299-01 Online Practice Questions and Answers

What is a good way to know whether all internal IP addresses seen by the Cascade Profiler have been grouped in a particular group type?

A. Run Automatic grouping for all group types.

B. Configure an Undefined group type with definition 0.0.0.0/0; confirm there are no entries when you 'view members' of this 'Undefined' group'.

C. There is no way to do this and successfully capture all the IP addresses.

D. Configure an Undefined group type with definition 0.0.0.0/32.

E. Run a report by hosts and look for undefined groups.

In this scenario, you have created a host group called My_Computers on Cascade Profiler. In that group you have included the subnet 192.168.1.0/25. You have 10 devices in that group 192.168.1.1-10. The rest of the addresses are unused. While running reports on this segment of the network you notice that when a report is run using the entire subnet you see traffic destined for 192.168.1.120. When you run the same report specifying the host group the traffic does not appear. Why is this happening?

A. 192.168.1.120 is not in the 192.168.1.0/25 subnet

B. 192.168.1.120 has been input as a trusted host in a security policy

C. Traffic to 192.168.1.120 was not picked up by a Sensor

D. Traffic to 192.168.1.120 was not picked up by a Gateway

E. 192.168.1.120 never sent any traffic

In defining a user defined policy on Cascade Profiler that triggers when the aggregate connection rate from any internal host to all external hosts exceeds a certain threshold, one has entered "within internal" for host/group A and "outside internal" for host/group B. How should the statistics be tracked for host/group A and B?

A. host/group A "Track in aggregate" host/group B "track per host".

B. host/group A "track per host" host/group B "track in aggregate".

C. host/group A "track in aggregate" host/group B "track in aggregate".

D. host/group A "track per user" host/group B "track per user".

E. a user defined policy cannot support this scenario because it involves tracking traffic to external hosts.

Which parameters can be used to set up an Application Performance analytic on Cascade Profiler?

A. Applications, Ports/Protocols, QOS, Servers, Clients

B. Ports/Protocols, QOS, Servers, Clients

C. Applications, Ports/Protocols,

D. Applications, Ports/Protocols, QOS, Servers, Clients, Interfaces

What best describes the Rebalance and Reallocate buttons on the Configuration/Flow Log page of the Cascade Profiler? (Select 2)

A. Rebalance moves flows among analysers in a Cascade Enterprise Profiler.

B. Reallocate varies the storage space dedicated for templates and saved reports.

C. Rebalance optimizes the use of the allocated space that allows you to get a longer retention time out of the same amount of disk space.

D. Reallocate allows the users to decide the percent of total disk storage capacity that is allocated to the various flow logs.

E. Rebalancing and Reallocating must be done simultaneously.

How many signatures can a Layer-7 Fingerprint have?

A. 1

B. 2

C. 5

D. 8

E. 10

How are trace clips created in Cascade Pilot? (Select 2)

A. Select a Capture Job, right-click, and select "Create Trace Clip".

B. Drag a bar from a Bar Chart to the Capture Job.

C. Click the + button in the Capture Job item and select a time window.

D. Select a time window and apply a Cascade Pilot filter.

Which of the following are true about Trend/Index data on a Cascade Shark appliancE. (Select 3)

A. Allows Cascade Pilot to load views that take advantage of the Index more quickly.

B. Includes the number of bytes and packets for each conversation seen by the Cascade Shark appliance.

C. It is configured on a per-port basis.

D. It is configured using the sa-wizard as part of the initial configuration.

E. It is enabled by default per capture job.

Which of the following are true about creating a capture job on Cascade Shark: (Select 3)

A. A single capture port can be specified.

B. Any combination of capture ports can be specified.

C. All capture ports on the Cascade Shark can be specified.

D. Trend/Index data has a default retention of seven days.

E. There is no Trend/Index data by default, it is recommended to set this as appropriate.

Within Cascade Pilot, reports can be createD. (select 3)

A. From views in the main workspace in PDF, Word, HTML and other formats.

B. From events that have occurred, also referred to as watches.

C. With customized information such as company logo and client name.

D. Including notes that are entered in Chart notes.

E. Including status of all remote devices (Cascade Shark appliances).