01. Which sources of “identity” information are supported for Cascade Identity reporting?
(Select 3)
a) Windows 2000
b) Windows XP
c) Windows 2003
d) Windows Vista
e) Windows 2008
f) Windows 7
02. On a newly created capture job on Cascade Shark appliance, by default, trending/indexing is.
(Select 2)
a) Enabled
b) Disabled
c) Set to retain up to 1 week or 10GB of indexing/trending data
d) Set to retain up to 1 week or 10GB of packets
e) Set to keep the indexing/trending data indefinitely
03. Trace clips in Cascade Pilot allow you to:
a) Save a time window to a trace file for post-capture analysis.
b) Save a time window and apply Views to analyze a portion of a Capture Job.
c) Analyze an indexed capture job with Views that support indexing.
d) Clip a trace file to your desktop.
04. What is the maximum number of flows that can be sent from a remote device (Sensor/Gateway) to an Express Profiler?
a) 25,000 flows per minute
b) 50,000 flows per minute
c) Not limited by flow rate. Limited by number of devices sending flow
d) 100,000 flows per minute
e) Limited by the Profiler license limit
05. On Cascade Profiler, which of the following configuration changes can be used to reduce the number of alerts generated overall for a Service?
a) Edit each Service policy to increase the Tolerance slider for Low and High alerts.
b) Edit each Service policy and set a noise floor to specify the minimum amount of change that the policy can treat as deviation from normal behavior
c) Edit the Service and select fewer metrics to monitor for each segment that comprises the Service.
d) Modify the location host group type used for monitoring end user traffic to use fewer groups (for example, Region instead of Site).
e) Edit each Service policy to increase the Tolerance slider for Low and High alerts., Edit each Service policy and set a noise floor to specify the minimum amount of change that the policy can treat as deviation from normal behavior., Edit the Service and select fewer metrics to monitor for each segment that comprises the Service., Edit the Service and select fewer metrics to monitor for each segment that comprises the Service. and Modify the location host group type used for monitoring end user traffic to use fewer groups (for example, Region instead of Site).
f) Edit each Service policy to increase the Tolerance slider for Low and High alerts. and Edit each Service policy and set a noise floor to specify the minimum amount of change that the policy can treat as deviation from normal behavior.
06. When Flow Data is being forwarded from a __________ to another Flow Collector it is _________.
a) Sensor, Compressed
b) Cascade Profiler; sent in its original form
c) Cascade Express; sent de-duplicated
d) Cascade Express; sent in its original form
e) Cascade Gateway; de-duplicated
f) Cascade Gateway; sent in its original form
07. A User-defined Response Time Policy allows checks to be made against which of the following parameters:
(Select 3)
a) Response time
b) Round trip time
c) Server delay
d) Connection throughput
e) Number of connections
08. In the Cascade Profiler GUI, how frequently is the dashboard refreshed by default?
a) Every 15 seconds
b) Every 15 minutes
c) Every 5 minutes
d) Every 1 minute
e) Every 1 hour
09. When analyzing a large (100GB, for example) trace file within Cascade Pilot, you should:
a) Copy the file onto a Cascade Shark to ensure better performance.
b) Create an index so that processing of the View analytics will be faster.
c) Apply a View with a specific filter.
d) Use Wireshark tools to split the trace file in multiple and smaller trace files.
10. From the Quick Report below, which choice should be used if you want to create a report based on a subnet address (e.g. 192.168.1.0/24)?
a) Host/Group
b) IP Address/Subnet
c) Interface/Device
d) Network