299-01 Practice Questions

A.  

Capturing packets from a SPAN-Port/Port-Mirror whose configuration may generate duplicate packets

B.  

Capturing packets from an aggregating TAP

C.  

Removing duplicate flows across multiple interfaces

D.  

Capturing packets from a 10GB link

A.  

This is normal in optimization environments and provides the proper reporting of traffic volume between locations.

B.  

This indicates that Flow data is being reported on the optimized connection, between Steelheads and has no impact on reporting.

C.  

This indicates that Flow data is being reported on the optimized connection, between Steelheads and can lead to Cascade double-counting volumes between locations.

D.  

This cannot happen.

A.  

Under the traffic reports Advanced Tab, place "192.168.1.100" in the Host field – select "Acting as Server" in the drop down, enter "tcp/25" in the Protocol field and select "Hosts" in the "report-by" pull down.

B.  

Under the traffic reports Advanced Tab, place "192.168.1.100" in the Host field – select "Acting as Server" in the drop down, enter "tcp/25" in the Protocol field and select "Peers Hosts" in the "report-by" pull down.

C.  

Under the traffic reports Advanced Tab, place "192.168.1.100" in the Host field – select "Acting as Client and Server" in the drop down, enter "tcp-25" in the Protocol field and select "Hosts" in the "report-by" pull down.

D.  

Under the "Quick Reports" pull down from the dashboard page, select "Host" enter the IP Address and hit return.

A.  

Network Round Trip measurement

B.  

Packet logging

C.  

Server Delay measurement

D.  

Connection Throughput measurement

E.  

Retransmission measurement

F.  

L7 application fingerprint checking

A.  

A Host Group Type is a container that may contain multiple Host Groups.

B.  

A Host Group Type defines the name of the Host Group.

C.  

They are the same thing.

D.  

Each Host Group must be defined by the Type of application it serves; this is the Host Group Type.

A.  

User name

B.  

Host IP address

C.  

Host MAC address

D.  

The physical switch port a specific host is connected to

E.  

Switch port traffic levels

F.  

Switch port status

G.  

SNMP traps from the switch

A.  

Steelhead

B.  

CE router

C.  

PE router

D.  

Netflow-enable hosts

A.  

192.168.66.* Web Servers

B.  

192.168.0.100/255.255.0.255 Database_Servers

C.  

192.168.14.0/24 Mail_Servers

D.  

192.168.*.* Boston

A.  

Apply a View on the live interface and then start a Capture Job on the capture port to analyze traffic later.

B.  

Start a Capture Job on the capture port with a BPF filter and apply a View on the live interface for the same capture job.

C.  

Start a Capture Job on the capture port, apply a View on the live interface and create a trace clip for the time window of interest.

D.  

Never create a Capture Job to prevent packet drops.

A.  

Inter VLAN101 traffic will be monitored; Intra VLAN101 traffic will not.

B.  

Intra VLAN101 traffic will be monitored; Inter VLAN101 traffic will not.

C.  

Both inter and intra VLAN101 traffic will be monitored.

D.  

It is a best practice to configure the Cascade Shark monitoring port (the SPAN destination) with 'deduplication' enabled.

E.  

It is a best practice to configure the Cascade Shark monitoring port (the SPAN destination) without 'deduplication' enabled.