Deck 1: SolarWinds Certified Professional

Question 1

Which protocol should a network engineer enable on routers and switches to collect utilization statistics?

A) ICMP
B) SNMP
C) SMTP
D) WMI

Answer 1

B

Question 2

The IT planning department has asked for a report to help them understand when they need to implement IPv6. Which report would offer them the greatest amount of relevant information?

A) unique NetFlow exporters
B) DHCP server CPU utilization
C) number of subnets
D) IP address utilization trends

Answer 2

D

Question 3

How can you use a network management system (NMS) to ensure service level agreement (SLA) parameters are realistic for your environment?

A) increase data collection period
B) configuredata summarization
C) reducedata retention period
D) baseline network performance

Answer 3

D

Question 4

Which two variables are used in the calculation of Percent Utilization? (Choose two.)

A) configured bandwidth
B) packets per second
C) buffer overruns
D) interface discards
E) bits per second

Question 5

A network engineer is enabling SNMP on their network devices and needs to ensure it will use message integrity. Which version of SNMP should they use?

A) SNMPv1
B) SNMPv2c
C) SNMPv3
D) SNMPv4

Question 6

A network engineer is planning to deploy a network management system (NMS) to monitor a large campus network. What is the most secure way to isolate the NMS network traffic to all monitored routers and switches?

A) add the NMS IP address to the permissions for each device
B) create a management VLAN for the NMS
C) open onlythe appropriate ports on the routers and firewalls
D) enable SNMPv3 on the switches

Question 7

Which two reporting requirements should you consider when specifying data roll-up settings for a network management system (NMS)? (Choose two.)

A) data encryption
B) data format
C) data granularity
D) monitoring coverage
E) data retention

Question 8

What should you do to track whether a new configuration has alleviated slow network performance?

A) compare ICMP availability before and after the change
B) compare application responsiveness before and after the change
C) monitor the affected devices for stability
D) monitor bandwidth utilization on affected interfaces

Question 9

Orion NPM is using SNMP to poll a routerand track interface traffic rates. The data are Collected every 5 minutes, and the most recent values collected for a specific interface are 1,000,000 and 2,000,000 octets. What is the approximate average rate of traffic for this interface?

A) 1 Kbps
B) 3 Kbps
C) 16 Kbps
D) 26 Kbps

Question 10

Orion NPM is monitoring the performance of DS-3 utilizing standard MIBs in the ifTable. Occasionally, the reported traffic rates for this interface spike well above45 Mbps. What is the most likely cause?

A) heavy network traffic
B) carrier misconfiguration
C) counter rollovers
D) database issues

Question 11

You have recently implemented a VoIP infrastructure within the company network. You are receiving trouble tickets indicating calls are dropping between their New York and San Francisco offices. Which two IP service level agreement (SLA) measurements should you use to identify the cause of the issue?

A) latency
B) SIP
C) NetFlow
D) available bandwidth
E) jitter

Question 12

You are monitoring your Internet connection, and your ISP has guaranteed512 Kbps. Historical data shows that your connection speed holds at 256 Kbps for long periods of time, but never exceeds this speed. What does this indicate?

A) the ISP has misconfigured the link.
B) the WAN router is misconfigured.
C) the NAT table is overloaded.
D) QoS is dropping low priority traffic.

Question 13

Which two performance metrics can be affected by proper QoS implementation? (Choose two.)

A) jitter
B) shaping
C) marking
D) queuing
E) latency

Question 14

The data center team requires that they be alerted if any of the servers in a remote site go down. However, they do NOT want to receive alerts when the remote site connection goes down. Which two configuration steps should you take within your network management system (NMS) to meet these requirements? (Choose two.)

A) set up alerts on server status
B) set up alerts on the remote connection status
C) set each of the servers as dependencies for each other
D) set up the remote connection as a dependency for each of the servers
E) set up alerts on the remote router status

Question 15

What is an advantage of using SNMPv2c over using SNMPv1?

A) username parameter
B) get bulk command
C) get next command
D) 32 bit counters
E) authentication and encryption

Question 16

Which management protocol should you use to analyze network traffic in and out of a router interface?

A) WMI
B) Syslog
C) IP service level agreement (SLA)
D) sFlow

Question 17

How does the Orion Universal Device Poller (UnDP) monitor a device's statistics that are Not included in the standard Orion NPM MIB database?

A) by manually associating the device'sOID to Orion
B) by keeping a copy of the device's MIB on the Orion NPM Server
C) by automatically searching the common MIB repositories and updating Orion
D) by manually compiling the MIB into the Orion MIB database
E) by manually compiling the OID into the Orion MIB database

Question 18

IT management wants to know how they can lower their total power consumption by consolidating equipment and shutting off unnecessary equipment. Which type of report can you create to help them plan for this?

A) bandwidth utilization
B) available switch ports
C) router CPU utilization
D) total NetFlow endpoints

Question 19

Due to a server crash, you had to move Orion to a new server with a new IP address. Which two changes should you make to ensure that Orion functions properly from the new server and IP address? (Choose two.)

A) update the access control lists (ACLs) that restrict management protocols
B) change the IP address specified in the snmpd. conf file on the Orion server
C) updates the source address for Net Flow packets exported to Orion
D) notify ARIN of the Orion server's new IP address
E) update the destination IP address for Syslog and SNMP traps on your managed devices

Question 20

When monitoring a remote router with a network management system (NMS), which interface provides the most reliable connectivity?

A) the WAN interface on the router
B) the LAN interface on the NMS
C) the loopback interface on the router
D) the loopback interface on the NMS

Question 21

Which traffic type should be allowed through the network in order to leverage HTTPS for network monitoring?

A) TCP traffic on port 443
B) UDP traffic on port 443
C) TCP traffic on port 1433
D) UDP traffic on port 1433

Question 22

Which two metrics should be monitored to determine if a network device is overloaded? (Choose two.)

A) CPU utilization
B) bandwidth utilization
C) memory utilization
D) packet loss
E) response time

Question 23

A network engineer would recommend decreasing polling frequency in order to address which topology-based issue?

A) high CPU values on WAN routers
B) WAN bandwidth availability
C) SQL database scalability issues
D) redundancy for single-homed sites

Question 24

Without regard to reliability, what is the fastest method for detecting network faults?

A) listening for SNMP traps
B) querying with SNMP
C) analyzing traffic with NetFlow
D) querying with WMI

Question 25

You are monitoring a Windows 2003 Server via SNMP. Which service must be enabled on the target server to allow the network management service (NMS) to collect CPU load data?

A) SNMP Trap Service
B) SNMP Service
C) WMI
D) Events to Traps Translator Service

Question 26

Users at a remote site in Paris are complaining that access to the company CRM is slow. Orion is collecting data on this performance, but you need a more real-time perspective on the problem. What should you do?

A) install an Orion polling engine to collect real-time data at the site in Paris
B) increase the polling interval in Orion for monitoring of devices in Paris
C) launch a real-time tool to measure and analyze performance while the problem is occurring
D) use the Polling Engine Tuner to increase the Max Polls Per Second settings in Orion

Question 27

Which trend analysis report would most accurately predict user count growth?

A) numbers of active switch ports
B) network-wide bandwidth utilization
C) network-wide availability
D) number of active WAN interfaces

Question 28

Orion NPM is showing that a router in a remote site is down. However, Orion indicates that other devices at that site are up. What is the most likely cause?

A) ICMP replies have been disabled on the router.
B) The router Ethernet port is unplugged.
C) SNMP replies have been disabled on the router.
D) Orion NPM is misconfigured.

Question 29

Wireless users are complaining of sporadic network access issues. After reviewing the data collected by Orion, it seems that there is one specific wireless user that is causing the issue and that every WAP that they connect to is adversely affected. What should you do to resolve this issue?

A) block this user's MAC address from connecting to your WAPs
B) block this user's IP address from connecting to your WAPs
C) implements QoS to de-prioritize this user's network traffic
D) increase the bandwidth allocation for the connections to the WAPs from the wired network

Question 30

You are using a protocol analyzer to capture a packet trace in order to troubleshoot a specific network problem. Which change must you make on the Ethernet switch in order to facilitate the packet capture?

A) mirror or span traffic to the switch's console port
B) update access lists to allow layer 2 traffic to be transferred to the capture port
C) mirror or span traffic to the port where your analyzer is connected
D) add the port where your analyzer is connected to the target VLAN

Question 31

Refer to the following configuration snippet of a Cisco IOS router: snmp-server community private RO 60 snmp-server host 192.168.15.4 private access-list 60deny 192.168.12.0 255.255.240.0 access-list 60 permit snmp 192.168.15.4 The network management system (NMS) IP address is 192.168.15.4, and it is receiving SNMP traps from the router, but it is not able to poll the router. Why is the NMS unable to poll the router?

A) SNMP is not enabled on the router.
B) No public community string is configured.
C) The access-list is denying SNMP access from the NMS.
D) The NMS requires a read-write community string.

Question 32

Over the course of 24 hours, a node was sent 200 ping requests in an effort to monitor its availability. Of those 200 ping requests there were: 100 responses of less than 10ms 50 responses of greater than 20ms 50 requests with no responses What was the availability of that node during this period of time?

A) 60%
B) 70%
C) 75%
D) 80%

Question 33

Why are management loopback interfaces important when managing routers, switches, and firewalls?

A) They have an IP address of 127.0.0.1, and therefore, are not routable.
B) They are always available, even if the device is down.
C) They provide unique statistics on interface traffic.
D) They are "up" and reachable as long as the device itself is reachable.

Question 34

What is the most reliable method of detecting network issues?

A) listening for SNMP traps
B) listening for Syslog messages
C) conducting SNMP polling
D) monitoring traffic with NetFlow

Question 35

Which port status is caused by users disconnecting their machines from an Ethernet switch?

A) down
B) shutdown
C) unknown
D) testing

Question 36

Users of a remote site are complaining that network performance is intermittently slow. You review the current status of their network with Orion NPM and do not see any issues. What should you do next?

A) analyze the performance of the remote site over the last 30 daysto look for problems
B) monitor the performance of the remote site for the next 30 days to look for problems
C) install a protocol analyzer or probe at the remote site to capture detailed performance data
D) block access from the site to non-business related Internet sites to boost network performance

Question 37

A firewall separates Orion NPM and the network devices it is monitoring. Only encrypted communication will be allowed from the server for polling and configuration management. Which two ports will need to be allowed through the firewall? (Choose two.)

A) 22
B) 23
C) 69
D) 80
E) 161
F) 2055

Question 38

While monitoring your network with Orion NPM, you notice that several of the devices in your remote offices periodically go into a "warning" state, but then quickly go back into an "up" state. While the devices are in "warning" state, the users at those sites report normal operations. What is the most likely cause of this occurrence?

A) Orion NPM is configured to poll too frequently.
B) During network congestion, ICMP packets are being dropped.
C) Orion NPM is not configured to poll frequently enough.
D) Firewall rules are periodically blocking ICMP packets.

Question 39

What is the maximum allowable downtime for a node with a"four nines" (99.99%) service level agreement (SLA) for availability, based on a 30-day month?

A) fourseconds
B) fourminutes
C) fourhours
D) fourdays

Question 40

Which network management system (NMS) statistic is most likely to indicate a potential network growth issue?

A) bandwidth utilizations
B) uptime
C) response time
D) packet losses

Question 41

One of your network administrators has deployed a new access control list (ACL) that blocks UDP port 69. As a result of this change, what might the network management system (NMS) NO longer be able to do?

A) poll devices for status
B) collect Syslog messages from your devices
C) collect SNMP traps from your devices
D) update IOS on your devices

Question 42

Which Orion NPM module allows you to create user-experience monitors?

A) NetFlow Traffic Analyzer
B) Network Configuration Manager
C) Application Performance Monitor
D) IP Address Manager

Question 43

While isolating a bandwidth issue using your network management system (NMS), you discover that the percent utilization for an interface is over 100%. What is a possible cause?

A) There is a duplex mismatch on this interface.
B) The NMS is configured with the wrong interface speed.
C) The NMS is monitoring too many interfaces.
D) Packet loss is exceptionally high on this interface.

Question 44

You believe that a QoS misconfiguration may be causing poor performance on your network. What should you check to verify that QoS is the root cause?

A) response and errors
B) CPU and memory
C) bandwidth and availability
D) bandwidth and packet drops

Question 45

When monitoring the performance of the WAN connection to a remote site, you notice that latency varies from 10 to 1700 milliseconds and that bandwidth utilization is commonly over 90%. Which type of traffic would be the most adversely affected by this situation?

A) email
B) SNMP polling
C) VoIP
D) Syslog

Question 46

Orion is displaying a device as "down" and is unable to communicate with the device via ICMP. However, you are able to ping that device from the command-line on the Orion server. Orion is displaying other devices as being "up". What is a possible cause of this issue?

A) The Orion polling engine has stopped and needs to be restarted.
B) Orion is using a different version of ICMP than the one CLI is using.
C) The Orion ICMP messages have the discard eligible bit set.
D) ICMP messages with content in the payload portion of the packets are being blocked.

Question 47

An Orion NPM user wants to be able to make changes to the resources as they view them on the Orion Web Console. What must be done to the user's account?

A) Allow Node Management Rights must be actived.
B) Allow Admin Rights must be disabled.
C) Allow View Customization must be enabled.
D) An Account Limitation must be defined.

Question 48

Lower than normal throughput is being experienced between two routers. What can be seen on the router interface that may be contributing to this issue?

A) discards due to router access control lists (ACLs)
B) drops from malformed packets
C) when the traffic change occurred
D) routing changes

Question 49

A device is NOT responding to pings. What can you determine from this information?

A) The device may be down.
B) The device is down.
C) The device is a firewall.
D) There is no route to the device.

Question 50

You are investigating sudden slowness throughout the network. The routing tables are changing continuously and routes to many areas of the network are appearing and disappearing with each update. How should you investigate the cause of this issue?

A) examine the available memory
B) analyze routing protocol packets
C) look for switch ports that are off
D) look for WAN interfaces changing status

Question 51

As your Orion NPM deployment grows, you need to add pollers to the system, but due to budgetary constraints, you are unable to do so. What should you do in the short term to allow you to add a few more elements?

A) adjust polling intervals
B) adjust data retentions
C) reduce the number of reports
D) reduce the number of users

Question 52

The application team at your company has informed you that they have deployed a new desktop application that communicates over a specific set of ports. What is the first step to determining the impact this application is having on your network?

A) check ping times of all of the servers
B) monitor the new application processes on the servers
C) reconfigure the SNMP agents to use the application ports
D) configure the NetFlow collector to monitor the application ports

Question 53

You have a hub and spoke network with three sites. The application servers all located within the headquarters, which is the hub of the network. Users in spoke site A complain that they cannot get to the company's accounting server. Users in spoke site Bare not affected. Which two steps should you take in troubleshooting this issue? (Choose two.)

A) verify that user sat the headquarter scan reach the accounting server
B) verify that users in site A can access other resources outside of their site
C) verify that users in site B can access resources in the headquarters
D) verify that the accounting server is online
E) verify that the accounting server can access site A

Question 54

While growing the network monitoring team, what is the most appropriate way to ensure that the Orion NPM is not over-utilized?

A) create an administrator account for all users
B) have all users access the server remotely
C) deploy an additional poller
D) deploy an additional web server

Question 55

You are using NetFlow to analyze the traffic on your network. You notice that you have a large amount of traffic originating from various systems in your network destined to a single unrecognized off-net IP address during otherwise off-peak hours. What is the most likely cause?

A) a new, popular YouTube video being sent around the office
B) a malware or virus breakout on your network
C) automated server backups occurring within your network
D) higher than average VoIP usage from your overseas sites

Question 56

What is different about how network traffic statistics are collected using SNMP versus NetFlow?

A) NetFlow is push-based.
B) SNMP samples network traffic.
C) NetFlow traffic is encrypted.
D) SNMP traffic is real-time.

Question 57

When planning the deployment of the database server for Orion NPM, what are two primary considerations? (Choose two.)

A) database clustering
B) RAID configurations
C) CPU and memory size
D) type of NIC card used
E) type of RAM

Question 58

An executive in your company wants to see reports from the Orion website. However, Sarbanes-Oxley (SOX) rules preclude you from giving them an account for the website. Which type of access should you use to allow them to see reports that are sent to them?

A) PassLink
B) PassThrough
C) Guest
D) DirectLink

Question 59

Which two types of data does Orion NetFlow Traffic Analyzer collect from network devices? (Choose two.)

A) NBAR
B) NetFlow
C) IP service level agreement (SLA)
D) SNMP
E) sFlow

Question 60

Your company leverages Internet-based VPNs to provide connectivity to remote offices. At these sites, the users are connected directly to a layer 2 switch, which is then connected to a VPN concentrator that also provides basic routing functions. How should you analyze the traffic going to and from a remote site?

A) leverage NetFlow data from the outside interface of the VPN concentrator at the remote site
B) leverage NetFlow data from the outside interface of the VPN concentrator at your main site
C) deploy a protocol analyzer to the remote site between the switch and the concentrator
D) deploy a protocol analyzer to the main site between the VPN concentrator and the Internet

Question 61

You have created a custom report that shows "uptime" for each of your devices and would like to show the data from this report on the Orion Network Summary View. How should you accomplish this?

A) from within Report Writer, select "Make this report available from the Orion website"
B) add the "List of Reports" resource to the target view
C) add the "Custom HTML" resource to the target view and specify a link to the uptime report
D) add the "Report From Orion Report Writer" resource to the target view and specify the uptime report

Question 62

You want to configure a device to send a message when a specific event happens and have Orion NPM send an email when it receives that message. Which two steps must you take to achieve this goal? (Choose two.)

A) configure Orion System Manager to trigger an alert when any type of message is received
B) configure the device to send the target SNMP trap to the Orion IP address
C) configure the Orion Web Console to trigger an alert when any type of message is received
D) configure a rule in the Orion Trap Viewer to trigger when the target trap is received
E) configure Orion SNMP Trap service to trigger an alert when a target Syslog message is received

Question 63

The Orion NPM administrator wants users to see a different node details page for all Extreme Network switches. How should the administrator implement this change globally for all accounts?

A) use the Account Manager and select the new node details page for each account
B) use the Views by Device Type to change the view to the new nodes page
C) use the Manage Views and limit the new Nodes Details view
D) use the Account Views to assign the view to the guest account

Question 64

Your auditors require you to run monthly network performance reports and to save that data for three year. Using Orion NPM, how should you meet this requirement while optimizing the system around performance and database size?

A) build monthly reports, run them every month, save the output for three years
B) build monthly reports, run them monthly, retain the data in the database for three years
C) build annual reports that break the data out by month, run the reports annually, save the output for three years
D) build monthly reports, run them anytime the auditors request, retain the data in the database for three years

Question 65

What is the most efficient way to share a custom report with other Orion NPM users?

A) export a report from Report Writer and then upload it to the Thwack content sharing zone
B) download a model report from Thwack, and then paste it in your custom SQL query
C) upload a report to Thwack directly from System Manager
D) upload a report to Thwack from the Orion Web Console Report view

Question 66

When adding a node to Orion NPM, which user interface allows you to assign a Universal Device Poller (UnDP) as part of the same workflow?

A) System Manager
B) Web Node Management
C) Network Discovery Wizard
D) Seed File

Question 67

On a device in your network, there are many interfaces with similar identifiers (such as FastEthernet0/43 and FastEthernet0/44). Using only Orion NPM, how should you modify the name of each interface to provide a more descriptive identifier?

A) use a configuration utility to edit the interface's name on the network device
B) use an SSH client to edit the interface's name on the network device
C) use the Orion Web Console to edit the interface's Name field
D) use Orion System Manager to edit the Node Details field

Question 68

Your network has a few critical devices on the other side of a WAN link from your Orion server. If the router (name = "target") connecting Orion to the remote site goes down, you do not want alerts about those devices. How should you configure Orion NPM Alert Suppression within the Advance Alert Engine to achieve your goal?

A) suppress alert when any of the following apply: Node Name is equal to "target" | Node Status is equal to "Down"
B) suppress alert when any of the following apply: Node Name is equal to "target" | Interface Status is equal to "Down"
C) suppress alert when all of the following apply: Node Name is equal to "target" | Interface Status is equal to "Down"
D) suppress alert when all of the following apply: Node Name is equal to "target" | Node Status is equal to "Down"

Question 69

You want to monitor a specific device attribute that Orion NPM does not support by default. Which type of content should you download from the Thwack Content Exchange?

A) Universal Device Pollers (UnDP)
B) Device Templates
C) Application Monitor Templates
D) Custom Reports

Question 70

A network engineer has created a custom report in Orion NPM with the following parameters: 1. Fields are set to "Node ID, Node Name, Average Response Time." 2. Timeframe is set to "Last30 days." 3. Summarization is set to "Month." What is an accurate representation of what this report will display?

A) average response time for the last month on all devices and interfaces
B) average response time for the last month on all devices
C) average response time per day of the last month on all devices and interfaces
D) average response time per day of the last month on all devices

Question 71

An Orion NPM administrator enables audible alerts through the Orion Web Console. Assuming you are on a view that shows alerts, when will the audible alert be triggered?

A) every 10 minutes if there is an active alert
B) whenever your view includes Nodes With Problems
C) whenever a new alert has appeared since the last refresh
D) when you first log in to the Web Console

Question 72

Network engineers want the ability to see a custom property when the cursor hovers over a node on the map. How do you enable this functionality in Orion NPM?

A) add custom property labels to the nodes in the map
B) enable the custom property for map display
C) set up a drill-down text box for nodes in the map
D) configure a custom tool tip for the nodes in the map

Question 73

A network engineer notices the Syslog server's database is growing significantly in size due to the large number of devices sending Syslog messages. What should the engineer do to control database growth?

A) configure the Syslog server to discard unwanted messages
B) configure the devices and the Syslog server to use TCP-based Syslog
C) configure the devices and the Syslog server to use SNMPv3
D) configure the Syslog server to capture SNMP traps instead of Syslog

Question 74

Your company has asked you to expand your network management to include a new site with several hundred devices, although you are not sure how many. Using Orion Network Discovery, your top priority is completeness of discovery. Which two Orion discovery settings should you use to achieve your goal? (Choose two.)

A) exclude any new subnets found during the network discovery
B) include any new subnets found during the network discovery
C) include specific IP addresses through a seed file
D) decrease the overall speed of the discovery process
E) decrease the number of SNMP retries
F) increase the overall speed of the discovery process

Question 75

When you look at utilization graphs for a given interface, they show greater than 100% utilization. Which interface configuration change will correct this issue?

A) decrease polling interval
B) increase custom bandwidth
C) increase polling interval
D) decrease custom bandwidth

Question 76

Which Universal Device Poller (UnDP) transform should you use to reduce the number of decimal places shown in graphs and tables?

A) Truncate
B) ColumnMaximim
C) Maximum
D) Minimum

Question 77

Which network protocols are used by Solar Winds products during network discoveries?

A) ICMP and SMTP
B) DHCP and TFTP
C) PPTP and IMAP
D) ICMP and SNMP

Question 78

What would cause an NOC user's account to stay logged in indefinitely?

A) using Account Manager to give administrator rights to the NOC user
B) using Orion Web Console settings to increase timeout on the NOC user
C) using Account Manager to disable timeout on the NOC user
D) using the Orion NPM settings to change the default timeout

Question 79

You fail to receive any SNMP traps on the Orion NPM Server for 24 hours. What should you check first?

A) firewall rules
B) Windows services
C) polling frequency
D) bandwidth utilization

Question 80

Which limitation does the Orion NPM Advanced Alert Engine place on trigger and reset actions?

A) unlimited trigger actions, and unlimited reset actions
B) unlimited trigger actions, but no reset actions
C) limited to any one trigger action and one reset action per alert
D) limited to one message action (such as Syslog, Traps) and one log action (such as Windows event log, NetPerfMon Log) per alert