299-01 Practice Exam Questions and Answers

A.  

From views in the main workspace in PDF, Word, HTML and other formats.

B.  

From events that have occurred, also referred to as watches.

C.  

With customized information such as company logo and client name.

D.  

Including notes that are entered in Chart notes.

E.  

Including status of all remote devices (Cascade Shark appliances).

A.  

Per each capture job

B.  

Per each trace clip

C.  

Per each capture port

D.  

Per each capture board/aggregating port

E.  

Per each Cascade Shark appliance

A.  

ARP table on a layer 3 device (router)

B.  

CAM (Content Addressable Memory) on a layer 2 device (switch)

C.  

Both the ARP and CAM tables from a layer 2 device (switch)

D.  

All of the above

E.  

None of the above

A.  

According to the Cascade Pilot time zone.

B.  

According to the time zone of the Cascade Shark to which you are connected.

C.  

According to Cascade Pilot time zone or optionally, to the Cascade Shark time zone as well.

D.  

According to UT

C.  

A.  

You must consider how many capture cards are required.

B.  

You must consider how much disk space is required.

C.  

You must consider the write-to-disk speed required.

D.  

You must consider how many Cascade Pilot consoles will be connecting.

E.  

You must consider how many Cascade Profilers the appliance will export to.

A.  

Always – remove the layer 7 tag and apply the layer 4 tag instead.

B.  

Unclassified – remove the layer 7 tag and apply the layer 4 tag only if the flow is already tagged unclassified.

C.  

Unknown – remove the layer 7 tag and apply the layer 4 tag only if the flow is already tagged unknown.

D.  

Unknown/Unclassified – remove the layer 7 tag and apply the layer 4 tag only if flow is tagged as both unknown and unclassified.

E.  

Unknown/Unclassified – remove the layer 7 tag and apply the layer 4 tag only if flow is tagged as unknown or unclassified.

A.  

3

B.  

5

C.  

10

D.  

15

A.  

The license key is entered during installation. The license is activated either through an Internet connection or by phone.

B.  

The license key is entered during installation. The license must be activated through an Internet connection.

C.  

The license key is entered during installation. There is no activation but Cascade Pilot will detect if the license is already in use on the network.

D.  

There is no license key activation. The software image is shipped with the license key installed.

A.  

No, this cannot be done with Cascade.

B.  

Set up the query to ask for all hosts between: Hosts "Within" a group "ByInternalHosts: All" (where All is a host grouping containing all inside address space) and for Peers set to "Outside o

F.  

C.  

Configure query as B above but also add the Proxy Server to the "Outside" list.

D.  

Configure query as B above but also add the Proxy Server as a "not" in the Traffic Expression field. The expression to add would be "not host proxyhost " where proxyhost is the IP Address of the proxy.

A.  

Netflow V5 or V9 with TTL export configured.

B.  

NetflowV9 with TTL export configured.

C.  

Any version of Netflow since they all export in/out interface information.

D.  

UDP port.