Riverbed Riverbed Certifications 101-01 Questions & Answers

• Question 51:

  How many peers can a SteelHead synchronization its data store with?

  A. 1

  B. 2

  C. 3

  D. 4

  Correct Answer: A

  You can use RiOS data store synchronization for physical in-path, virtual in-path, or out-of- path deployments. You enable synchronization on two SteelHeads, one as the synchronization the primary, and the other as the synchronization backup.

  References: https://support.riverbed.com/bin/support/static/fbunsuuo632vi3jrspe0evbko9/html/u2pi6l52l 4drmhq3uhck9tu7hm/sh_9.2_dg_html/index.html#page/sh_9.2_dg/wccp.html

• Question 52:

  In order to achieve SteelHead SaaS optimization two things must happen. First acquire and install a subscription license to enable the feature, and then SteelHead SaaS must be configured. Which statement correctly describes the configuration step?

  A. Every SteelHead is configured with a registration key included in a RiOS upgrade.

  B. All the configuration is done from the Riverbed Cloud Portal.

  C. Every SteelHead is configured with a new license in the standard form LK1-SHSaaS- XXX.

  D. Every SteelHead is configured with the same registration key copied from the Riverbed Cloud Portal.

  Correct Answer: B

  You can use the Riverbed Cloud Portal to register or de-register SteelHead SaaS appliances, obtain the

  service status, manage SSL certificates, manage licenses, and enable optimization for available SaaS

  applications.

  Go to the Riverbed Cloud Portal > SaaS Platforms page and enable Acceleration Service for the SaaS

  application you want to optimized.

  Incorrect:

  not A, Not C: Register the SteelHead for SteelHead SaaS optimization with the registration key found on

  the Riverbed Cloud Portal.

  References: SteelHead SaaS User's Guide, RiOS Version 9.1, July 2015, page 22 https://

  support.riverbed.com/bin/support/download?did=ss8vmccdsam78ortbkvd9og1f7

• Question 53:

  Which SteelHead optimization feature provides layer 7 acceleration?

  A. MXTCP

  B. SDR

  C. LZ

  D. Optimization blades

  E. HSTCP

  Correct Answer: D

  Blade optimization is done at layer 7.

  Incorrect:

  not A: Max Speed TCP (MXTCP) works at the TCP layer, which is layer 4. Not B, not CD: SDR and LZ

  optimization are done at the TCP and UDP layer, not at layer 7.

  Not E: High Speed TCP (HS-TCP) works at the TCP layer, which is layer 4.

• Question 54:

  What is the remote port used for on a Riverbed hardware appliance?

  A. Remote control using a modem or ISDN device

  B. IPMI "lights out" Remote control management

  C. Export of netflow statistics

  D. SteelFusion Edge device connection

  E. Data store synchronization

  Correct Answer: B

  To configure the remote management port

  *

  Physically connect the REMOTE port to the network. You cable the remote management port to the

  Ethernet

  network in the same manner as the Primary interface.

  *

  Install the IPMItool on the client machine.

  *

  Assuming the IP address is 192.168.100.100, the netmask is 255.255.255.0, and the default gateway is

  192.168.100.1, assign an IP address to the remote management port.

  Etc.

  References: Stingray Services Controller Command-Line Interface Reference Manual, Version 2.0, December 2014, page 201 http://www.brocade.com/content/dam/common/documents/content-types/command- reference-guide/ brocade-services-director-comamnd-line-interface-reference-manual.pdf

• Question 55:

  Which of the following correctly describe the two topology deployment modes of SteelHead SaaS? (Select two.)

  A. In direct mode, the cloud optimized traffic is encapsulated at the branch-side SteelHead appliance.

  B. Direct mode cannot be used if the internet traffic exit points is centralized at the customer data center and not available from the branch.

  C. In backhaul mode the cloud-optimized traffic is encapsulated at the data center but the SSL optimization starts at the branch.

  D. Backhaul mode allows to optimize traffic to the cloud from the data center without the need of a branch SteelHead.

  Correct Answer: AC

  A: In direct mode, the ESH appliance encapsulates the traffic and sends it directly to a server in the Akamai (Branch Office xample) network. Akamai SureRoute optimization technology ensures that the traffic is forwarded through the Akamai network along the fastest path toward its destination at the data center hosting the SaaS application.

  Figure: Example of Direct Branch Internet Deployment C: Back-hauled Internet Deployment In this topology, the branch does not have its own connection to the Internet. All traffic directed to the Internet is back-hauled over a private WAN or VPN to the organization's data center.

  

  Although the DCSH encapsulates the traffic, it plays no role in the SSL optimization process. SSL optimization still takes place between the ESH appliance and the ACSH. Ensure that you establish the SSL peering trust between them.

  Figure: Example of Back-hauled Internet Deployment References: SteelHeadSaaS User's Guide, RiOS Version 9.1, July 2015, pages 8-9

  

• Question 56:

  Which SteelHead Mobile feature can dynamically disable client optimization when in an office equipped with a local SteelHead?

  A. Location Awareness

  B. Data store synchronization

  C. Fixed-target rules

  D. Branch WarmingE, Connection Forwarding

  Correct Answer: A

  Location awareness enables SteelHead Mobile to detect that it is in a branch office with a SteelHead, and

  it enables the SteelHead to optimize SteelHead Mobile traffic.

  Incorrect:

  Not D: Branch warming works in conjunction with location awareness, enabling the SteelHead Mobile user

  to experience warm acceleration regardless of the location. Branch warming tracks the data segments

  created while a SteelHead Mobile is in a SteelHead- enabled branch office.

  References:

  https://support.riverbed.com/bin/support/static/fbunsuuo632vi3jrspe0evbko9/html/u2pi6l52l

  4drmhq3uhck9tu7hm/sh_9.2_dg_html/index.html#page/sh_9.2_dg/smc.html#ww243969

• Question 57:

  You have a SteelHead with paths over a public and a private network. You want to encrypt the traffic which goes via the public network. Which are the relevant SteelHead configuration requirements? (Choose two.)

  A. The peer SteelHead must be marked as a Cloud SteelHead in the local SteelHead peering table.

  B. The network must be set to 'public' by ticking the 'Public Network' box in the configuration.

  C. A SteelCentral Controller for SteelHead must be used to push the secure transport configuration.

  D. The In-Path IP address of the SteelHead must be in public address space.

  Correct Answer: B

  B: Because secure transport was built taking hybrid networking into account, you can configure a private and public IP address. The public IP address relies on reachability over a network marked Public. This configurations allows the controller to first be reached over the private network and then the public network.

  C: The management plane is configured on the SCC using SSL and SSH secured communications, in which you create and distribute the path selection policy. When a network is marked as securable, it indicates that the SteelHead will join a group of other SteelHeads that can encrypt traffic. The SCC pushes the path selection policy to all the SteelHeads.

  Incorrect:

  Not D: The configurations allows the controller to first be reached over the private network and then the

  public network. The private and public IP addresses do not need to come from the same in-path interface.

  With the stp-client controller in-path enable command, the data center SteelHead (DC-SH) uses the private

  and public IP addresses from the same in-path interface, while the branch office SteelHead (BR-SH) uses

  the private and public IP addresses from different in-path interfaces.

  References:

  https://support.riverbed.com/bin/support/static/mcmq1o68fbs27lqc5798c4p8m6/html/ak9u1

  115aieef8qcb43mjgf98d/scc_9.2_dg_html/index.html#page/scc_deploy_9.2/secure_transp ort.html

• Question 58:

  Which ethernet network cable type can you use when connecting your SteelHead appliance to a switch when all ports are hard coded to 100/FULL?

  A. Crossover

  B. It doesn't matter

  C. Straight

  Correct Answer: C

  To connect a Steelhead appliance to a switch use a straight-through cable.

  Note: Make sure that you have connected your cables as follows:

  *

  Steelhead appliance to switch: straight-through cable

  *

  Steelhead appliance to router: crossover cable

  *

  Steelhead appliance to Steelhead appliance: crossover cable

  *

  Steelhead appliance to a host: crossover cable

  References: Steelhead Appliance Installation and Configuration Guide, Version 7.0.3, May 2012, page 46 https://support.riverbed.com/bin/support/download?did=614

• Question 59:

  What files can be gathered from the SteelHead which would be useful for troubleshooting problems with QoS configuration? (Choose two.)

  A. TCP Dump

  B. System Dump

  C. Core Dump

  D. Process Dump

  Correct Answer: AB

  TCP Dump can be used to analyze QoS protocol traffic. The System Dump Analyzer helps you investigate system dumps to identify potential problems with your Steelhead appliances and Riverbed configuration. Simply upload a system dump and view the results.

  References: https://support.riverbed.com/content/support/help.html

• Question 60:

  Which authentication methods are available to secure the SteelHead appliance? (Choose three.)

  A. Kerberos

  B. RADIUS

  C. Local password database

  D. TACASS+

  E. NTLM

  Correct Answer: BCD

  You can log in to a SteelHead with a RADIUS or TACACS+ authentication system for administrative and monitoring purposes. The following methods for user authentication are provided with the SteelHead: *Local *RADIUS *TACACS+

  References: https://support.riverbed.com/bin/support/static/fbunsuuo632vi3jrspe0evbko9/html/u2pi6l52l 4drmhq3uhck9tu7hm/sh_9.2_dg_html/index.html#page/sh_9.2_dg%2Fradius_tacacs.html %23ww224339