Riverbed Riverstone Certification 199-01 Questions & Answers

• Question 21:

  SteelHead SaaS is configured using the default redirection port. Which statement correctly describes the configuration that must be applied to a firewall at the branch location?

  A. Allow UDP 9545 from/to In-path interfaces

  B. Allow 443 traffic from/to Primary interface

  C. Allow TCP 9545 from/to In-path interfaces

  D. Allow TCP 9545 from/to Primary interfaces

  Correct Answer: A

• Question 22:

  Examine the diagram below. The customer needs to optimize data center servers and also servers within the DMZ but wants to keep the SteelHead behind the firewall. Which optimization mode would support this environment?

  

  A. Hybrid mode

  B. Virtual In-path mode

  C. WCCP or Interceptor mode

  D. Out-of-path mode

  E. In-path mode

  Correct Answer: A

• Question 23:

  You deploy a pair of SteelHead appliances in-path. At the server-side, there is a firewall inspecting traffic between the SteelHeads. The firewall must see the original client and server IPs and is configured to drop packets where the same host pairs and port pairs are reused within 30 seconds of termination. Which addressing mode would workaround this issue?

  A. Full Transparency

  B. Port Transparency

  C. Correct Addressing

  D. Full Transparency with reset

  Correct Answer: A

• Question 24:

  What configuration policies can be used on the SteelCentral Controller for SteelHead (SCC) for Interceptor deployments?

  A. The SCC can be used to create all configuration for the Interceptors and its associated SteelHeads, as long as all the devices are in the same SCC group.

  B. The SCC can create in-path rules policies the same as a SteelHead, as long as that is the only page enabled for the Interceptor.

  C. The SCC can be used to configure the cluster of registered Interceptors and SteelHeads. Then, in-path rules and load balancing rules can be pushed to the interceptors.

  D. The SCC can be used to create cluster policies, for the Interceptor to SteelHead connections only and not in-path or load balancing rules.

  E. The SCC can only monitor the health, backup the configuration and upgrade Interceptors. Policies are only for SteelHeads. Interceptors and SteelHead Mobile are not supported.

  Correct Answer: C

• Question 25:

  You have a SteelCentral Controller for SteelHead Mobile with a policy that includes auto-discovery rules, enabled Location Awareness and set a minimum latency of 10ms. Your client is now in the branch office, has received this policy and the nearest SteelHead is 2 ms away. What will happen to connections?

  A. The branch steelhead will pass through the traffic because of the RVBD in-path rule.

  B. The SteelHead Mobile client will bypass the branch SteelHead using Enhanced Auto Discovery.

  C. The SteelHead Mobile client will not optimize, letting the branch SteelHead do the optimization.

  D. The branch SteelHead will shut-down the SteelHead mobile client services as they are not needed in branch.

  E. The SteelHead Mobile client will optimize as normal, sharing information with the branch SteelHead.

  Correct Answer: C

• Question 26:

  The SteelCentral Controller for SteelHead Mobile is rebooted or becomes unreachable from the end user mobile client. What happens to their network connections?

  A. The end user's existing and new connections continue to be optimized as per policy.

  B. SSL trusts will fail and SSL will be passed through, all other traffic is unaffected.

  C. The end user's optimized connections continue but new connections are passed through.

  D. The end user's network connections terminate and they must wait for the controller to come back online.

  E. The end user's optimized connections are reset and restart in pass-through mode.

  Correct Answer: A

• Question 27:

  Connection Pooling works with:

  A. Port and Full Transparency

  B. Correct Addressing and Port Transparency

  C. Correct Addressing only

  D. Correct Addressing, Port and Full Transparency

  E. Full Transparency only

  Correct Answer: D

• Question 28:

  When configuring encrypted Lotus Notes optimization and the standard port is configured to require encryption, which of the following is true?

  A. An alternate unencrypted port must be open on the server, and a copy of the server ID file must be imported to the server side SteelHead.

  B. An alternate unencrypted port must be open on the server, and a proxy server ID file must be created on the server-side SteelHead.

  C. An encrypted port must be open on the server, and a proxy server ID file must be created on the server-side SteelHead.

  D. An encrypted port must be open on the server, and a copy of the server ID file must be imported to the server-side SteelHead.

  Correct Answer: A

• Question 29:

  You wish to utilize a SteelHead to fill a high bandwidth, high latency WAN link without data reduction. The link is 622mbps and 500ms latency. What steps should you take to fill the pipe?

  A. Enable HSTCP, configure the WAN buffers and enable SDR/LZ.

  B. Enable HSTCP, configure the WAN buffers and disable SDR/LZ.

  C. Max-TCP and HS-TCP are only for optimized flows, so data reduction cannot be disabled but will fill the pipe anyway.

  D. Enable MXTCP, configure the WAN buffers and disable SDR/LZ.

  E. Enable MXTCP, configure the WAN buffers and enable SDR/LZ.

  Correct Answer: B

• Question 30:

  A customer would like to optimize an in-house application running over UDP. What is required in order to do this? (Choose two.)

  A. Packet-mode optimization enabled in the General Service Settings.

  B. Auto-Discover UDP rules correctly configured on the client-side SteelHead.

  C. Fixed target rules correctly configured on the client-side and server-side SteelHeads.

  D. An UDP license purchased and installed on all SteelHeads.

  E. Only TCP is supported for optimization on SteelHead appliances.

  Correct Answer: AE