299-01 Online Practice Questions and Answers

Which TCP port is used for Cascade Profiler web based management interfaces?

A. 80/tcp

B. 8080/tcp

C. 8090/tcp

D. 443/tcp

E. 22/tcp

How is QoS data obtained in a Cascade Profiler? (Select 2) A. From packets via the Cascade Sensor or Shark

B. From NetFlow and other standard flow protocols

C. From IP SLAs on any network-attached device

D. From CDP

E. From NBAR

What is the typical retention time of packets of a CSK-01100 Cascade Shark appliance with 1 capture job?

A. About 34 hours with a captured length of 65535 bytes and a packet rate of 400kbps

B. About 9 hours with a captured length of 1000 bytes and an average traffic rate of 1Gbps.

C. About 18 hours with a captured length of 65535 bytes and an average traffic rate of 500Mbps.

D. About 20 hours with a captured length of 500 bytes and an average packet rate of 400kbps.

How many signatures can a Layer-7 Fingerprint have?

A. 1

B. 2

C. 5

D. 8

E. 10

What is the Active Timeout requirement on flow sources sending NetFlow to Cascade?

A. Any active timeout can be used; Cascade will calculate the statistics accordingly and update the dashboard accordingly.

B. 60 Seconds.

C. 60 Milliseconds.

D. 15 Minutes.

Cascade accepts lease data from DHCP servers in order to: (Select 2)

A. obtain MAC addresses.

B. improve accuracy of the security baseline.

C. force lease extensions longer to make tracking unique PCs easier.

D. obtain an IP for itself.

Cascade Shark can export flow data to a Cascade Profiler. When configuring Cascade Shark, flow export can be configured:

A. Per each capture job

B. Per each trace clip

C. Per each capture port

D. Per each capture board/aggregating port

E. Per each Cascade Shark appliance

The Cascade Shark de-duplication mode should be used:

A. To de-duplicate duplicate flows sent to the Cascade Profiler appliance caused by the way different Cascade Shark ports may see the same UDP/TCP sessions.

B. To de-duplicate duplicate flows sent to the Cascade Profiler appliance caused by use of the Aggregating Port seeing the same UDP/TCP sessions.

C. To de-duplicate duplicate packets that may be collected by the Cascade Shark caused by the way Port Mirroring is configured on a switch.

D. To de-duplicate duplicate packets that may be collected by the Cascade Shark caused by the way filtering is used on a capture job.

E. All of the above

Protocols that are used for flow export include of IPv4 conversations include (select 3):

A. Vacl-flow

B. sFlow

C. NetFlow

D. IPFIX

E. ERSPAN

Refer to the Exhibit.

For a user defined host policy on Cascade Profiler, what would trigger this policy to generate an alert?

A. Any traffic using application "X" or port range "Y"

B. Any internal-only traffic using application "X" or port range "Y"

C. Any internal-only traffic using application "X" and port range "Y"

D. Any traffic between internal and external hosts using application "X" or port range "Y"

E. Any traffic between internal and external hosts using application "X" and port range "Y"

F. Any traffic from internal clients to external servers using application "X" or port range "Y"

G. Any traffic from internal clients to external servers using application "X" and port range "Y"