Riverbed Riverstone Certification 101-01 Questions & Answers

• Question 21:

  When determining which model SteelHead is appropriate for deploying into a site, which of the following are important? (Choose three.)

  A. Available WAN link speed

  B. Total number of optimized connections expected

  C. WAN link response time to servers

  D. Data store capacity

  Correct Answer: ABD

  Generally, you select a SteelHead model based on the number of users, the bandwidth requirements, and the applications used at the deployment site. e. However: *If you want to optimize applications that transfer large amounts of data, choose your SteelHead model based on the amount of bandwidth, the number of concurrent connections at your site, and the size of the RiOS data store.

  *

  If you do not want to optimize applications that transfer large amounts of data (for example, WANbased

  backup or restore operations, system image, or update distribution), choose your SteelHead model based on the amount of bandwidth and number of concurrent connections at your site.

  *

  If you want to use SteelHead to enforce network Quality of Service (QoS), make sure to consider the

  SteelHead model QoS bandwidth in addition to the optimization criteria you need.

  References: SteelHead Deployment Guide Including the SteelCentral Controller for SteelHead Mobile,

  December 2014 (page 16)

  https://support.riverbed.com/bin/support/download?did=hcsksjojd701t4t8v5s5qomoj7

• Question 22:

  Manually moving an entry from the SSL grey list to the white list on a SteelHead enables trust between which hosts?

  A. Client-side SteelHead and server-side SteelHead

  B. Client PC and server-side SteelHead

  C. Client-side SteelHead and server

  D. Server-side SteelHead and server

  Correct Answer: A

  The Riverbed SSL solution optimizes data transfers that are encrypted using SSL, provided that SteelHeads are deployed locally to both the client-side and server-side of the network.

  Note: Secure Peering Using the Self-Signed Peer White, Gray, and Black Lists You can use peering lists to configure peer certificates on SteelHeads running RiOS 5.0 or later. When SSL optimization is enabled, and an optimizable SSL connection is attempted across the SteelHeads, the remote peer is detected and its peering certificate is automatically populated into the self-signed peer gray list. The connection remains unoptimized because the remote peer is listed in the self-signed peer gray list. You can examine the peer certificate for authenticity and move any peer from the gray list to either the white list or the black list. If you trust the remote peer, move it into the self- signed peer white list to begin optimizing the SSL connection. If you do not trust the remote peer, move it into the self-signed peer black list to prevent the SSL connection from being optimized.

  References: https://support.riverbed.com/bin/support/static/lrj6rq1evg0fnm7pekuq3j2md1/html/vte4p5uj 2dkg9k1ukjv82835ci/sh_9.2_dg_protocols_html/index.html#page/sh_9.2_dg_protocols%2F ssl.html%23

• Question 23:

  You have recently upgraded from a CX 555 to a CX 1555 for additional capacity. How would you migrate the data store from the old to the new model?

  A. Configure data store synchronization between the two appliances.

  B. Move the disks into the new appliance and power on.

  C. Use the SteelCentral Controller for SteelHead External Backup feature to backup the store to an external server and then restore it to the new appliance.

  D. It is not possible to synchronize two differently sized data stores.

  Correct Answer: C

  External SCC Backups and High Availability

  The SCC stores SteelHead backups. The SCC can back up its own configuration (which includes the

  configurations of the SteelHeads) to an external file server (NFS, SSH, or CIFS).

  Incorrect:

  not A: Datastore sync is only supported between steelheads of the same model and RIOS versions.

  NotB: In some cases, model upgrades require the installation of additional disk drives and memory

  modules. Upgrades that require the installation of additional hardware do not preserve the data store.

  References: SteelCentral Controller for SteelHead Deployment Guide, December 2014, page 31

  https://support.riverbed.com/download.htm?product_name=cmcanddid=5k0kbbt7ggkok5d94j

  gl026go6andpublic=true

• Question 24:

  What feature is not available for optimized connections when using Port or Full transparency over the WAN?

  A. Top Talkers report

  B. Quality of Service marking

  C. VLAN segregation

  D. Path Selection

  E. Connection Pooling

  Correct Answer: E

  Correct addressing, the opposite of transparent Addressing which includes Port or Full transparency,

  enables you to use the connection pooling optimization feature. Connection pooling works only for

  connections optimized using correct addressing. Connection pooling enables Steelhead appliances to

  create several TCP connections between each other before they are needed. When transparent

  addressing is enabled, Steelhead appliances cannot create the TCP connections in advance because they

  cannot detect what types of client and server IP addresses and ports are needed.

  Incorrect:

  not B: If you manage IP address-based or TCP port-based QoS policies for optimized traffic on your WAN

  or WAN routers, you might use full address transparency or port transparency.

  Not C: Full address transparency preserves your client and server IP addresses and port numbers in the

  TCP/IP header fields for optimized traffic in both directions across the WAN. VLAN tags can also be

  preserved.

  Note: RiOS v6.0 or later offers the following options for configuring WAN visibility modes:

  *

  Correct Addressing - WAN-side connections use Steelhead appliance IP addresses and Steelhead appliance server ports.

  *

  Transparent Addressing - the following are Transparent Addressing options: ?Port Transparency - WAN-side connections use Steelhead appliance IP addresses but use TCP server ports that mirror the LAN-side connection. ?Full Transparency - WAN-side connections mirror all IP addresses and TCP ports used on the LAN-side connection. ?Full Transparency with Forward Reset - The same as Full Transparency, with an additional packet during auto-discovery to aid with integration of stateful network devices on the WAN.

  References: Steelhead Appliance Deployment Guide, Including the Steelhead Mobile Controller, December 2013, pages 49-51 https://support.riverbed.com/bin/support/download?did=a53locljdv9s5oc0agjp851iol

• Question 25:

  Data store synchronization takes place over which interface or interfaces?

  A. Primary or Aux

  B. Wan0_0

  C. Remote

  D. Inpath0_0

  E. Lan0_0

  Correct Answer: A

  The traffic for RiOS data store synchronization is transferred through either the Steelhead appliance primary or auxiliary network interfaces, not the in-path interfaces.

  References: Steelhead Appliance Deployment Guide Including the Steelhead Mobile Controller, December 2013, page 15 https://support.riverbed.com/bin/support/download?did=a53locljdv9s5oc0agjp851iol

• Question 26:

  A SteelHead is joined to a Windows Active Directory domain using the administrator password. In order to optimize SMB2 traffic, which of the following is true?

  A. SMB2 optimizations must be enabled on the server-side SteelHead only.

  B. A delegation or replication account must be configured on both the client-side and server-side SteelHead.

  C. SMB2 optimizations must be enabled on both the client-side and server side SteelHeads.

  D. A delegation or replication account must be configured on client-side Steal Head

  Correct Answer: B

  1.6 Configure the Steelhead appliance to optimize Signed SMB and Encrypted MAPI 1.6.1 - Configuration steps for Signed SMB, Signed SMB2 and Signed SMB3 1.6.1.3 On the server-side Steelhead appliance, navigate to Configure > Optimization > SMB2.

  1.6.1.4 Under the SMB Signing, check the `Enable SMB Signing' checkbox. 1.6.1.5 Next select the `Delegation Mode' radio button.

  1.6.1.6 Click the `Apply' button.

  1.6.1.7 No changes are needed on the client-side Steelhead appliance(s) unless SMB3 optimization is required.

  References: Optimization in a Secure Windows Environment, White Paper , page 16 https:// support.riverbed.com/download.htm?filename=public/doc/technotes/Windows_secur ity_guide.pdf

• Question 27:

  A Riverbed support case requires system dumps and\or TCP dumps to be generated and uploaded to the Riverbed support site. What is required in order to do this from the SteelCentral Controller for SteelHead (SCC)?

  A. RiOS version 8.5 and above

  B. An established management connection to the relevant SteelHead

  C. A valid support case number

  D. A valid support contract

  E. All of the above

  Correct Answer: A

  How to upload a system dump (sysdump) and other files to Riverbed Support. Starting in RiOS 8.5.0, you may upload sysdump and tcpdump files directly from their respective pages in the Steelhead web interface. After creating the file, simply expand the filename entry and enter the Support case number. The Steelhead will connect using the FTP protocol to ftp.riverbed.com and upload a copy renamed to include the case number.

  References: http://supportkb.riverbed.com/support/index?page=contentandid=S13970

• Question 28:

  When optimizing MAPI, it's important that ALL sessions between client and server are optimized by the same SteelHeads. If a SteelHead goes into admission control that could mean some sessions are passed through. What can you configure to protect against this?

  A. Disable admission control on the client side SteelHead.

  B. Reduce the keep-alive for MAPI sessions.

  C. Configure alerts to be sent when the SteelHead nears admission control.

  D. MAPI based admission control can be used.

  Correct Answer: C

  Example: Issue: Outlook clients are experiencing issues with connectivity through the Riverbed Steelhead Appliance. Solution: Outlook can open multiple connections to an Exchange server, and Outlook can break if some connections are optimized while others are not, and these situations can occur when the Steelhead reaches Admission Control. RiOS 6.1 has implemented new "MAPI-specific admission control" alarm which is meant to prevent MAPI connections from breaking or hanging if approaching that threshold.

  Note: The MAPI protocol uses several TCP sessions between the client and the server. When doing Latency Optimization on the MAPI protocol, all these TCP sessions between that client and that server need to be optimized between the same two Steelhead appliances. When one of the Steelhead appliances is close to admission control, there is a chance that not all these TCP sessions will become optimized, with a bad result for the client. To overcome this possibility, you can configure the Steelhead appliance to not do MAPI Latency Optimization when it is close to admission control.

  References: http://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na- c02948720andlang=enusandcc=us

• Question 29:

  A user uploads a Word document to a Sharepoint server via HTTP, optimized by two SteelHeads. Another user at the same location as the first downloads the same Word document via CIFS. What speed should the second user expect?

  A. Fast as the data patterns are recognized by SDR regardless of direction or which unencrypted application protocol is used

  B. Slow as the data is being transported via a different protocol and the SteelHead needs to learn the new patterns

  C. Fast as the SteelHead now has a local copy of the file in the web proxy cache

  D. Slow as the data is travelling in a different direction and the SteelHead needs to learn the new patterns

  Correct Answer: C

  RiOS has provided CIFS optimization since version 1.0, with ongoing enhancements in each subsequent version. CIFS optimization focuses on reducing the impact of WAN round-trip latency of common application and system behavior, including the Microsoft Office product suite, general file access, and remote printing.

  References: https://support.riverbed.com/bin/support/static/lrj6rq1evg0fnm7pekuq3j2md1/html/vte4p5uj 2dkg9k1ukjv82835ci/sh_9.2_dg_protocols_html/index.html#page/sh_9.2_dg_protocols/cifs. html#ww199551

• Question 30:

  The SteelHead can optimize which transport protocols? (Choose two.)

  A. UDP

  B. GRE

  C. IPSec

  D. TCP

  Correct Answer: AD

  With the Riverbed Data Streamlining technology, which applies to all TCP Traffic, including SSL, and to all WAN Traffic(TCP and UDP), redundant bytes are eliminated from transfers. WAN bandwidth utilization is reduced by 60-95 percent.

  References: http://www.wansolutionworks.com/RiOS.asp