Summer Certification Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code = getmirror

Home
Riverbed
RCSP-NPM
299-01
Riverbed Certified Solutions Professional - Network Performance Management Questions and Answers

Pass the Riverbed RCSP-NPM 299-01 Questions and answers with ExamsMirror

Practice at least 50% of the questions to maximize your chances of passing.

Exam 299-01 Premium Access

View all detail and faqs for the 299-01 exam

Go to Exam

805 Students Passed

85% Average Score

94% Same Questions

Viewing page 5 out of 8 pages

Viewing questions 41-50 out of questions

Questions # 41:

A SPAN port or Port Mirror differs from RSPAN technology in which way:

Options:

A SPAN port captures traffic locally, an RSPAN captures traffic remotely

A SPAN port captures traffic consistently, an RSPAN captures traffic randomly

A SPAN port captures multiple ports while an RSPAN is "relational" and captures multiple VLANs (Relational LANs)

They are both the same with different terms being used by different vendors

A SPAN port is used on a Switch while a RSPAN is used on a Router

Answer

Questions # 42:

For DNS reverse lookup, Cascade Profiler caches as follows:

Options:

Cache the most recent 500 IPs.

Obey DNS TTLs.

Cascade does not cache DNS responses.

For 24 hours.

Answer

Questions # 43:

What is the maximum number of custom applications (Layer 4 and 7 combined) permitted to be defined on a single Cascade Profiler?

Options:

100

125

Unlimited

Answer

Questions # 44:

Cascade Profiler is reporting the traffic on Steelhead optimized flows separately than the connections on tcp/7800 between two Steelheads. In other words, from Cascade you see flows for traffic on various ports used natively by the clients and servers across the steelhead as well as flows for tcp/7800. What does this indicate?

Options:

This is normal in optimization environments and provides the proper reporting of traffic volume between locations.

This indicates that Flow data is being reported on the optimized connection, between Steelheads and has no impact on reporting.

This indicates that Flow data is being reported on the optimized connection, between Steelheads and can lead to Cascade double-counting volumes between locations.

This cannot happen.

Answer

Questions # 45:

When changing the priority for a Layer 4 mapping on Cascade Profiler best practices indicate that Application Mappings should be given higher priorities based on:

Options:

Longest Match

Shortest Match

IP & Port

Answer

Questions # 46:

What is a benefit that Cascade Profiler might provide to Security Operations? (Select 3)

Options:

Ability to identify Scanners and Worm Propagations.

Ability to provide information for a firewall rule when a user defined policy is violated.

Ability to alert on security policy (e.g. an insecure policies, such as FTP, is in use).

Ability to identify Worms by name.

Answer

A, B, C

Questions # 47:

What are the two (at a minimum) devices you need to configure in Cascade Profiler for Switch Port Discovery integration to work for a portion of the network?

Options:

At least one NetFlow sources (router, switch, or steelhead).

At least one lookup router and at least one access tier switch.

A Vulnerability Scanner and a Netflow source (router, switch, or steelhead).

A Vulnerability Scanner and an External Link.

Answer

Questions # 48:

How many Host Group Types can be tracked on the Dashboard within the Cascade Profiler GUI?

Options:

Unlimited

Ten

Four

Twenty

Answer

Questions # 49:

How do all the Cascade components stay time synchronized?

Options:

They all point to the same NTP server.

The Profiler, ideally, points to an NTP server (although it can use local time as well), the Gateway and Sensor get their time information from the Profiler which acts as their NTP Server.

For security reasons, all components use local time. The same time should be set on each component.

They all synchronize their time via timestamps in Netflow sources.

Answer

Questions # 50:

If there is a Layer 7 fingerprint and a Layer 4 mapping for a particular application, which of the following is truE. (Select 5)

Options:

If the Layer 4 mapping override policy is not "Unknown/Unclassified", the Layer 4 mapping applies to flows not passing a Sensor or other application fingerprinting device as well as to flows not matching any defined Layer 7 fingerprint

If the Layer 4 mapping override policy is "Always", then the Layer 7 fingerprint will never be used for flows matching both criteria

If the Layer 4 mapping override policy is "Unclassified", the Layer 4 mapping only applies to flows not passing a Sensor or other application fingerprinting device

If the Layer 4 mapping override policy is "Unknown/Unclassified", the Layer 4 mapping applies to flows not passing a Sensor or other application fingerprinting device as well as to flows not matching any defined Layer 7 fingerprint

Care must be taken when defining reports and policies to reflect overlapping definitions and the Layer 4 override policy

The traffic Expression "app L7_fingerprint or app L4_mapping" will catch all traffic flows for the application data in a report

Answer

B, C, D, E, F

Viewing page 5 out of 8 pages

Viewing questions 41-50 out of questions