201-01 Riverbed Certified Solutions Associate - Network Performance Management Question and Answers

Fault Management

Application Performance Management (APM)

Network Behavior Analysis (NBA)

Flow based Network Monitoring and Analysis

Know the time span analyzed by the View.

Want to change the time selection covered by the View.

Change the resolution of a strip chart.

Analyze more than one trace file.

Through RADIUS server(s)

From Domain Controller(s)

Through standards-based LDAP queries

Via SNMP queries

CIDR block

Hostgroups

Hostnames

0/0, meaning all hosts

IP addresses

Drill down from Cascade Profiler

Indexing files for fast analysis

Visual troubleshooting and analysis

Distributed capture and analysis (Cascade Shark appliance)

Application Transaction diagrams

Number of connections per second

Average Response time

TCP resets

CPU and memory utilization of server

TCP retransmission

Number of jumbo frames

Syslog

SNMP

HTML

Facebook

PDF

Profiler

RMM

Gateway

Expansion Module

Shark appliance

Sensor

Sensor

Sensor-VE

Gateway

Profiler

Enterprise Profiler

Express

Packet Collection Only

Flow Collection Only

SNMP Statistics Only

Flow Collection or Packet Collection

SNMP Statistics or Packet Collection

25,000 flows per minute

50,000 flows per minute

75,000 flows per minute

100,000 flows per minute

Service Performance Report

Service Incident Report

Performance Investigation Reports

Event Reports

Service Level Objective Reports

Servers and Applications

Clients, Servers and Ports

Front-end and Back-end tiers

Components and Segments

Web, Application and Database tiers

Using a Layer4 Mapping (combination of IP Address and TCP/UDP Port)

Using a Layer7 Deep Packet Inspection

Using a Host Group

Using Switch Port Discovery

Using Firewall Policy Import

There is no difference between an Express and Standard Profiler.

An Express Profiler has the option only for a built-in Sensor and cannot receive flow data.

A Standard Profiler has the option only for a built-in Sensor and cannot receive flow data.

An Express Profiler can handle more flows per minute then a Standard Profiler.

An Express Profiler has a built in Sensor and Gateway.

A downloadable customized view from the online Cascade community.

Any view that is applied to live devices and dynamically updated.

A view that can be created after drill-down from one view to another.

Any view that was created by applying a traffic filter.

All views within Cascade Pilot are considered interactive views.

Is fixed at 2 Gbps

Is fixed at 20 Gbps

Is fixed at 32 TB

Is measured in TB and dependent upon the Cascade Shark Base Appliance used

Is measured in Gbps and dependent upon the Cascade Shark Base Appliance used

NetFlow v9

sFlow

Federated Data Records (FDR)

IPFix

CascadeFlow from Steelhead

All of the above

Source and Destination IP Address of endstations

Source and Destination MAC Address of endstations

Source and Destination Hardware Port Numbers of endstations

Source and Destination UDP or TCP Port Numbers

TCP Flags used

A time selection on a trace file.

A time selection on a Capture Job.

A selection of packets stored for a Capture Job.

A copy of packets stored for a Capture Job.

Drag the trace file on the View to apply the View.

Right-click the View item and select "Apply with Filter".

Drag a View on the trace file to apply the selected View.

Select the View and the trace file, and double-click the trace file.

Advanced analytics using dynamic modeling of network behavior.

Comparisons to absolute thresholds.

Windows WMI data gathered from Application Servers.

Loss of connectivity based on three consecutive lost ICMP ping responses.

Error rated collected through SNMP Polling of Network Interfaces.

Resolve host names using DNS

Resolve host names using /etc/hosts

Resolve host names for hosts managed by DHCP

Suppress DHCP/DNS search domains (ce.lab.nbttech.com,nbttech.com) from resolved hosts

NT 4.0

Windows Server 2003

Windows Server 2008

Windows Server 2005

A & D

1

2

3

4

5

You can track, report and alert on organizationally meaningful categories of traffic

To control access to Cascade data

To quickly quarantine hosts affected by a virus

To increase the scalability of the Cascade database

To view the traffic of many hosts from multiple perspectives

Cascade Express 100

Cascade Express 300

Cascade Standard series

Cascade Enterprise series

BGP AS number

IP address of Sensor

Default gateway of Internet router

Subnet mask for entire corporate network

Subnet mask for all Cascade Enterprise Profiler modules

Through the Reporting ribbon

Through the search bar in the Views pane

By hovering the cursor over the icon that precedes each View listed in the Views pane

Through the Web Interface

One or all views from the main workspace.

Notes entered associated with a view.

Analyst and Client information entered.

A and B.

A, B and C.

MGCP

SCCP

H.248

SIP

H323

First creating a trace clip file.

First exporting the job trace to Wireshark.

First applying a high level view onto the job trace.

First indexing the job trace using the Cascade Pilot right-click menu.

Compare the amount of traffic crossing a LAN interface to the corresponding traffic crossing an optimized WAN interface.

Compare updates received via SNMP from Steelhead optimization devices with router devices.

The Cascade Profiler cannot determine optimization levels.

Through manual entry of levels achieved.

Compare updates received via flows from Steelhead optimization devices with router devices.