42)

You believe that a QoS misconfiguration may be causing poor performance

on your network.
What should you check to verify that QoS is the root cause?
A)

bandwidth and packet drops

B)

CPU and memory

C)

bandwidth and availability

D)

response and errors

43)
The network management system (NMS) has detected that a router has an
interface going up and down unexpectedly. You do not have permissions to log in to
the router.
Which data, gathered by the NMS, should you review to help determine the cause?
A)

Syslog messages

B)

interface utilization

C)

previously saved configurations

D)

CPU utilization

44)
You have configured alerts to notify you of high CPU load on your devices.
Your network management system (NMS) is detecting high CPU load, but alerts are
not being triggered.
What is the most likely cause of this issue?
A)

The alert trigger threshold is set too high

B)

There is more than one CPU in the monitored device

C)

There is insufficient memory in the monitored devices

D)

SNMP is not configured on the monitored device

45)
What should you check when trying to determine why your routers' interfaces
are having high packet loss?
A)
threshold

the reports for high utilization that is above your critical

B)

the event reports, to see when the packet loss is occurring

C)
occurring

the Syslog messages for any signs of packet loss that is

D)
the day

the alerts, to verify which interface is dropping packets during

46)
You are using NetFlow to analyze the traffic on your network. You notice that
you have a large amount of traffic originating from various systems in your network
destined to a single unrecognized off-net IP address during otherwise off-peak
hours.
What is the most likely cause?
A)

a malware or virus breakout on your network

B)

a new, popular YouTube video being sent around the office

C)

higher than average VoIP usage from your overseas sites

D)

automated server backups occurring within your network

47) You notice that several routers are showing an increase in CPU and memory
utilization that is starting to concern you.
What will likely happen if this trend continues?
A)
B)
the routers

Access control lists (ACLs) will be bypassed by the routers

The network management system (NMS) will stop monitoring

C)

The routers will deprioritize and drop packets over 1500 bytes

D)

Latency through the routers will increase

48)
What is the most logical first question a network administrator should ask a
user who complains of slow access to an Internet website?
A)

What is your IP address?

B)

When was the last time you rebooted your desktop?

C)

What is the URL of the site your are trying to access?

D)

Which operating system is on your workstation?

49)
Users are reporting slow response across a WAN circuit. You have analyzed
the bandwidth utilization of a WAN circuit for the last 30 days and determined the
following:

Most of the time the circuit stays below 30% utilization.

A few times per day the circuit hits 90% utilization.
Occasionally the circuit reaches 100% utilization.

What is the most appropriate action?

A)

use NetFlow to gather more data

B)

contact your ISP and decrease the size of the circuit

C)

contact your ISP and increase the size of the circuit

D)

reconfigure the circuit for full duplex

50)
You notice that network performance over an inter-campus Ethernet link is
very slow, and one side of the connection is experiencing a high number of packet
drops.
What should you do to further analyze this issue?
A)

check duplex settings on each side of the link

B)

check the speed of the interfaces

51)

C)

check the routing tables on each side of the link

D)

check the MTU of each side of the link

What is the most direct way to measure an application's performance?

A)

collect application server CPU and memory statistics

B)

ping the application server

C)

time application transactions

D)

collect application data in NetFlow

52) An Orion NPM user wants to be able to make changes to the resources as they
view them on the Orion Web Console.
What must be done to the user's account?
A)

Allow Admin Rights must be disabled

B)

Allow View Customization must be enabled

C)

An Account Limitation must be defined

D)

Allow Node Management Rights must be activated

53) One of your network engineers is using both Orion NPM and Engineer's Toolset.
The engineer cannot access the toolset from within the Orion Web Console.
What should you enable on the engineer's Orion account?

54)

A)

Allow Administrator Rights

B)

Allow PassLink

C)

Allow Browser Integration

D)

Allow Advanced Customization

An Orion NPM administrator is monitoring a network device using ICMP only.

Assuming that the administrator has access to the community string for the device,
how should the administrator add additional monitoring statistics for this device,
while preserving historical data?
A)

add the node again and provide the SNMP credentials

B)

edit the node properties and provide the SNMP credentials

C)

edit the node details and modify the communication port

D)

add the node again and modify the communication port

E)
credentials

delete the node, then add it again and provide the SNMP

55) When you look at utilization graphs for a given interface, they show greater
than 100% utilization.
Which interface configuration change will correct this issue?
A)

decrease custom bandwidth

B)

increase polling interval

C)

decrease polling interval

D)

increase custom bandwidth

56) An Orion NPM administrator wants to separate the duties of two network
engineers, as follows:
One engineer should see web views, alerts, and reports for the devices in Sydney
only.
The other should see web views, alerts, and reports for the devices in Perth only.
Which two Orion NPM components should be used to accomplish this task? (Choose
two)
A)

Orion Service Manager

B)

Map Maker

C)

Account Limitation Builder

D)

Custom Property Editor

E)

System Manager

F)

Web Console Settings

57)
The Universal Device Poller (UnDP) can only retrieve information in which
format?
A)

ANSI 1

B)

MIB

C)

XML

D)

WMI

58) Where should an alert be created for a Universal Device Poller (UnDP)?
A)

Basic Alerts Manager

B)

Universal Device Poller

C)

Orion Web Console

D)

Advanced Alert Manager

59) Various users of the Orion NPM website need exclusive access to different set
of reports.
How should this be accomplished?

A) Save the reports in different sub-directories under \Reports and set those
as the Report Folder for each account
B) Use custom properties and account limitations to control report access
C) Save the reports in different sub-directories and set the permissions for
each user
D) Create the reports while logged in as each user and set the appropriate
permissions

60) You need to write a report that shows network response time on an hourly
basis for the past 30 days. When you try to set the summarization setting in the
report to hourly, you get a reporting error.
What is a possible cause of this issue?
A)

Response time data are only being collected every 60 minutes

B)

Hourly data are being summarized into weekly data every 15

C)

Response time data are only being collected every 30 minutes

D)

Hourly data are being summarized into weekly data every 40

days

days

61) Every Monday morning, you need to provide a report on the previous week's
network-wide availability.
Which component should you use to accomplish this task?
A)

Orion Report Writer

B)

Windows Task Scheduler

C)

Orion Report Scheduler

D)

Orion Web Console Schedule

62) An Orion NPM administrator creates an alert trigger that reads:

Trigger Alert when all of following apply: Average Xmit+Recv Percent Utilization is
greater than 80.
How should the administrator limit this alert to interfaces on nodes located in
Austin?
A) create a node custom property that represents the location of the node and
include "Location is equal to Austin" as a complex trigger condition
B) create an interface custom property that represents the location of the node
and include "Location is equal to Austin" as a complex trigger condition
C) create a node custom property that represents the location of the node and
include "Location is equal to Austin" as a simple trigger condition
D) create an interface custom property that represents the location of the node
and include "Location is equal to Austin" as a simple trigger condition

63) In the Orion NPM Advanced Alert Engine, how should you ensure that the
trigger action will behave as you expect?
A)

test the alert from within Alert View of the Orion Web Console

B)

test by simulating a performance interruption on a network

device
C)
Manager
D)

modify performance values in the database via Database

test the alert from within Advanced Alert Manager

64) Your network has a few critical devices on the other side of a WAN link from
your Orion server. If the router (name = "target") connecting Orion to the remote
site goes down, you do not want alerts about those devices.
How should you configure Orion NPM Alert Suppression within the Advance Alert
Engine to achieve your goal?
A) suppress alert when all of the following apply: Node Name is equal to "target"
| Node Status is equal to "Down"
B) suppress alert when all of the following apply: Node Name is equal to "target" |
Interface Status is equal to "Down"

C) suppress alert when any of the following apply: Node Name is equal to "target"
| Node Status is equal to "Down"
D) suppress alert when any of the following apply: Node Name is equal to "target"
| Interface Status is equal to "Down"

65) You wish to retain Syslog messages in Orion NPM for 30 days.
Which Orion component should you use to do this?
A)

Syslog Service Settings

B)

Database Manager

C)

System Manager

D)

Syslog Viewer

66) Which method should be used to calculate a Syslog message priority?

A)

Facility * Severity

B)

Facility + Severity

C)

Facility * 8 + Severity

D)

Facility * 8 / Severity

67) The Orion NPM administrator needs to see when an interface is above 85%
utilization.
How can you make sure the gauges highlight this?
A)

use the NPM settings to change the thresholds for the high level

B)

use the Manage Views admin function to set up a specific view

C)

use a custom report resource to show high percent utilization

D)
thresholds

use an admin account to edit the gauge resources to set

68) An Orion NPM administrator enables audible alerts through the Orion Web
Console.

Assuming you are on a view that shows alerts, when will the audible alert be
triggered?
A)

whenever your view includes Nodes With Problems

B)

when you first log in to the Web Console

C)

whenever a new alert has appeared since the last refresh

D)

every 10 minutes if there is an active alert

69) The Orion NPM administrator needs to create an NOC view that has only a
summary page.
Which Orion component should you use to accomplish this?
A)

Account Limitation Builder

B)

Custom Property Editor

C)

System Manager

D)

Customize Menu Bars

71)
Which two steps are required to create a nested map using Orion NPM?
(Choose two.)
A)

create a site overview map and a separate site details map

B)

add a hyperlink from the site details map to the site overview

C)

select "Enable Nested Maps" on the site details map

D)

drag and drop the site details map onto the site overview map

E)

create a single map that includes both site overview and site

details

72)
During the planning process, which two factors determine the license level
required for Orion NPM? (Choose two)

A)

total number of CPUs of monitored devices

B)

total number of sites

C)

total number of users

D)

total number of interfaces

E)

total number of nodes

73) Your current deployment has multiple Orion NPM servers monitoring multiple
locations from a single site. This is producing inaccurate data and high WAN
bandwidth utilization.
What are the two most efficient ways to address this issue? (Choose two)
A)

deploy an additional Orion Web Server

B)

deploy an additional Orion Poller

C)

deploy Orion Enterprise Operations Console

D)

deploy Orion NPM at each remote location

E)

deploy an Orion Hot Standby

74) Which two actions are required to integrate Engineer's Toolset with the Orion
Web Console? (Choose two)
A)

install Orion Web Console on the user's machine

B)

install Toolset on the user's machine

C)

enable Allow Administrator Rights on the user's account

D)

enable Allow Browser Integration on the user's account

E)

enable Advanced Customization on the user's account

75) Which Orion NPM module allows you to create user-experience monitors?
A)

Application Performance Monitor

B)

NetFlow Traffic Analyzer

C)

Network Configuration Manager

D)

IP Address Manager

http://www.solarwinds.com/server-application-monitor/user-experiencemonitors.aspx

76) You are looking for information on configuring an Advanced Alert on Orion
NPM.
What is the first action you should take to get an answer from Thwack?
A)

post a question in the Orion Advanced forum

B)

search for "advanced alert" and reply to a thread that is closely

C)

post a question to the Orion Network Performance Monitor

related
forum
D)
answers

search for "advanced alert" and see if there are any verified

77) Accounting has asked you for a report that provides a list of all the interfaces
that have exceeded 85% utilization for the last 30 days. This data exist in Orion
NPM, but there is no default report available. Browsing the Thwack Content
Exchange, you find a report exists that will satisfy accounting's request.
How should this OrionReport definition file be applied to the Orion NPM system?
A)

import using Report Writer

B)

upload using Web Administration

C)

import using System Manager

D)

copy to the Orion NPM server