201-01 Practice Questions

A.  

A new capture job is created on the Cascade Shark appliance.

B.  

A new trace clip is created on the Cascade Shark appliance, using the time frame that was specified for the Cascade Profiler traffic report, and including a filter for the IP addresses or TCP ports that the drill down was launched from.

C.  

A new trace clip is created on the Cascade Shark appliance, using the timeframe that was specified for the Profiler traffic report.

D.  

The underlying packets associated with the Cascade Profiler traffic report are downloaded to Wireshark.

E.  

The underlying packets associated with the Cascade Profiler traffic report are saved as a PCAP file on the Cascade Shark appliance.

A.  

Cascade can determine every URL that a client goes to out on the internet.

B.  

Cascade can identify applications at Layer7 which will aid in determining business versus non-business use-age of resources.

C.  

Cascade can identify applications that use multiple common ports based upon Layer7 to more readily track application dependencies.

D.  

Cascade can be configured with URLs, match those URL’s to application names and, in order to understand which applications are utilized on web servers that host multiple web applications over the same TCP port.

E.  

Cascade can identify unencrypted applications such as FTP and TELNET regardless of port number, and other applications (such as Peer to Peer) that may violate a company’s security policies.

A.  

A packet filter

B.  

A disk space allocation

C.  

One capture port or one aggregated port

D.  

Trend/indexing parameters

E.  

All of the above

A.  

Source and Destination IP Address of endstations

B.  

Source and Destination MAC Address of endstations

C.  

Source and Destination Hardware Port Numbers of endstations

D.  

Source and Destination UDP or TCP Port Numbers

E.  

TCP Flags used

A.  

None, alerts are accessible via the Cascade GUI only

B.  

SNMP traps only

C.  

SMTP email only

D.  

Pager only

E.  

One of SMTP email or SNMP trap but not both

F.  

SNMP traps and SMTP mail, each one optional, both allowed

A.  

Time from 1st ACK to 1st DAT

A.  

B.  

Time from (SYNACK to 1st DATA) – client delay.

C.  

Time from SYN to 1st DAT

A.  

D.  

Time from SYN to 1st ACK.