Riverbed Riverbed Certifications 199-01 Questions & Answers

• Question 241:

  Refer to the exhibit.

  

  Corp-A and Corp-B have overlapping address space and therefore the network administrator implemented NAT to overcome this. Users from Corp-A NAT to 172.16.1.0/24 and users from Corp-B NAT to 172.16.2.0/24. Users in Corp-A use the destination address of 172.16.2.0/24 to access the resources in Corp-B. The servers in Corp-B use the client IP for authentication. You deploy the Steelhead appliance using the default WAN visibility mode but noticed all the connections are passed-through. What is the likely problem?

  A. When the Steelhead appliance in Corp-B opens the outer connection, it is using the source IP of

  172.16.2.x instead of 192.168.1.x

  B. On the Steelhead appliance in Corp-B, there is a missing static route for the 192.168.1.0/25 network

  C. On the Steelhead appliance in Corp-A, there is a missing static route for the 172.16.2.0/24 network

  D. When the Steelhead appliance in Corp-B opens the outer connection, it is using the source IP of

  192.168.1.x instead of 172.16.1.x

  E. None of the above

  Correct Answer: D

• Question 242:

  You enabled port transparency but noticed that active FTP connections are failing. What may be the problem?

  A. The routers need to understand port transparency

  B. Port transparency only maintains destination ports

  C. Port transparency requires NAT

  D. You need to a fixed-target rule on the server-side for port transparency

  E. None of the above

  Correct Answer: B

• Question 243:

  After deploying the Steelhead appliances in-path, you are not seeing any optimization between

  10.11.0.128 and 10.11.23.18.

  

  Look at the following trace in the exhibit and explain why: (HINT: Look at the SYN packet)

  A. There is a spanning-tree loop

  B. The cables are reversed

  C. The three way hand-shake is not being completed

  D. The client and servers are on the same /16 subnet

  E. There is no SYN/ACK from 10.11.23.18

  Correct Answer: B

• Question 244:

  Refer to the HTTP trace exhibit.

  

  You noticed in the HTTP reports that you are not seeing any hits. What is required in order for HTTP optimization to work?

  A. Client request is missing the "Cache" header

  B. Keep-alive timeout on the server it too short

  C. Server does not support HTTP 1.1 extensions

  D. The "Content-Length" is too long. The HTTP blade can only handle 16K of data.

  E. Server is not setting a cookie

  Correct Answer: E

• Question 245:

  If using Fixed-target rules, what Steelhead specific probe options are associated with the SYN packet?

  A. Option-76 (0x4c)

  B. Option-78 (0x4e)

  C. Client-side Steelhead's in-path IP address

  D. Client-side Steelhead's port number

  E. No probes are sent with fixed-target rules

  Correct Answer: E

• Question 246:

  Given four Steelheads are deployed in a WCCP cluster and all Steelheads are optimizing traffic to and from the data center. Steelhead-A fails and only Steelhead-B and Steelhead-C are intercepting new connections while Steelhead-D is NOT optimizing any traffic. What is the likely problem?

  A. The load balancing algorithm on the router is broken

  B. Simplified routing is not enabled

  C. Steelhead-B and Steelhead-C are missing the "in-path neighbor continue-intercept" command

  D. Steelhead-D is missing the "in-path neighbor allow-failure" command

  E. Need to issue the command "in-path accept connections" on Steelhead-D

  Correct Answer: D

• Question 247:

  A customer noticed that after deploying the Steelhead between their switch and router, OSPF takes much longer to re-converge after the router fails. Which RiOS feature can you enable to reduce the convergence time?

  A. Adjusting the OSPF "keep-alive" timers on the Steelhead appliance

  B. Configure Fail-To-Block on the Steelhead appliance

  C. Enable Link State Propagation

  D. Enable Link State Notification

  E. Configure Rapid Spanning Tree on the Steelhead appliance

  Correct Answer: C

• Question 248:

  To increase the high availability of a site at a remote office, you decided to install a second Steelhead appliance as an active/active serial cluster. However, after installing the second Steelhead appliance at the remote site, users started complaining about slow access to the data center. You have verified that this is not a duplex issue. At the data center location all users access the Internet which pass-through the Steelhead appliances. What is the most likely problem?

  A. SMB Signing

  B. Oplock issue

  C. The serial cluster Steelhead appliances are peering to each other

  D. Simplified routing was enabled on the secondary Steelhead appliance

  E. The datastore on the Steelhead appliances are wrapping

  Correct Answer: C

• Question 249:

  WCCP protocol has a methodology of load balancing with two or more Steelhead appliances. What are the maximum number of buckets able to be used for the MASK assignment?

  A. 8

  B. 32

  C. 64

  D. 128

  E. 256

  Correct Answer: D

• Question 250:

  While looking at the Current Connections page on a client-side Steelhead, you noticed that there is more CIFS traffic on the WAN than on the LAN for some connections. What may be the problem? 1) The source data is compressed or encrypted 2) File server not located on the same subnet as the server-side Steelhead 3) The Steelhead is counting both CIFS optimized and unoptimized traffic 4) CIFS read-ahead 5) CIFS write-behind

  A. 1, 4

  B. 4, 5

  C. 1, 2, 3

  D. 1, 2, 5

  E. 3, 5

  Correct Answer: A