job is running.

HTTP over TCP/80 and HTTPS over TCP/445

HTTP over TCP/80 and HTTPS over TCP/443

HTTP over TCP/443 and HTTPS over TCP/80

HTTP over TCP/445 and HTTPS over TCP/80

HTTP over TCP/88 and HTTP over TCP/444

From Desktop Console

Pressing the power button

From Command-Line Interface

From Webui

You can track, report and alert on organizationally meaningful categories of traffic

To control access to Cascade data

To quickly quarantine hosts affected by a virus

To increase the scalability of the Cascade database

To view the traffic of many hosts from multiple perspectives

A packet capture (pcap) file that is open on the local file system for analysis by Cascade Pilot.

A packet capture (pcap) file that is exported on to the Cascade Shark OS disk for analysis by Cascade Pilot.

A capture job that is suspended or stopped.

A time filter into a job trace.

User

Port/Group

Interface/Device

Applications

QoS

All the above

Two trace clips, the first has two views applied, the second has one view applied.

Two capture job traces, the first has two trace clips associated with it, the second has one trace clip associated with it.

Two Cascade Shark appliances, the first has two capture jobs, the second has one capture job.

Two packet capture (pcap) files, the first has two trace clips associated with it, the second has one trace clip associated with it.

TRUE

FALSE

WAN optimization, WAN shaping, QoS Policy enforcement

WAN management, Application Performance, Data Center management

Reporting, Asset Inventory, Ticketing

SNMP Trap collection, Log consolidation, Correlation

ARP

ICMP

UDP

TCP

AppleTalk

Ethernet

Know the time span analyzed by the View.

Want to change the time selection covered by the View.

Change the resolution of a strip chart.

Analyze more than one trace file.

User-Defined Policies are used only to compare current traffic against fixed values while other policies may allow you to compare traffic against both fixed values and a baseline, depending on the type of policy.

User-Defined Policies can be used to compare current traffic against a baseline of traffic built over the past several days, weeks, and months, while other policies compare current traffic against fixed values only.

User-Defined Policies allow you to set a minimum amount that a policy must change by before an alert will be created, whereas other policies do not.

There are no specific differences between User-Defined Policies and other policies, except the names of the policies.

250GB

500GB

750GB

1TB