42) You believe that a QoS misconfiguration may be causing poor performance on your network.

What should you check to verify that QoS is the root cause?

A) bandwidth and packet drops

B) CPU and memory

C) bandwidth and availability

D) response and errors

43) The network management system (NMS) has detected that a router has an interface going up
and down unexpectedly. You do not have permissions to log in to the router.

Which data, gathered by the NMS, should you review to help determine the cause?

A) Syslog messages

B) interface utilization

C) previously saved configurations

D) CPU utilization

44) You have configured alerts to notify you of high CPU load on your devices. Your network
management system (NMS) is detecting high CPU load, but alerts are not being triggered.

What is the most likely cause of this issue?

A) The alert trigger threshold is set too high

B) There is more than one CPU in the monitored device

C) There is insufficient memory in the monitored devices

D) SNMP is not configured on the monitored device

45) What should you check when trying to determine why your routers' interfaces are having high
packet loss?

A) the reports for high utilization that is above your critical threshold

B) the event reports, to see when the packet loss is occurring

C) the Syslog messages for any signs of packet loss that is occurring

D) the alerts, to verify which interface is dropping packets during the day
46) You are using NetFlow to analyze the traffic on your network. You notice that you have a large
amount of traffic originating from various systems in your network destined to a single unrecognized
off-net IP address during otherwise off-peak hours.

What is the most likely cause?

A) a malware or virus breakout on your network

B) a new, popular YouTube video being sent around the office

C) higher than average VoIP usage from your overseas sites

D) automated server backups occurring within your network

47) You notice that several routers are showing an increase in CPU and memory utilization that is
starting to concern you.

What will likely happen if this trend continues?

A) Access control lists (ACLs) will be bypassed by the routers

B) The network management system (NMS) will stop monitoring the routers

C) The routers will deprioritize and drop packets over 1500 bytes

D) Latency through the routers will increase

48) What is the most logical first question a network administrator should ask a user who complains
of slow access to an Internet website?

A) What is your IP address?

B) When was the last time you rebooted your desktop?

C) What is the URL of the site your are trying to access?

D) Which operating system is on your workstation?

49) Users are reporting slow response across a WAN circuit. You have analyzed the bandwidth
utilization of a WAN circuit for the last 30 days and determined the following:

Most of the time the circuit stays below 30% utilization.

A few times per day the circuit hits 90% utilization.

Occasionally the circuit reaches 100% utilization.

What is the most appropriate action?

A) use NetFlow to gather more data

B) contact your ISP and decrease the size of the circuit

C) contact your ISP and increase the size of the circuit

D) reconfigure the circuit for full duplex

50) You notice that network performance over an inter-campus Ethernet link is very slow, and one
side of the connection is experiencing a high number of packet drops.

What should you do to further analyze this issue?

A) check duplex settings on each side of the link

B) check the speed of the interfaces

C) check the routing tables on each side of the link

D) check the MTU of each side of the link

51) What is the most direct way to measure an application's performance?

A) collect application server CPU and memory statistics

B) ping the application server

C) time application transactions

D) collect application data in NetFlow

52) An Orion NPM user wants to be able to make changes to the resources as they view them on the
Orion Web Console.

What must be done to the user's account?

A) Allow Admin Rights must be disabled

B) Allow View Customization must be enabled

C) An Account Limitation must be defined

D) Allow Node Management Rights must be activated

53) One of your network engineers is using both Orion NPM and Engineer's Toolset. The engineer
cannot access the toolset from within the Orion Web Console.

What should you enable on the engineer's Orion account?

A) Allow Administrator Rights

B) Allow PassLink

C) Allow Browser Integration

D) Allow Advanced Customization

54) An Orion NPM administrator is monitoring a network device using ICMP only.

Assuming that the administrator has access to the community string for the device, how should the
administrator add additional monitoring statistics for this device, while preserving historical data?

A) add the node again and provide the SNMP credentials

B) edit the node properties and provide the SNMP credentials

C) edit the node details and modify the communication port

D) add the node again and modify the communication port

E) delete the node, then add it again and provide the SNMP credentials
55) When you look at utilization graphs for a given interface, they show greater than 100% utilization.

Which interface configuration change will correct this issue?

A) decrease custom bandwidth

B) increase polling interval

C) decrease polling interval

D) increase custom bandwidth

56) An Orion NPM administrator wants to separate the duties of two network engineers, as follows:

One engineer should see web views, alerts, and reports for the devices in Sydney only.

The other should see web views, alerts, and reports for the devices in Perth only.

Which two Orion NPM components should be used to accomplish this task? (Choose two)

A) Orion Service Manager

B) Map Maker

C) Account Limitation Builder

D) Custom Property Editor

E) System Manager

F) Web Console Settings

57) The Universal Device Poller (UnDP) can only retrieve information in which format?

A) ANSI 1

B) MIB

C) XML

D) WMI
58) Where should an alert be created for a Universal Device Poller (UnDP)?

A) Basic Alerts Manager

B) Universal Device Poller

C) Orion Web Console

D) Advanced Alert Manager

59) Various users of the Orion NPM website need exclusive access to different set of reports.

How should this be accomplished?

A) Save the reports in different sub-directories under \Reports and set those as the Report
Folder for each account

B) Use custom properties and account limitations to control report access

C) Save the reports in different sub-directories and set the permissions for each user

D) Create the reports while logged in as each user and set the appropriate permissions

60) You need to write a report that shows network response time on an hourly basis for the past 30
days. When you try to set the summarization setting in the report to hourly, you get a reporting error.

What is a possible cause of this issue?

A) Response time data are only being collected every 60 minutes

B) Hourly data are being summarized into weekly data every 15 days

C) Response time data are only being collected every 30 minutes

D) Hourly data are being summarized into weekly data every 40 days

61) Every Monday morning, you need to provide a report on the previous week's network-wide
availability.

Which component should you use to accomplish this task?

A) Orion Report Writer

B) Windows Task Scheduler

 C) Orion Report Scheduler

D) Orion Web Console Schedule

62) An Orion NPM administrator creates an alert trigger that reads:

Trigger Alert when all of following apply: Average Xmit+Recv Percent Utilization is greater than 80.

How should the administrator limit this alert to interfaces on nodes located in Austin?

A) create a node custom property that represents the location of the node and include "Location is
equal to Austin" as a complex trigger condition

B) create an interface custom property that represents the location of the node and include "Location
is equal to Austin" as a complex trigger condition

C) create a node custom property that represents the location of the node and include "Location is
equal to Austin" as a simple trigger condition

D) create an interface custom property that represents the location of the node and include "Location
is equal to Austin" as a simple trigger condition

63) In the Orion NPM Advanced Alert Engine, how should you ensure that the trigger action will behave
as you expect?

A) test the alert from within Alert View of the Orion Web Console

B) test by simulating a performance interruption on a network device

C) modify performance values in the database via Database Manager

D) test the alert from within Advanced Alert Manager

64) Your network has a few critical devices on the other side of a WAN link from your Orion server. If
the router (name = "target") connecting Orion to the remote site goes down, you do not want alerts
about those devices.
How should you configure Orion NPM Alert Suppression within the Advance Alert Engine to achieve your
goal?

A) suppress alert when all of the following apply: Node Name is equal to "target" | Node Status is
equal to "Down"

B) suppress alert when all of the following apply: Node Name is equal to "target" | Interface Status is
equal to "Down"

C) suppress alert when any of the following apply: Node Name is equal to "target" | Node Status is
equal to "Down"

D) suppress alert when any of the following apply: Node Name is equal to "target" | Interface Status is
equal to "Down"

65) You wish to retain Syslog messages in Orion NPM for 30 days.

Which Orion component should you use to do this?

A) Syslog Service Settings

B) Database Manager

C) System Manager

D) Syslog Viewer

66) Which method should be used to calculate a Syslog message priority?

A) Facility * Severity

B) Facility + Severity

C) Facility * 8 + Severity

D) Facility * 8 / Severity

67) The Orion NPM administrator needs to see when an interface is above 85% utilization.

How can you make sure the gauges highlight this?

A) use the NPM settings to change the thresholds for the high level

B) use the Manage Views admin function to set up a specific view

C) use a custom report resource to show high percent utilization

D) use an admin account to edit the gauge resources to set thresholds

68) An Orion NPM administrator enables audible alerts through the Orion Web Console.

Assuming you are on a view that shows alerts, when will the audible alert be triggered?

A) whenever your view includes Nodes With Problems

B) when you first log in to the Web Console

C) whenever a new alert has appeared since the last refresh

D) every 10 minutes if there is an active alert

69) The Orion NPM administrator needs to create an NOC view that has only a summary page.

Which Orion component should you use to accomplish this?

A) Account Limitation Builder

B) Custom Property Editor

C) System Manager

D) Customize Menu Bars

71) Which two steps are required to create a nested map using Orion NPM? (Choose two.)

A) create a site overview map and a separate site details map

B) add a hyperlink from the site details map to the site overview

C) select "Enable Nested Maps" on the site details map

D) drag and drop the site details map onto the site overview map

E) create a single map that includes both site overview and site details

72) During the planning process, which two factors determine the license level required for Orion
NPM? (Choose two)

A) total number of CPUs of monitored devices

B) total number of sites

C) total number of users

 D) total number of interfaces

E) total number of nodes

73) Your current deployment has multiple Orion NPM servers monitoring multiple locations from a
single site. This is producing inaccurate data and high WAN bandwidth utilization.

What are the two most efficient ways to address this issue? (Choose two)

A) deploy an additional Orion Web Server

B) deploy an additional Orion Poller

C) deploy Orion Enterprise Operations Console

D) deploy Orion NPM at each remote location

E) deploy an Orion Hot Standby

74) Which two actions are required to integrate Engineer's Toolset with the Orion Web Console?
(Choose two)

A) install Orion Web Console on the user's machine

B) install Toolset on the user's machine

C) enable Allow Administrator Rights on the user's account

D) enable Allow Browser Integration on the user's account

E) enable Advanced Customization on the user's account

75) Which Orion NPM module allows you to create user-experience monitors?

A) Application Performance Monitor

B) NetFlow Traffic Analyzer

C) Network Configuration Manager

D) IP Address Manager

http://www.solarwinds.com/server-application-monitor/user-experience-monitors.aspx

76) You are looking for information on configuring an Advanced Alert on Orion NPM.
What is the first action you should take to get an answer from Thwack?

A) post a question in the Orion Advanced forum

B) search for "advanced alert" and reply to a thread that is closely related

C) post a question to the Orion Network Performance Monitor forum

D) search for "advanced alert" and see if there are any verified answers

77) Accounting has asked you for a report that provides a list of all the interfaces that have exceeded
85% utilization for the last 30 days. This data exist in Orion NPM, but there is no default report available.
Browsing the Thwack Content Exchange, you find a report exists that will satisfy accounting's request.

How should this OrionReport definition file be applied to the Orion NPM system?

A) import using Report Writer

B) upload using Web Administration

C) import using System Manager

D) copy to the Orion NPM server