Riverbed Riverstone Certification 101-01 Questions & Answers

• Question 31:

  Simplified Routing is recommended when:

  A. The SteelHead is in a different subnet from the client and servers.

  B. The SteelHead is in the same subnet as the clients and servers.

  C. The SteelHead is in the same subnet as the servers or clients.

  Correct Answer: A

  Enabling simplified routing eliminates the need to add static routes when the steelhead appliance is in a different subnet from the client and the server.

  Note: Simplified routing changes the process used to select the destination Ethernet address for packet stransmitted from in-path interfaces.Simplified routing collects the IP address for the next hop MAC address from each packet it receives to address traffic. With simplified routing, can use either the WAN or LAN-side device as a default gateway. The steelhead appliance learns the right gateway to use by watching where the switch or router sends the traffic, and by associating the next-hop Ethernet addresses with IP addresses.

  References: http://h20564.www2.hpe.com/hpsc/doc/public/display?docId=mmr_kc- 0127411

• Question 32:

  Which Simplified Routing mode is required when a Virtual SteelHead is deployed in a virtual in-path configuration?

  A. All

  B. None

  C. Destination Only

  D. Destination and Source

  Correct Answer: B

  The None option is required for virtual in-path deployments.

  References:SteelheadAppliance Deployment Guide, Including the Steelhead Mobile Controller, December 2013, page 194

• Question 33:

  A package is available to download from the SteelCentral Controller for SteelHead Mobile for:

  A. Windows 32bit, 64bit and Mac operating systems individually (3 in all)

  B. All supported client operating systems in two files, 32 bit and 64bit

  C. All supported client operating systems as a single file.

  Correct Answer: A

  Package controls include:

  *

  32-bit Package Download URL

  Download URL for the 32-bit Windows package.

  *

  64-bit Package Download URL

  Download URL for the 64-bit Windows package.

  *

  Mac Package Download URL

  Download URL for the Mac package

  References: SteelCentral Controller for SteelHead Mobile User's Guide, Version 4.6, September 2014, page 144

• Question 34:

  Which statement about virtual SteelHead is NOT true?

  A. It supports Quality of Service and Path Selection.

  B. It can fail to wire using VMware direct bypass feature from ESX 5.0 when utilising a Riverbed hardware bypass card.

  C. It only supports one in-path interface and must be deployed virtually in-path.

  D. It can perform auto discovery in an in-path deployment.

  E. It can perform auto discovery in a virtual in-path deployment.

  Correct Answer: C

  Out-of-Path Deployment is possible.

  For a virtual out-of-path (OOP) deployment, connect the primary interface to the physical in-path NIC to

  be used, and configure the router to forward traffic to this NIC. You must also enable OOP on Virtual

  Steelhead.

  References: Virtual Steelhead Installation Guide, Version 1.0 (RiOS v7.0.3), July 2012, page 13

  https://support.riverbed.com/bin/support/download?did=624

• Question 35:

  With RiOS v9.0 and later, what does a 'topology' consist of? (Choose three.)

  A. Uplinks

  B. Networks

  C. Services

  D. Applications

  E. Sites

  Correct Answer: ABE

  The topology consists of the network, the sites, and the uplinks to the network for the sites.

  References: Riverbed Command-Line Interface, Reference Manual, April 2015 (page 453) https:// support.riverbed.com/bin/support/download?did=okk799647eeafskshi2utcul45

• Question 36:

  During packet analysis of TCP flows from a SteelHead using path selection, you consistently notice that the first few packets go over one path, and subsequent packets go via another. What is the cause of this?

  A. The SteelHead attempted to optimize the traffic and failed. When the connections proceeded in passthrough they get treated differently than if they had been optimized.

  B. The SteelHead has detected that a path has gone down and therefore re-routed the traffic.

  C. QoS traffic classification has matched a configured application and moved the traffic into a different QoS class.

  D. This is normal operation of using the Application Flow Engine with path selection, as the SteelHead needs to examine several packets before it can identity the traffic.

  Correct Answer: C

  References: SteelHead Deployment Guide Including the SteelCentral Controller for SteelHead Mobile, May 2016, page 174 https://support.riverbed.com/bin/support/download?did=7cmsbro2vbhvm7mn70uefgprbv

• Question 37:

  How does the SteelHead monitor path availability in Path Selection?

  A. Path availability is not monitored until traffic is sent over that path. Then the SteelHead uses standard TCP timeouts to monitor path integrity.

  B. The SteelHead uses ICMP ping to monitor path availability.

  C. The SteelHead creates an inner channel on each path and keep-alive packets are used to track availability.

  D. UDP keep-alives are periodically sent across each path. If a SteelHead does not receive two of these within a pre-defined timeout period, the path is declared down.

  Correct Answer: B

  RiOS 8.5 path selection technology provides the ability to deterministically re-direct select traffic and application flows through alternate WAN routes based on service metrics, such as path availability and priority. Availability is determined by whether the host at the remote end of a path can be reached via endto-end Internet Control Messaging Protocol (ICMP):

  References: http://www.riverbednews.com/2013/08/path-selection-what-you-need-to-get- started/

• Question 38:

  When optimizing SSL, trust is established between which hosts? (Select three.)

  A. Client side SteelHead and server-side SteelHead

  B. Client side SteelHead and server

  C. Server-side SteelHead and server

  D. Client PC and server-side SteelHead

  Correct Answer: ABC

  References: https://support.riverbed.com/bin/support/static/lrj6rq1evg0fnm7pekuq3j2md1/html/vte4p5uj 2dkg9k1ukjv82835ci/sh_9.2_dg_protocols_html/index.html#page/sh_9.2_dg_protocols%2F ssl.html% 23ww206368

• Question 39:

  A SteelHead is joined to a Windows domain using the Windows Active Directory administrator password. In order to use transparent authentication to optimize signed SMB2 traffic, which of the following is true?

  A. SMB2 signing optimizations must be enabled on the server -side SteelHead only.

  B. SMB2 signing optimizations must be enabled on both the client-side and server-side SteelHeads.

  C. A delegation or replication account must be configured on client-side SteelHead.

  D. A delegation or replication account must be configured on both the client-side and server-side SteelHeads.

  Correct Answer: A

  Configure the Steelhead appliance to optimize Secure Windows traffic Configuration steps for Signed SMB and Signed SMB2 3.2.1 On the server-side Steelhead navigate to Configure > Optimization > CIFS (SMB1). 3.2.2 Under the SMB Signing section, check the `Enable SMB Signing' checkbox 3.2.3 Ensure the `NTLM Transparent Mode" option is selected

  

  Etc.

  References: Optimization in a Secure Windows Environment, White Paper , pages 35-36 https:// support.riverbed.com/download.htm?filename=public/doc/technotes/Windows_secur ity_guide.pdf

• Question 40:

  When would you use the SCPS optimization feature?

  A. It should be used on slow packet switched networks.

  B. When a firewall is present between two SteelHeads.

  C. When satellite links exist between SteelHeads

  D. On very low latency WAN links

  Correct Answer: C

  SCPS is primarily used in the US DOD market for multi-vendor interoperability.It primarily provides TCP Optimization with a focus on satellite networks (high latency and loss) which the Steelhead already has several flavors built in (New Reno, HS-TCP and MX-TCP).

  References: https://splash.riverbed.com/thread/2209