201-01 Online Practice Questions and Answers

How do you configure a new user for the Cascade Shark appliance?

A. Select a graphic object in a View chart, and drag a View on the object.

B. Select a graphic object in a View chart, and drag a View on the trace file.

C. Select the View, right-click, and apply it with the filter associated with a graphic object.

D. Right-click in the View chart, and select "Drill-down" to select the View.

What are the primary differences between an Express and Standard Profiler?

A. There is no difference between an Express and Standard Profiler.

B. An Express Profiler has the option only for a built-in Sensor and cannot receive flow data.

C. A Standard Profiler has the option only for a built-in Sensor and cannot receive flow data.

D. An Express Profiler can handle more flows per minute then a Standard Profiler.

E. An Express Profiler has a built in Sensor and Gateway.

Which of the reports for monitoring Services include an Event List including Event IDs of the underlying alerts that were triggered from policy violations?

A. Overall Service Performance Report

B. Service Performance Report

C. Service Incident Report

D. All three of the reports above include an Event List

E. None of the three reports above include an Event List. Only an Event report will generate Event Lists

Host Name Resolution can be modified in Configuration/UI Preferences. What are the three choices that you can select for resolution? (Select 3)

A. Resolve host names using DNS

B. Resolve host names using /etc/hosts

C. Resolve host names for hosts managed by DHCP

D. Suppress DHCP/DNS search domains (ce.lab.nbttech.com,nbttech.com) from resolved hosts

Cascade RADIUS support is for:

A. GUI login UID/PW.

B. SSH login UID/PW.

C. GUI and SSH login UID/PW.

D. User name to IP mapping in reports.

What is the maximum number of flows that can be sent from a remote Cascade device (Sensor/Gateway) to an Cascade Express Profiler?

A. 25,000 flows per minute

B. 50,000 flows per minute

C. As many flows as can be collected from up to 5 other devices

D. 100,000 flows per minute

E. Limited by the Cascade Profiler license limit

Within Cascade Profiler, what best describes an "Application"?

A. An Application is a collection of Host IP Addresses.

B. An Application is a Layer-7 protocol or combination of IP Address and Port.

C. An Application is a list of TCP Port Numbers.

D. An Application is a combination of several Host Group Types.

A list of live interfaces within the Cascade Pilot interface:

A. Appear listed under the devices tab of the sources panel.

B. Appear in the main workspace after selecting "choose an interface" from the main menu.

C. Appear listed under the associated Cascade Shark capture job trace in the sources panel files tab.

D. Must be selected from the "Capture.Interfaces" menu.

Cascade Profiler flow logs can be stored on which of the following?

A. SAN and Local Disk Storage

B. SAN only

C. Local Gateway-Storage

D. Hard Drive and Ethernet or USB-attached NAS

E. Local only

The exhibit includes a portion of the Cascade Pilot interface and shows:

A. Two trace clips, the first has two views applied, the second has one view applied.

B. Two capture job traces, the first has two trace clips associated with it, the second has one trace clip associated with it.

C. Two Cascade Shark appliances, the first has two capture jobs, the second has one capture job.

D. Two packet capture (pcap) files, the first has two trace clips associated with it, the second has one trace clip associated with it.