299-01

299-01 practice questions, page 6 of 10, with answer review and explanations.

Question 26

In the Cascade Profiler GUI, what is a Port Group?

  1. A combination of IP Address and Port Number
  2. One or more protocol/port combinations mapped to a name
  3. Names mapped to IP subnets
  4. Layer-2 switch ports grouped into a logical name
  5. NetFlow interfaces grouped into a logical name

Question 27

In order to analyze data captured by a Cascade Shark appliance. (Select 3)

  1. You can connect directly to the Cascade Shark with Cascade Pilot to begin analysis.
  2. You can connect directly to the Cascade Shark with Cascade Gateway to begin analysis.
  3. You can start analysis on the Cascade Profiler based upon flow data that has been sent from Cascade Shark to Cascade Profiler.
  4. You can export data from a capture job directly to a packet capture (pcap) file and open in any tool that accepts pcap format.
  5. You can start by loading views of the data from the Cascade Shark Appliance Web GUI before export to Wireshark.

Question 28

How do I run a report on Cascade Profiler to show all hosts that have talked to server "192.168.1.100" on TCP port 25?

  1. Under the traffic reports Advanced Tab, place "192.168.1.100" in the Host field select "Acting as Server" in the drop down, enter "tcp/25" in the Protocol field and select "Hosts" in the "report-by" pull down.
  2. Under the traffic reports Advanced Tab, place "192.168.1.100" in the Host field select "Acting as Server" in the drop down, enter "tcp/25" in the Protocol field and select "Peers Hosts" in the "report-by" pull down.
  3. Under the traffic reports Advanced Tab, place "192.168.1.100" in the Host field select "Acting as Client and Server" in the drop down, enter "tcp-25" in the Protocol field and select "Hosts" in the "report-by" pull down.
  4. Under the "Quick Reports" pull down from the dashboard page, select "Host" enter the IP Address and hit return.

Question 29

Which of the following are TRUE concerning packet capture jobs on the Cascade Shark appliance. (Select 4)

  1. Packets can be captured from multiple capture ports on one Cascade Shark appliance.
  2. The maximum length the packet data can be specified.
  3. Packets can be filtered on host IP addresses.
  4. SSL traffic can be decoded if the appropriate certificate are loaded in the Cascade Shark appliance.
  5. The maximum storage bandwidth for the job can be specified in bits/sec.
  6. Multiple packet capture jobs can run concurrently.

Question 30

An interactive view within Cascade Pilot:

  1. Can be created from a single applied View.
  2. Can work on local trace files only.
  3. Can include more than two charts.
  4. Is not available in the regular Cascade Pilot installation.