Riverbed Riverbed Certifications 199-01 Questions & Answers

• Question 51:

  SteelHead SaaS can provide telemetry. What kind of integration with SteelCentral is possible? (Choose two.)

  A. SNMP v1, v2c and v3

  B. Netflow

  C. SteelFlow

  D. SNMP v1 monitoring

  Correct Answer: C

• Question 52:

  Consider a SteelHead deployment with SMB optimization and SMB signing enabled on all SteelHeads. The client is configured to have signing enabled and the server has signing disabled. What will happen to SMB connections between these two hosts?

  A. The connection will be unsigned but allowed. The SteelHead does not need to have SMB signing enabled to accommodate this connection.

  B. The connection will not be allowed, as signing is enabled on the client and disabled on the server.

  C. The connection will be allowed and will be signed as the client determines whether SMB signing is used or not.

  D. The connection will be allowed, and will be signed between the client and client-side SteelHead.

  Correct Answer: A

• Question 53:

  You have a number of SteelHeads running RiOS 9.x. At each datacenter site, there are a cluster of domain controllers, one of which the SteelHead is connected to. As the volume of users on the network increase, the load which the server- side SteelHeads are placing on the connected domain controller pushes the domain to its limits, and authentication failures sometimes occur. What is the best way to address this?

  A. Increase the time Kerberos tickets are cached for individual users on the SteelHeads.

  B. Identify traffic which does not have a high rate of data reduction, and use in-path rules to path this traffic through.

  C. Disable Kerberos authentication on the SteelHeads so as to down negotiate to NTLM, specifying multiple domain controllers during the domain-join.

  D. Configure domain controller load-balancing so the SteelHead can communicate with multiple domain controllers instead of just one.

  Correct Answer: D

• Question 54:

  When a SteelHead reaches `admission control', what happens to the network traffic it is processing?

  A. Existing optimized connections continue to be optimized but new connections are passed through.

  B. All existing connections continue to be optimized and new connections are also optimized.

  C. Existing optimized connections are passed through and new connections are optimized.

  D. All connections are reset to clear the alarm.

  E. All new connections are optimized except those which are MAPI pre-population.

  Correct Answer: A

• Question 55:

  The picture below corresponds to a connection using the SteelHead SaaS GeoDNS feature. What is the IP address of the closest Microsoft Exchange Client Access Server (CAS)?

  

  A. 132.245.24.82

  B. 172.16.38.222

  C. Not enough information. You would need the output of show service cloud geodns

  D. 132.245.92.226

  Correct Answer: D

• Question 56:

  You plan to downgrade a SteelHead from RiOS v9.0.1 (Apr 17 2015) to 8.6.3 (Aug 7 2015). The appliance was previously running v8.6.3 but was factory reset after the upgrade. Will this be successful?

  A. No, there is no longer a configuration file for v8.6.3

  B. Yes, the current v9.0.1 configuration file will be migrated

  C. Yes, the old configuration file from v8.6.3 will be loaded

  D. No, it is not possible to downgrade RiOS

  Correct Answer: A

• Question 57:

  You have a pair of SteelHead appliances, both deployed in-path, both have a valid IP address on the in-path interfaces, optimizations are enabled and the service is started. They are unable to auto discover each other as a firewall is stripping the probes. How could you work around this on the SteelHeads?

  A. Enable Enhanced Auto Discovery on each SteelHead and restart the optimization service.

  B. Create a full transparency in-path rule on each SteelHead.

  C. Use static NAT entries for each in-path interface.

  D. Create a fixed-target in-path rule on each SteelHead pointing to the peer in-path IP address on port 7810.

  E. Create a port transparency in-path rule on each SteelHead

  Correct Answer: D

• Question 58:

  You have a firewall between your clients and servers with a SteelHead deployed on the trunk link connected between them. The firewall must see all traffic on the original client and server IP address and VLAN IDs. What is required to support this?

  A. Full transparency and simplified routing all

  B. Correct addressing and simplified routing all

  C. Full transparency with probe-caching enabled

  D. Full transparency and simplified routing dest-source

  E. Correct addressing and simplified routing dest-source

  Correct Answer: A

• Question 59:

  Which is the default value for latency-based location awareness in a SteelHead Mobile policy?

  A. 5 ms

  B. 10 ms

  C. 15 ms

  D. 20 ms

  Correct Answer: B

• Question 60:

  Users report that CIFS transfer speeds from a domain member server are much faster than from a domain controller. The Current Connections report confirms that connections to the domain controller show a red warning triangle. What configuration steps are required to resolve this issue?

  A. Domain Controllers should not be used for file sharing as they are always slower than domain member servers.

  B. The server-side SteelHead should be joined to the domain in Workstation mode, enable CIFS SMB Signing and Transparent Mode.

  C. Both the client-side and server-side SteelHeads should be joined to the domain in Active Directory Integrated mode.

  D. The client-side SteelHead should be joined to the domain in Workstation mode, enable CIFS SMB Signing and Transparent Mode.

  E. The server-side SteelHead should be joined to the domain in Active Directory Integrated mode, enable CIFS SMB Signing and Transparent Mode.

  Correct Answer: C