Riverbed Riverbed Certifications 830-01 Questions & Answers

• Question 31:

  A parallel SteelHead deployment between datacenters is being discussed by a customer and an Integrator. The customer would like to configure connection forwarding between the SteelHeads in two datacenters with 20 ms RTT between them. What would be the possible outcome, if the nearest branch SteelHead is 40 ms away?

  A. The latency between the Neighbor SteelHeads will mean that Connection Forwarding will not come up.

  B. All asymmetrically routed traffic will suffer from increased latency from the nearer branches.

  C. The Nagle algorithm timer can be adjusted so as to mitigate the symptoms from the closer branches.

  D. There will be little or no impact as it only affects the initial connection.

  E. Suboptimal performance only from HTTP traffic due to increased connection times.

  Correct Answer: B

• Question 32:

  When using GRE tunneling, you notice an application stops working and you know the application marks

  packets with the DF (Don't Fragment) flag.

  What is the cause of this?

  A. You cannot perform GRE encapsulation on packets which have the DF flag set.

  B. The additional 24-byte overhead used by GRE encapsulation has pushed the packets over the MTU size.

  C. GRE encapsulation has hidden the original IP header so the DF flag is no longer seen by the router and therefore it cannot forward the packet.

  D. Having the DF flag set results in the Steelhead being unable to use the TCP flow to monitor the path state, and the path selection rules is set to `drop' if the path is down.

  Correct Answer: B

• Question 33:

  You see errors such as the following in the SteelHead messages log "error=SMB_SHUTDOWN_ERR_SEC_SIG_ENABLED". What do these indicate?

  A. SMB signing has been detected on SMB sessions which the SteelHead attempted to optimize, but SMB signing is not configured on the SteelHeads.

  B. The SteelHeads are configured to carry secure traffic over SSI and the inner channel failed to establish.

  C. The optimization service encountered an error, and the SMB blade has been shut down.

  D. The SteelHead encountered a kernel error and was forced to shut down.

  E. The server send a secure signal to terminate an optimized SMB session.

  Correct Answer: A

• Question 34:

  You would like to upgrade a Virtual SteelHead VCX755-L to VCX755-H. What is required to permit the upgrade to succeed? (Choose three.)

  A. Additional bypass cards

  B. Additional CPU(s)

  C. An upgrade license key

  D. Additional Storage capacity for data store

  E. Additional Memory

  Correct Answer: CDE

• Question 35:

  A branch has a Virtual SteelHead VCX75-5H. Recently, staffing levels have changed and the best model for the branch is now a VCX555-L. What is required to downgrade the model?

  A. It is not possible to downgrade a Virtual SteelHead model

  B. Clone the VCX755-H virtual machine (VM) and reduce the CPU(s), memory and storage during clone

  C. ontact Riverbed TAC who can remotely assist in downgrading the VM

  D. Reduce the amount of CPU(s), memory and storage required and reboot

  E. Delete the VM and reinstall using the correct OVA file with the VCX755-H licenses

  Correct Answer: B

• Question 36:

  MAPI optimization configuration should be applied.

  A. All SteelHeads except those configured for failover.

  B. On both the client-side and server-side SteelHeads.

  C. All SteelHeads except those configured for failover and data store sync.

  D. On the server-side SteelHead

  E. On the client-side SteelHead

  Correct Answer: B

• Question 37:

  Once a SteelHead is registered for Cloud (SaaS) optimization it contacts the Cloud portal every 5 minutes to receive the latest information about the service. What would happen if a Firewall change stops the HTTPS communication with the Portal?

  A. The Cloud optimization stops working after 5 minutes

  B. The Cloud optimization continues to work with the last information received from the Portal

  C. The SteelHead will try HTTP (port 80) to contact the Portal once it sees no response using 443

  D. The Cloud optimization Service cannot redirect traffic because DNS resolution is performed through Primary interface

  Correct Answer: D

• Question 38:

  A customer already has a SteelHead appliance in their datacenter and wants to add Steelhead Mobile. Their current deployment has their VPN gateway in parallel with their server-side SteelHead. The customer doesn't want to interrupt VPN clients by moving the SteelHead in-path with the VPN gateway, so they will test using a fixed-target rule to the SteelHead in-path interface. Take a look at this diagram:

  

  Will the client traffic be optimized to the server 192.168.1.10?

  A. No, the fixed-target rule should be directed to the SteelCentral Controller for SteelHead Mobile IP address.

  B. No, the SteelHead Mobile client will report `asymmetry' and fail to optimize.

  C. Yes, the WAN router will redirect traffic to the SteelHead using PBR.

  D. Yes, the fixed-target rule will direct traffic to the SteelHead correctly.

  Correct Answer: B

• Question 39:

  You wish to optimize SSL connections to an internal server. Where should the server certificate and private key be installed?

  A. Client-side and server-side SteelHead Certificate Authority list

  B. Server-side SteelHead SSL server certificate list

  C. Client-side SteelHead and server-side SteelHead SSl server certificate list

  D. Client-side SteelHead SSL Server certificate list

  Correct Answer: B

• Question 40:

  You are troubleshooting a connection which is being passed-through. An in-path rule to optimize it is

  present, both SteelHeads are working and not in admission control. You examine the logs and find:

  [intercept.WARN] asymmetric routing between 10.11.111.19:33262 and 10.11.25.23:5001 detected (no

  SYN/ACK)

  What is the reason for the asymmetry?

  A. Complete asymmetry

  B. SYN Retransmit

  C. Server-side asymmetry

  D. Client-side asymmetry

  E. Multi-SYN Retransmit

  Correct Answer: D