EMT Practice Test

1. Question Content...

---

Question1: What is the minimum number of physical appliances required when building Cascade solution that will collect and process 3.6 million unique (de-duplicated) flows/minute from NetFlow sources?

Question2: In order for the Cascade solution to track an application based on its fingerprint, data can be used from which devices? (Select 3)

Question3: What is the maximum limit of configurable flows that can be exported from the Cascade Shark appliance?
(Select 2)

Question4: Simple Network Management Protocol can be used on Cascade Profiler for:

Question5: An interactive view within Cascade Pilot is useful for:

Question6: Cascade accepts lease data from DHCP servers in order to: (Select 2)

Question7: Cascade Profiler Dashboard can be configured to show: (Select 3)

Question8: If you use overlapping IP address ranges (for example 10.0.0.0/8, 10.1.2/16, and 10.2.3/24) in a host group definition on Cascade Profiler which of the following is true?:

Question9: Filtering in Cascade Pilot: (Select 2)

Question10: Is there a way to look at who owns the Domain for an external IP Address shown in the Cascade Profiler GUI?

Question11: Why should all flow exporting devices use the same NTP (Network Time Protocol ) source?

Question12: Which of the following best describes any limits that are enforced on the number of service, performance and availability policies that are supported on any Cascade Profiler?

Question13: When analyzing a large (100GB, for example) trace file within Cascade Pilot, you should:

Question14: Which of the following will show a list of all NetFlow sources sending data to the Cascade system?

Question15: Which of the following describes how a Cascade Gateway transfers flow data to a Cascade Profiler?
(Select 2)

Question16: What versions of NetFlow export the TCP flags?

Question17: A report on Cascade Profiler for "Top talkers" can be generated for which of the following? (Select 3)

Question18: What data do I need from netflow sources for the Cascade Profiler report-by "network segments" to work correctly?

Question19: A strip chart within Cascade Pilot shows data points:

Question20: Which of the following statements is true regarding SNMP polling and NTP syncing among Cascade components?

Question21: Which of the following statements are true? (Select 3)

Question22: When using a Network Performance Management tool such as Cascade, TCP sessions can be observed as completed by observing:

Question23: Which of the following are true about creating a capture job on Cascade Shark: (Select 3)

Question24: A user wants to use the link congestion analytic policy on Cascade Profiler to monitor five key WAN links for an increase in traffic outside of the expected traffic that includes TCP/80, TCP/443, TCP25, and UDP/53. Can the link congestion policy be used for this scenario?

Question25: How many Cascade Notification Policy Levels are there?

Question26: For a TCP conversation that is non-optimized but being reported by a branch Steelhead appliance, the data center Steelhead appliance, and a data center Cascade Shark appliance, how is the Network RTT calculated?"

Question27: When sending data from a Gateway or Sensor to a Profiler which ports must be opened between the devices? (Select 3)

Question28: An interactive view within Cascade Pilot:

Question29: How many Group Types Can you create on your Cascade Profiler?

Question30: Which configuration option is it highly recommended that every Cascade Profiler Deployment implement?

Question31: For switch port Discovery on Cascade Profiler what device provides the MAC to IP address mapping?

Question32: The Cascade Profiler offers several options for notifying management systems or operations personnel of alert conditions. All except one can deliver an alert notification. What is the exception?

Question33: When you modify a filter in Cascade Pilot:

Question34: What is a good way to know whether all internal IP addresses seen by the Cascade Profiler have been grouped in a particular group type?

Question35: Within Cascade Pilot, a tool tip is available to provide additional information about items such as views. To access the tool tip for a view you must:

Question36: On the Cascade Profiler, when importing a switch mitigation device list, it needs to be in the following format:

Question37: In Cascade Profiler, which of the following is available as a Dashboard content block? (Select 3)

Question38: In Cascade Profiler, what is the minimum amount of historical flow data required for an Application Performance analytic to initialize?

Question39: Within Cascade Pilot, reports can be created. (select 3)

Question40: What are the three sections of a Cascade Service Incident Report page?
(Select 3)

Question41: The default group type for all Security Policies is:

Question42: A capture job definition on Cascade Shark may include. (select 3)

Question43: How does Cascade acquire the Interface Name (ifname) and interface speed (ifspeed) for interfaces reporting to Cascade?

Question44: How are trace clips created in Cascade Pilot? (Select 2)

Question45: Cascade dependency mapping (Connection Graphs) have multiple 'layouts' for showing dependencies.
Which of the following is not an option?

Question46: If a Cascade Profiler customer wants to understand if poor user experience for a particular application is due to application inefficiency or not, what report parameters should you look at?

Question47: Within the Cascade Pilot GUI, the following filter types are available. (Select 3)

Question48: Cascade Shark can export flow data to a Cascade Profiler. When configuring Cascade Shark, flow export can be configured:

Question49: Which content block can be used to compare traffic between two time periods on the Cascade Profiler Dashboard?

Question50: Which of the following are default user-defined policies on Cascade Profiler? (Select 3)

Question51: Some common protocols which may be observed on a network with visibility tools are listed below. Match the protocol name with the most common port used.
1. HTTP a) TCP/25
2. HTTPS b) TCP/445
3. HTTPS through a proxy c) TCP/443
4. SMTP d) TCP/80
5. CIFS e) TCP/8080

Question52: When defining a Layer 4 application signature, what are the valid options for flows already tagged with a Layer 7 application signature? (Select 3)

Question53: Considerations for enabling Cisco NetFlow include. (Select 3)

Question54: On a newly created capture job on Cascade Shark appliance, by default, trending/indexing are. (Select 2)

Question55: Which of the following statements are true (select 2)

Question56: What integrations are available when an enterprise already owns an SNMP monitoring technology (such as Solarwinds or HPOV)? (Select 2)

Question57: On Cascade Profiler, Which of the following account role permissions is not unique to administrator accounts?

Question58: How many SNMP recipients can receive a single event notification for Cascade Profiler?

Question59: For a worm security event to be triggered on Cascade Profiler, what event must have occurred first?

Question60: In order to create an interactive view on Cascade Pilot:

Question61: How does Cascade track response time using its Sensor?

Question62: When changing the priority for a Layer 4 mapping on Cascade Profiler best practices indicate that Application Mappings should be given higher priorities based on:

Question63: Technologies used for switching traffic between Virtual Machines under ESXi include:

Question64: What is the chart granularity possible through the Cascade Pilot UI? (Select 2)

Question65: Cascade security baselines model all host-to-host interactions. A host is identified by:

Question66: A VACL is sometimes used in which way for network performance monitoring:

Question67: Can the same IP Address exist in Multiple Host Groups on Cascade Profiler?

Question68: What do you need to configure on the Profiler to detect utilization for an interface?

Question69: Within Cascade Profiler, what can be done to prevent a data resolution from being available for selection on the Report Criteria section of traffic reports?

Question70: Within the Cascade Pilot GUI, filtered items are often indicated:

Question71: Cascade Performance analytic event detail reports include multiple tables that are ordered by:

Question72: Which of the following is a valid group definition on Cascade Profiler? (Select 4)

Question73: Cascade provides a means for contacting other network devices for additional information about a host or user of interest. Right-clicking a host name, IP address, MAC address or port number and choosing
_________________ from the shortcut menu sends a query to the other network device.

Question74: Layer 7 Fingerprints come from which of the following sources:

Question75: What is the maximum number of Cascade Profilers that can be configured in the Cascade Shark appliance as receivers of flows?

Question76: Dynamic Host Configuration Protocol can be used by Cascade Profiler to:

Question77: A SPAN port or Port Mirror differs from RSPAN technology in which way:

Question78: A packet capture (pcap) file that is loaded into Cascade Pilot for the first time is indexed:

Question79: Which of the following flow formats provide QoS information to Cascade?

Question80: When you create an index within Cascade Pilot for a trace file. (Select 2)

Question81: Which version of SNMP traps can the Cascade Profiler and Cascade Express send?

Question82: Before running your first report on Cascade Profiler after installation, where is the best place to go to verify traffic flows are currently being received?

Question83: Which of the following is valid syntax for defining host groups? (Select 3)

Question84: What are two differences between NetFlow version 5 and NetFlow version 9 (select 2)

Question85: Common methods for receiving alerts from a Network Performance Management system include. (select
2)

Question86: What conditions might prevent successful SNMP polling of a flow source? (Select 2)

Question87: What CIDR block would you use to define a group on Cascade Profiler that will include all hosts ending in
.1 in the 10/8 subnet?

Question88: When a Profiler or Enterprise Profiler receives flow over its licensed capacity what happens?

Question89: Within Cascade Profiler you can set the recipient for policy notifications under Advanced configuration to:

Question90: How is the Cascade Pilot license activated?

Question91: What is one way Cascade obtains information about retransmissions in the network?

Question92: Refer to the exhibit.

Traffic that is not analyzed by a Cascade Sensor such as Unclassified, under Override Policy, applies to which of the following conditions:

Question93: When designing a Cascade deployment which of the following is important to consider about sizing?

Question94: What is the purpose of the snmp-server ifindex-persist command in regards to Riverbed Steelhead appliances and Cascade Profiler? (Select 2)

Question95: What is the typical retention time of packets of a CSK-01100 Cascade Shark appliance with 1 capture job?

Question96: To install Cascade Shark, the best practice to initially configure the IP Address to be used on the network is:

Question97: Which of the following types of hosts are included in Cascade grouping on Cascade Profiler?

Question98: Time Control within Cascade Pilot is used for:

Question99: The "Policies Usage" that is reported under System - Information pertains to which of the following:

Question100: Within Cascade Pilot a Watch can: (Select 3)

Question101: In the Cascade Profiler GUI, what is a Port Group?

Question102: WAN optimization reports on Cascade Profiler require that the WAN interfaces for all Steelheads performing optimization are included in a WAN Interface group and are marked as Steelhead interfaces.
Which of the following is true?

Question103: What is the maximum number of custom applications that can be defined on a Cascade Profiler?

Question104: On Cascade Profiler, can you run a traffic report that shows all traffic from inside the network to outside the network, but excludes a proxy server?

Question105: Cascade Profiler is able to report traffic using two different approaches (centricities). Two approaches can result in different results when using the same report criteria due to the way data is aggregated and counted. What are these two approaches? (Select 2)

Question106: In Cascade, how are custom Layer 7 applications configured?

Question107: What is the maximum number of custom applications (Layer 4 and 7 combined) permitted to be defined on a single Cascade Profiler?

Question108: What report on Cascade Profiler would be used to show both sides of a conversation and the ports they communicated on?

Question109: Which of the following are available integrations for Cascade Profiler? (Select 3)

Question110: Voice over IP (VoIP) monitoring by Network Performance Management systems typically includes, but is not limited to, the following metrics (select 3):

Question111: How does Cascade Profiler track URL's?

Question112: Which filter should be used to analyze a capture job within Cascade Pilot?

Question113: On Cascade Profiler, what does "tunneled" indicate when used as a keyword for an Application?

Question114: What is the Active Timeout requirement on flow sources sending NetFlow to Cascade?

Question115: Where is one place Cascade Profiler can obtain Identity (user) information for use in reporting user activity on a network?

Question116: Which Cascade device is capable of sending flow data to more than one Cascade Profiler? (Select 3)

Question117: How do I run a report on Cascade Profiler to show all hosts that have talked to server "192.168.1.100" on TCP port 25?

Question118: How do Cascade Performance Analytics assist with Performance Monitoring?

Question119: NetFlow v9 uses the concept of templates. How do you tell the Cascade Gateway the proper template information?

Question120: If Cascade is unable to keep a record of all hops traversed due to exceeding its limits, what is the order of preference for selecting which hops to preserve?

Question121: When creating an analytic service, the discovery process requires a minimum of:

Question122: The Cascade Profiler authenticates users before logging them in. What are the possible choices for authentication? (Select 3)

Question123: If a report table on Cascade Profiler includes the "Server Delay" column but shows no value for "Server Delay" in some cells, what are the possible causes? (Select 3)

Question124: What is the relationship between a Host Group and a Host Group Type in Cascade Profiler?

Question125: When using Network Performance Monitoring solutions the following statements are true. (select 2)

Question126: Refer to the exhibit.

What does the :3 and :4 signify after the IP addresses?

Question127: When saving a new application performance analytic on Cascade Profiler, which of the following is true?

Question128: The Discovery Wizard has been used to map a complex application to be monitored by Cascade's service monitoring for a company with 25 remote locations and one data center, each defined as a group within the group type used. There are two front-end segments to signify incoming end user connections, and 15 back-end connections among all of the servers. The only metric/policy activated for each segment is the
'Response Time' metric. How many policies on the Cascade Profiler will this service consume?

Question129: Which of the following are valid syntax for host group definitions on Cascade Profiler? (Select 2)

Question130: How many signatures can a Layer-7 Fingerprint have?

Question131: Which of the following does the Cascade Sensor device provide that the Cascade Sensor-VE does not?
(Select 2)

Question132: Which is a true statement regarding choosing between a 2U and a 3U Cascade Shark base appliance.
(Select 2)

Question133: Protocols that are used for flow export include of IPv4 conversations include (select 3):

Question134: When the Discovery wizard presents all newly discovered application-ports as candidates to be included as segments for monitoring within a Service, which of the following actions will save the segment as part of the Service, but will not implement monitoring of the traffic? This action will also suppress the same application-ports from being presented in any future discovery.

Question135: What mechanism does Cascade Profiler use to identify the switch port a host is attached to and the hosts associated MAC address?

Question136: Which example, assuming we want the 192.168.1 subnet shown as "Tokyo", shows the correct syntax for setting up this host group under a host group type on Cascade Profiler?

Question137: Live interfaces within Cascade Pilot as shown in the sources panel devices tab include:

Question138: What protocol/port does the Gateway use to collect NetFlow?

Question139: You can analyze data on Cascade Pilot received from live interfaces if. (Select 2)

Question140: Within Cascade Pilot, to analyze the round-trip time in a trace file, you can:

Question141: Which of the following is false in regards to Cascade Profiler reporting and alerting? (Select 2)

Question142: On an Enterprise Profiler, which Cascade software module usually runs on hardware with another software module, but can be placed on its own hardware to support extremely large clusters?

Question143: Which TCP port is used for Cascade Profiler web based management interfaces?

Question144: For an analytic policy that monitors TCP retransmission bandwidth, which of the following best describes what is minimally required before a baseline can be established?

Question145: What are the two types of dashboards available within the Cascade Profiler GUI? (select 2)

Question146: Company X wants to use Cascade for monitoring the performance of their SQL application to all remote sites before considering purchasing any WAN optimization technology. They would like to add a Cascade Sensor to their network, and therefore they must:

Question147: What is a benefit that Cascade Profiler might provide to Security Operations? (Select 3)

Question148: Which of the listed versions of NetFlow are supported by Cascade?

Question149: On Cascade Profiler, Active Directory user names and login information are obtained via the Active Directory Connector from:

Question150: Which of the following metrics can Cascade Profiler create dependency (Connection Graphs) for? (Select
3)

Question151: If unable to connect to the Cascade Shark Appliance from the Cascade Pilot console it could be because.
(Select 2)

Question152: Within Cascade Pilot, Sequence Diagrams represent TCP Errors in which of the following ways: (Select 2)

Question153: The Cascade Profiler and Express define a service as all servers, clients, applications and ports involved in the end-to-end delivery of a network service. A service is composed of one or more _______________ that can be monitored, reported and alerted on individually.

Question154: When defining a service which of the following are supported ways of aggregating the results? (Select 2)

Question155: How does Cascade Profiler track Resets?

Question156: What methodologies does the Cascade Profiler use to display MAC address information along with other host information?

Question157: Within Cascade Pilot, when packet capture (pcap) files have associated trending/indexing data the following are true (select 2)

Question158: For DNS reverse lookup, Cascade Profiler caches as follows:

Question159: To assure the packet data in a trace clip is preserved from Cascade Pilot, you should:

Question160: What are three ways Cascade Shark can monitor packet data in an environment: (Select 3)

Question161: What is one item for which the analytics license is required?

Question162: What must happen prior to running WAN Optimization reports on Cascade Profiler?

Question163: Common TCP Errors which may be observed within a network include:

Question164: One advantage of using a trace clip for analysis within Cascade Pilot instead of its parent capture job trace is:

Question165: When editing a previously configured service policy, what options become available if you click the 'show advanced settings' checkbox? (Select 3)

Question166: To better analyze live traffic on Cascade Shark from Cascade Pilot you should:

Question167: What are possible explanations for no Server Delay measurement being reported for a particular flow?
(Select 4)

Question168: Cascade Profiler provides identity information collected from Active Directory 2008 by installing and correctly configuring the 'Cascade Connector' agent software on:

Question169: How is QoS data obtained in a Cascade Profiler? (Select 2)

Question170: Which of the following are true about Trend/Index data on a Cascade Shark appliance. (Select 3)

Question171: What can be configured on the Cascade Profiler to detect utilization for an interface? (Select 2)

Question172: Trace clips in Cascade Pilot allow you to:

Question173: In defining a user defined policy on Cascade Profiler that triggers when the aggregate connection rate from any internal host to all external hosts exceeds a certain threshold, one has entered "within internal" for host/group A and "outside internal" for host/group. How should the statistics be tracked for host/group A and B?

Question174: Link Congestion policies apply to a specific interface and can: (Select 3)

Question175: What are the two (at a minimum) devices you need to configure in Cascade Profiler for Switch Port Discovery integration to work for a portion of the network?

Question176: If a VLAN SPAN (VLAN101) is configured and monitored by Cascade Shark, which of the following is true?
(Select 2)

Question177: In the Cascade Profiler GUI, where can you mark a TCP port as a Server Port?

Question178: Hosts that do not match group definitions within a group type are:

Question179: Which of the following is information that Netflow v5 provides to the Cascade solution? (Select 2)

Question180: If you have a Steelhead at a branch office, and if there is only one device you are allowed to collect flow data from, which device would be the best choice, if visibility of data before and after optimization and reporting on data reduction is important?

Question181: Which Cascade device actually polls for the SNMP information in the switch port Discovery process?

Question182: A system administrator needs to update their Cascade Profiler host group settings to remove references to a decommissioned office on the 10.63.32.0/24 subnet.

What is the best way to do this?

Question183: Cascade de-duplicates the same conversation if it traverses multiple exporting Sensor devices. What is the maximum number of hops Cascade will preserve data for?

Question184: Watches within Cascade Pilot refer to:

Question185: How do all the Cascade components stay time synchronized?

Question186: A router that has been recently configured to send NetFlow to a Cascade Gateway has yet to appear in the Devices/Interfaces page on the Cascade Profiler. What are the most likely thing to check?

Question187: The Cascade Shark de-duplication mode should be used:

Question188: In this scenario, you have created a host group called My_Computers on Cascade Profiler. In that group you have included the subnet 192.168.1.0/25.
You have 10 devices in that group 192.168.1.1-10. The rest of the addresses are unused. While running reports on this segment of the network you notice that when a report is run using the entire subnet you see traffic destined for 192.168.1.120. When you run the same report specifying the host group the traffic does not appear. Why is this happening?

Question189: When initializing data for service metrics or analytics, for what minimum percent of the time must relevant and valid data be present for the service to properly initialize?

Question190: On the Cascade Shark appliance, packet de-duplication should be enabled when:

Question191: When working with capture job traces on a Cascade Shark appliance from Cascade Pilot:

Question192: Which parameters can be used to set up an Application Performance analytic on Cascade Profiler?

Question193: When creating a custom view in Cascade Pilot, customizations may include. (Select 3)

Question194: When drilling down from a Cascade Profiler traffic report to analyze the underlying packets in Cascade Pilot, which of the following is NOT required?

Question195: Refer to the exhibit.

What is the meaning of the configuration option shown?

Question196: Trace clips that no longer have data because their packet data and trend data is no longer available in the parent capture job trace:

Question197: Cascade Profiler is reporting the traffic on Steelhead optimized flows separately than the connections on tcp/7800 between two Steelheads. In other words, from Cascade you see flows for traffic on various ports used natively by the clients and servers across the steelhead as well as flows for tcp/7800. What does this indicate?

Question198: On Cascade Profiler, what is the purpose of a Service Segment when creating a new service?

Question199: On Cascade Profiler, in terms of retention of completed reports and reporting sources (one minute flow and rollup files), which of the following is true? (Select 4)

Question200: Quality of Service information is obtained from what Cascade sources?

Question201: What best describes the Rebalance and Reallocate buttons on the Configuration/Flow Log page of the Cascade Profiler? (Select 2)

Question202: In the Cascade Profiler GUI, what are two default dashboards that are automatically created for each user account? (Select 2)

Question203: In order to analyze data captured by a Cascade Shark appliance. (Select 3)

Question204: A SPAN port is often limited in which way:

Question205: What does Cascade use as the flow key to identify a unique flow?

Question206: When links in a network are using WAN optimization, it is best if the Cascade Profiler or Express receives data from a _________or _________ monitoring traffic on the LAN side of the Steelhead that is located on the server side of the optimized connection. This is necessary in order to determine server delay.
(Select 2)

Question207: What information is required to configure the Switch Port Discovery feature in the Cascade Profiler?
(Select 2)

Question208: Which of the following metrics are monitored in an Application Performance Policy? (Select 4)

Question209: Additional data sources that Cascade Profiler can leverage besides flow data are. (Select 3)

Question210: For Service policies that get applied to End User segments, by default separate policies are tracked by location for the client traffic. Which of the following is NOT true regarding flexibility in configuration of these End User segments?

Question211: How does Cascade Profiler obtain switch port discovery and population information?

Question212: Within Cascade Pilot, Sequence Diagrams allow you to display information between two end points. You have a choice of displaying information for two different layers in the network stack. Descriptions of the sequence diagrams for the two Layers follow: (Select 2)

Question213: Which configuration screen or screens are edited on the Cascade Shark to change names used by certain ports within various views on Cascade Pilot:

Question214: Which version of SNMP is supported for Switch Port Discovery on Cascade Profiler?

Question215: How many Host Group Types can be tracked on the Dashboard within the Cascade Profiler GUI?

Question216: Assume five different devices reported the same flow/conversation to the Cascade Profiler - two Riverbed Steelheads, two routers, and a Cascade Sensor in the data center. For a query that looks only for all traffic between the client and server (i.e., no devices or interfaces were specified on the query), what bandwidth and packet values will be reported?

Question217: How many items can be displayed in a single watched list in a Profiler Dashboard Content Block?

Question218: Once the Cascade Shark appliance has an initial configuration with an IP Address set to 10.1.1.1 you can connect to it from a web browser using the URL:

Question219: On the Cascade Shark Appliance, which User Groups on the appliance exist by default:

Question220: Which fields are generally available for export using NetFlow technology?

Question221: Which of the following will result in RTT values not being available for a flow? (Select 2)

Question222: What options are available on Cascade Profiler for triggering an alert when QoS tagging for a flow has changed along the way from remote site to data center location?