Riverbed Riverbed Certifications 830-01 Questions & Answers

• Question 241:

  You enabled port transparency but noticed that active FTP connections are failing. What may be the problem?

  A. The routers need to understand port transparency

  B. Port transparency only maintains destination ports

  C. Port transparency requires NAT

  D. You need to a fixed-target rule on the server-side for port transparency

  E. None of the above

  Correct Answer: B

• Question 242:

  After deploying the Steelhead appliances in-path, you are not seeing any optimization between

  10.11.0.128 and 10.11.23.18.

  

  Look at the following trace in the exhibit and explain why: (HINT: Look at the SYN packet)

  A. There is a spanning-tree loop

  B. The cables are reversed

  C. The three way hand-shake is not being completed

  D. The client and servers are on the same /16 subnet

  E. There is no SYN/ACK from 10.11.23.18

  Correct Answer: B

• Question 243:

  Refer to the exhibit.

  

  Corp-A and Corp-B have overlapping address space and therefore the network administrator implemented NAT to overcome this. Users from Corp-A NAT to 172.16.1.0/24 and users from Corp-B NAT to 172.16.2.0/24. Users in Corp-A use the destination address of 172.16.2.0/24 to access the resources in Corp-B. The servers in Corp-B use the client IP for authentication. You deploy the Steelhead appliance using the default WAN visibility mode but noticed all the connections are passed-through. What is the likely problem?

  A. When the Steelhead appliance in Corp-B opens the outer connection, it is using the source IP of

  172.16.2.x instead of 192.168.1.x

  B. On the Steelhead appliance in Corp-B, there is a missing static route for the 192.168.1.0/25 network

  C. On the Steelhead appliance in Corp-A, there is a missing static route for the 172.16.2.0/24 network

  D. When the Steelhead appliance in Corp-B opens the outer connection, it is using the source IP of

  192.168.1.x instead of 172.16.1.x

  E. None of the above

  Correct Answer: D

• Question 244:

  A customer noticed that after deploying the Steelhead between their switch and router, OSPF takes much longer to re-converge after the router fails. Which RiOS feature can you enable to reduce the convergence time?

  A. Adjusting the OSPF "keep-alive" timers on the Steelhead appliance

  B. Configure Fail-To-Block on the Steelhead appliance

  C. Enable Link State Propagation

  D. Enable Link State Notification

  E. Configure Rapid Spanning Tree on the Steelhead appliance

  Correct Answer: C

• Question 245:

  To increase the high availability of a site at a remote office, you decided to install a second Steelhead appliance as an active/active serial cluster. However, after installing the second Steelhead appliance at the remote site, users started complaining about slow access to the data center. You have verified that this is not a duplex issue. At the data center location all users access the Internet which pass- through the Steelhead appliances. What is the most likely problem?

  A. SMB Signing

  B. Oplock issue

  C. The serial cluster Steelhead appliances are peering to each other

  D. Simplified routing was enabled on the secondary Steelhead appliance

  E. The datastore on the Steelhead appliances are wrapping

  Correct Answer: C

• Question 246:

  Refer to the exhibit.

  

  Corp-A and Corp-B have overlapping address space and therefore the network administrator implemented NAT to overcome this. Users from Corp-A NAT to 172.16.1.0/24 and users from Corp-B NAT to 172.16.2.0/24. Users in Corp-A use the destination address of 172.16.2.0/24 to access the resources in Corp-B. The servers in Corp-B use the client IP for authentication. What do you need to do in order to make this deployment work? (Select 2)

  A. Configure Full Transparency

  B. Configure out-of-path

  C. Configure Port Transparency

  D. Configure OOB Transparency

  E. Steelhead appliances cannot be deployed in this network

  Correct Answer: AD

• Question 247:

  If using Fixed-target rules, what Steelhead specific probe options are associated with the SYN packet?

  A. Option-76 (0x4c)

  B. Option-78 (0x4e)

  C. Client-side Steelhead's in-path IP address

  D. Client-side Steelhead's port number

  E. No probes are sent with fixed-target rules

  Correct Answer: E

• Question 248:

  Given four Steelheads are deployed in a WCCP cluster and all Steelheads are optimizing traffic to and from the data center. Steelhead-A fails and only Steelhead-B and Steelhead-C are intercepting new connections while Steelhead-D is NOT optimizing any traffic. What is the likely problem?

  A. The load balancing algorithm on the router is broken

  B. Simplified routing is not enabled

  C. Steelhead-B and Steelhead-C are missing the "in-path neighbor continue-intercept" command

  D. Steelhead-D is missing the "in-path neighbor allow-failure" command

  E. Need to issue the command "in-path accept connections" on Steelhead-D

  Correct Answer: D

• Question 249:

  In an in-path deployment, if a naked SYN packet arrives on the WAN interface of Steelhead, what probe option is added to this SYN packet for auto-discovery?

  A. Option-76

  B. Option-78

  C. SACK

  D. WSCALE

  E. None of the above

  Correct Answer: E

• Question 250:

  WCCP protocol has a methodology of load balancing with two or more Steelhead appliances. What are the maximum number of buckets able to be used for the MASK assignment?

  B. 32

  C. 64

  D. 128

  E. 256

  Correct Answer: D