SolarWinds Updated Hybrid-Cloud-Observability-Network-Monitoring Exam Questions and Answers by salma

Comprehensive and Detailed Explanation From Exact Extract:

SolarWinds identifies and classifies flow traffic based on application and port mapping in the platform.

"Unclassified traffic in flow charts often occurs when an application is not mapped in the system, or when the application uses a port that is not defined in the SolarWinds Hybrid Cloud Observability (HCO) application mapping database. Flows from unsupported devices or flow direction do not cause unclassified application traffic—rather, they will not be collected or will be marked as unknown flows."

Thus, unclassified traffic can result from new or custom applications or changes in port usage that are not reflected in the configuration.

Comprehensive and Detailed Explanation From Exact Extract:

SolarWinds NTA maps flow sources to nodes by matching the IP address. If a device exports flows using a secondary IP (not the one defined as "primary" in SolarWinds), and the setting "Allow matching by other IPs" is not enabled, the flow will not map to a known node. The documentation explains:

"If flow packets are received from an IP address not designated as primary in SolarWinds, and matching by other IPs is disabled, the flow source is not linked to a node. Enable the setting to match by any device IP to resolve this issue."

Comprehensive and Detailed Explanation From Exact Extract:

SolarWinds determines node status by polling using ICMP (ping) and SNMP. If ICMP is blocked by a firewall or network device between the polling engine and the monitored node, the node will appear “down” in the web console even though it is actually up. Likewise, if the SNMP credentials configured in SolarWinds are incorrect, the polling engine cannot successfully query the device, leading to a false “down” status.

From the documentation:

“If ICMP packets are blocked or dropped, SolarWinds cannot determine node status, resulting in false down events.”

“Incorrect SNMP community strings or credentials will prevent node polling, and these nodes may appear down in the console.”

Changing the polling interval or node management settings does not directly cause this issue.

Comprehensive and Detailed Explanation From Exact Extract:

The standard unit for flow-based alerts in SolarWinds (e.g., NetFlow Traffic Analyzer) is megabits per second (mbps). Alerts regarding traffic rates, bandwidth utilization, and similar flow metrics are configured and displayed in mbps for consistency with network monitoring best practices.