299-01

299-01 practice questions, page 8 of 10, with answer review and explanations.

Question 36

When analyzing a large (100GB, for example) trace file within Cascade Pilot, you should:

  1. Copy the file onto a Cascade Shark to ensure better performance.
  2. Create an index so that processing of the View analytics will be faster.
  3. Apply a View with a specific filter.
  4. Use Wireshark tools to split the trace file in multiple and smaller trace files.

Question 37

Which of the following is a valid group definition on Cascade Profiler? (Select 4)

  1. 10.0.0.0/23 United_States
  2. 0.0.0.0/0.0.0.0 Worldwide
  3. 24.32.8.43/32 CEO_Printer
  4. 192.168.0.5/255.0.255.0 Printers
  5. 10.38.14.1/255.255.255.255 My Computer

Question 38

What is a benefit that Cascade Profiler might provide to Security Operations? (Select 3)

  1. Ability to identify Scanners and Worm Propagations.
  2. Ability to provide information for a firewall rule when a user defined policy is violated.
  3. Ability to alert on security policy (e.g. an insecure policies, such as FTP, is in use).
  4. Ability to identify Worms by name.

Question 39

A system administrator needs to update their Cascade Profiler host group settings to remove references to a decommissioned office on the 10.63.32.0/24 subnet. What is the best way to do this?

  1. echo "delete from hostinfo where ipaddr = '10.63.32.0/24';" | psql mazu postgres
  2. Edit the Definition and remove the entry for 10.63.32.0/24 Bracknell_UK
  3. echo "delete from hostinfo where group = 'Bracknell_UK;" | psql mazu postgres write_community_string
  4. Go to Host Groups and insert " #10.63.32.0/24 Bracknell_UK"

Question 40

Why should all flow exporting devices use the same NTP (Network Time Protocol ) source?

  1. Ensures Cascade is able to recreate the packets.
  2. Essential for the flow de-duplication process.
  3. Ensures the flow is delivered to the correct Gateway.
  4. All of the above.
  5. None of the above.