201-01 Riverbed Certified Solutions Associate - Network Performance Management Questions and Answers

NT 4.0

Windows Server 2003

Windows Server 2008

Windows Server 2005

A & D

Ensure the Cascade Gateway’s monitor interface is receiving packets from the SPAN destination interface.

Ensure the Cascade Sensor’s monitor interface is receiving packets from the SPAN destination interface.

Set the Cascade Sensor’s monitor interface to the same VLAN as the SPAN destination interface.

Set the Cascade Gateway’s monitor interface to the same VLAN as the SPAN destination interface.

Set the SPAN destination interface the same as at least one source interface to ensure complete coverage.

1

2

3

4

5

Drives are Failing/Missing

RAID is Rebuilding

Partitions are not mounted or mounted as read-only.

Drives are OK.

Drives have Low/No Space.

Business Groups

Web Applications

Defined Applications

Server Applications

Manually created hosts are not monitored

Manually created relationships are not monitored

Thresholds need to be set

All of the above

Every 15 seconds

Every 15 minutes

Every 5 minutes

Every 1 minute

Every 1 hour

They are based upon the 6-bit Differentiated Services Code Point (DSCP).

They are based upon Host Group definitions, defined within the Cascade GUI.

They are based upon Application definitions, defined within the Cascade GUI.

They are based upon Port definitions, defined within the Cascade GUI.

An evaluation license of the software to remain active for a period longer than the default license period.

A selected portion of a packet capture (pcap) file to be opened in Cascade Pilot from a larger capture file.

A view applied to a packet capture (pcap) file to be limited to the time period selected.

Watches to be scheduled to alert the user at a pre-defined time.

No hard limit

10

4

20

1

2

3

4

Unlimited

Host/Group

IP Address/Subnet

Interface/Device

Network

Express

Standard Profiler

Enterprise Profiler

B and C

A, B, and C

Cascade Shark interfaces and captures job traces appear under the devices tab within the sources panel.

Cascade Shark interfaces appear under the devices tab of the sources panel AND Cascade Shark capture job traces appear under the files tab of the sources panel.

Cascade Shark interfaces and captures job traces appear in the views panel.

Cascade Shark interfaces must be selected from the home menu to begin a capture.

Seven days

Three days

It depends on the flow rate.

Twenty-four hours

None of the above

Local user accounts

Active Directory

TACACS+

RADIUS

LDAP

From the Basic Settings page of the Cascade Shark appliance Web Interface.

From the Advanced Settings page of the Cascade Shark appliance Web Interface.

With the CLI command “set timezone”.

From the Settings menu of Cascade Pilot.

TCP sessions are easily determined as completed through the existence of flags included; this isn’t true for UDP sessions

UDP sessions are easily determined as completed through the existence of flags included; this isn’t true for TCP sessions

Both TCP and UDP sessions are easily determined as completed through the existence of flags included

Neither TCP nor UDP sessions can be determined as completed unless 20 minutes has passed since the last packet is observed

MTU size changes can be used to determine that a session is complete for either TCP or UDP

SAN and Local Disk Storage

SAN only

Local Gateway-Storage

Hard Drive and Ethernet or USB-attached NAS

Local only

By combining the switch port table of an access tier switch with utilization characteristics of router interfaces obtained via flow, Cascade is able to identify where hosts are plugged into the infrastructure.

By combining the switch port table of an access tier switch with the ARP table of a router with data obtained via flow, Cascade is able to identify where hosts are plugged into the infrastructure.

Cascade is able to run a Vulnerability Scan across the switch.

Cascade is able to get SNMP statistics for port level problems from the switch.

Drill down from Cascade Profiler

Indexing files for fast analysis

Visual troubleshooting and analysis

Distributed capture and analysis (Cascade Shark appliance)

Application Transaction diagrams

Is a graphic object used to show selected and global time windows for the applied View.

Can be applied to both live captures and saved pcap files.

Is a feature that allows a user to be notified when a specified event occurs on the network.

Can send a syslog message when an event is triggered.

You would never deploy NetExpress at a large corporate enterprise. NetExpress has insufficient capacity for any type of deployment.

To provide a solution for collecting packets, with no need for any other sort of analysis.

Multiple locations in widely disparate geographic locations with a need to monitor each location independently.

A need to provide visibility to a subset of an entire organization such as a specific group or collection of groups. without providing that same visibility to the entire organization.

HTTP over TCP/80 and HTTPS over TCP/445

HTTP over TCP/80 and HTTPS over TCP/443

HTTP over TCP/443 and HTTPS over TCP/80

HTTP over TCP/445 and HTTPS over TCP/80

HTTP over TCP/88 and HTTP over TCP/444

25,000 flows per minute

50,000 flows per minute

As many flows as can be collected from up to 5 other devices

100,000 flows per minute

Limited by the Cascade Profiler license limit

Appear listed under the devices tab of the sources panel.

Appear in the main workspace after selecting “choose an interface” from the main menu.

Appear listed under the associated Cascade Shark capture job trace in the sources panel files tab.

Must be selected from the “Capture. Interfaces” menu.

Cascade gateway

Cascade Pilot software

Wireshark software

Cascade Sensor

Cascade Shark

Attach the trace clip.

Unlock the trace clip.

Lock the trace clip.

Send the trace clip to a file.

Detach the trace clip.

It cannot provide any benefits.

Cascade provides benefits beyond optimization reporting to include Application Performance Monitoring, Security/Compliance benefits, and general Network Visibility..

The firewall capabilities of Cascade can still be utilized on the network to prevent network attacks.

Cascade can monitor spanning tree algorithms as reporting benefits in a given network.

25,000 flows per minute

50,000 flows per minute

75,000 flows per minute

100,000 flows per minute

Ensuring the interface of the Cascade Profiler is on the same subnet as the router, as NetFlow is not routable.

Using the “tcp/(n) + 1” port numbering scheme to ensure this router’s NetFlow is unique from all other routers.

Ensuring the router has IP connectivity to the Cascade Gateway.

Ensuring the interface of the Cascade Gateway is on the same subnet as the router, as NetFlow is not routable.

Using the “udp/(n) + 1” port numbering scheme to ensure this router’s NetFlow is unique from all other routers.

Maximum flow capacity.

Maximum number of operational analytics.

Maximum number of users supported.

Maximum number of available reports.

No additional value, deployed only as a necessity when NetFlow is not available.

The Sensor adds synthetic transactions to track response time.

The Sensor adds trace-route capability to map out Application paths.

The Sensor adds Application identification and Response time metrics for TCP sessions.