299-01 Riverbed Certified Solutions Professional - Network Performance Management Questions and Answers

Allow user defined policies the ability to dynamically re-configure host IP parameters when the host triggers an event.

Obtain an IP address on the Management interface on initial power-up.

Obtain an IP address on the Auxiliary interface on initial power-up.

Obtain host MAC address.

A, B, C.

echo "delete from hostinfo where ipaddr = '10.63.32.0/24';" | psql mazu postgres

Edit the Definition and remove the entry for 10.63.32.0/24 Bracknell_UK

echo "delete from hostinfo where group = 'Bracknell_UK;" | psql mazu postgres write_community_string

Go to Host Groups and insert " #10.63.32.0/24 Bracknell_UK"

80/tcp

8080/tcp

8090/tcp

443/tcp

22/tcp

Run Automatic grouping for all group types.

Configure an Undefined group type with definition 0.0.0.0/0; confirm there are no entries when you 'view members' of this 'Undefined' group'.

There is no way to do this and successfully capture all the IP addresses.

Configure an Undefined group type with definition 0.0.0.0/32.

Run a report by hosts and look for undefined groups.

Traffic between Virtual machines is not switched; it is routed by the standard vRouter included with ESXi

A standard or distributed vSwitch which comes with ESXi must be used, there is not 3rd party software available

A 3rd party virtual switch is required such as the CISCO Nexus 1000v as no standard vSwitch exists with ESXi

The included standard vSwitch of the CISCO Nexus 7000

The included standard vSwitch or the CISCO Nexus 1000v

At least one NetFlow sources (router, switch, or steelhead).

At least one lookup router and at least one access tier switch.

A Vulnerability Scanner and a Netflow source (router, switch, or steelhead).

A Vulnerability Scanner and an External Link.

Unlimited

Ten

Four

Twenty

from the Cascade Sensor

NetFlow

NBAR

Packeteer

User Defined

Enhanced sFlow

No.

Yes, you can do this with the "ARIN" lookup in "external links". The customer can also add additional external links if they have other sites they use to look up IP Addresses.

This is available as a column in any report that displays the IP Address.

This is available under IP Host Group Type.

Save a time window to a trace file for post-capture analysis.

Save a time window and apply Views to analyze a portion of a Capture Job.

Analyze an indexed capture job with Views that support indexing.

Clip a trace file to your desktop.

One minute flow records are deleted from the file system FIFO (oldest first) once the appliance has filled the space that is allocated.

There is a fixed amount of space on the filesystem for completed reports.

A report template can be marked "keep until I delete it" so that any reports that are scheduled with this template are not automatically deleted from the filesystem.

When the flows or rollup records have been deleted from the filesystem, any saved report that was generated from those flow sources is no longer available.

Users have the ability to allocate additional space to the 1 min flow logs in order to increase retention. This is done at the expense of other rollup resolutions.

10.0.0.0/23 United_States

0.0.0.0/0.0.0.0 Worldwide

24.32.8.43/32 CEO_Printer

192.168.0.5/255.0.255.0 Printers

10.38.14.1/255.255.255.255 My Computer

Under the traffic reports Advanced Tab, place "192.168.1.100" in the Host field – select "Acting as Server" in the drop down, enter "tcp/25" in the Protocol field and select "Hosts" in the "report-by" pull down.

Under the traffic reports Advanced Tab, place "192.168.1.100" in the Host field – select "Acting as Server" in the drop down, enter "tcp/25" in the Protocol field and select "Peers Hosts" in the "report-by" pull down.

Under the traffic reports Advanced Tab, place "192.168.1.100" in the Host field – select "Acting as Client and Server" in the drop down, enter "tcp-25" in the Protocol field and select "Hosts" in the "report-by" pull down.

Under the "Quick Reports" pull down from the dashboard page, select "Host" enter the IP Address and hit return.

SNMP traps from the switches and routers

NetFlow v9

SNMP polling of the switches and routers

All of the above

None of the above

Ask Riverbed Support to send you the proper View to use.

Open the View folders in Cascade Pilot to look for a View named "Round-trip time".

Use the View search box and enter "round".

Use the Help menu and search for round.

Performance and Availability

TCP Health

VoIP

Security

Health

User-defined Policy

The flow includes the UDP protocol.

The traffic was not reported by a Cascade Sensor or Cascade Shark appliance.

The traffic was not reported by a Steelhead appliance's CascadeFlow

The start time for the connection was prior to the timeframe selected for the traffic query.

The packets involved in the initial setup of the TCP connection were not seen by a Cascade Sensor or Cascade Shark appliance.

v1 and v5

v7

v9

all of the above

none of the above

It obtains L2 retransmissions from switches and routers via SNMP.

It obtains TCP retransmissions by tracking TCP sessions via the Cascade Sensor.

Cascade does not track retransmissions.

Cascade obtains retransmissions from NetFlow and/or sFlow marked with the TCP push flag.

End time of Flow

Source MAC address

Layer 4 Protocol Type

TCP Checksum Validation Result

No, you cannot do this.

Yes, either within the same Group Type, or across Group Types.

Yes, but only if the Host Groups are in different Group Types.

Yes, but only in the ByFunction Group Type.

Yes, but only in the ByLocation Group Type.

Each URL that is seen by the Sensor is shown on the dashboard or searchable via reporting.

Customer defined URL's are mapped to an application name which can then be shown on the dashboard, searched via reporting, or used in Analytic definitions.

URL's are tracked by either a Cascade Sensor or via NetFlow version 5 (or higher) export.

Cascade does not track URL's.

Enabled

Disabled

Set to retain up to 1 week or 10GB of indexing/trending data

Set to retain up to 1 week or 10GB of packets

Set to keep the indexing/trending data indefinitely

10.0.0.0/255.255.255.255

0.0.0.1/255.0.0.0

10.0.0.1/255.255.0.255

10.0.0.0/255.0.255.0

10.0.0.1/255.0.0.255

RTT

Server delay

Response time

Server delay relative to Network RTT

Number of active connections

A service segment is the update time period when devices send Netflow to Cascade Gateways.

A service segment is defined by its components and the applications and/or ports in use between them.

A service segment is defined as the front-end tier that directly services end users with an application.

A service segment is the update time period when Cascade Sensors send MNMP Flow to Cascade Profilers.

Active Directory information for successful/failed login association to IPs

DHCP for host IP to MAC address association.

SNMP polling to routers, switches, and servers for CPU information.

SNMP trap data from routers, switches, and servers for security events.

SNMP polling to routers and switches for MAC address and physical switch port association.

The numerical order of the interfaces from right to left in the network device chassis.

The SNMP index number of device interfaces where a poll has not yet been performed.

The numerical order of the interfaces from left to right in the network device chassis.

The SNMP index number of device interfaces where a poll has been performed.

The Analytics license is required to generate traffic report.

The Analytics license is required to generate network operation dashboard.

The Analytics license is required to connect CMDB system.

The analytics license is required for the analytics defined as part of a service to begin the initialization process.

Per each capture job

Per each trace clip

Per each capture port

Per each capture board/aggregating port

Per each Cascade Shark appliance

Traffic is being sent across the router's interfaces configured for flow export.

There are no firewalls blocking communication between router and Cascade Gateway.

There are no firewalls blocking communication between Cascade Gateway and Cascade Profiler.

The port being used for export on the router matches that which has been configured on the Cascade Gateway.

All of the above.

1

2

3

4

5

SNMP polling from the Gateway

SNMP polling from the Profiler

SYSLOG

All of the above

None of the above