Which of the following authentication methods are supported by the Steelhead appliance?
You choose to deploy a Steelhead appliance logically in-path using policy-based routing (PBR) as the traffic redirection method. Additionally, you want to mark the Type of Service (ToS) value for active FTP as AF21 using route-maps. Which route-map specified Type of Service (ToS) value is correct? (Hint: Use the calculator)
What is the process for dropping the connection of an individual user that is currently being optimized? As an example, consider an HTTP connection being optimized with a local address of 192.168.5.10 and remote address of 192.168.5.90. (Select 2)
Which of the following interfaces should be used for datastore synchronization? (Select 2)
What is contained in the probe of the return SYN/ACK packet when using enhanced auto-discovery (EAD)?
In order to reset the admin password that has been lost, the procedure can be done via what type of connection to a Steelhead appliance?
You are configuring HighSpeed TCP in an environment with an OC-3 (155Mb/s) and 60 milliseconds of round-trip latency. You know that the rule of thumb is to set the Steelhead appliance's WAN Default Send Buffer Size and WAN Default Receive Buffer Size to 2*BDP for the link. The buffer size setting for this link would be closest to: (Hint: Use the calculator)
A SteelHead is deployed in a VLAN bridge. Which VLAN ID should be configured on the in-path interface to support this environment?
When using Correct Addressing and enhanced auto-discovery (EAD), what is the size of the probe response in the return SYN/ACK packet from the server?
What port number is should be configured on a Steelhead appliance to communicate to the AAA RADIUS server?
When using Correct Addressing, what is the out-of-band (OOB) splice connection described as?
Which of the following are configurable in the CMC appliance Jump-Start Wizard? (Select 4)
Simplified routing learns to associate MAC addresses to IP addresses by: (Select 2)
Which section of the Steelhead appliance Management Console can help identify speed/duplex errors? (Select 2)
In the Interceptor appliance version 3.0 and later the command to enable cluster failover is:
What is the supported redirection scheme/s used when a Steelhead appliance is in a WCCP deployment?
A customer noticed that after deploying the Steelhead between their switch and router, OSPF takes much longer to re-converge after the router fails. Which RiOS feature can you enable to reduce the convergence time?
Refer to the exhibit.
Corp-A and Corp-B have overlapping address space and therefore the network administrator implemented NAT to overcome this. Users from Corp-A NAT to 172.16.1.0/24 and users from Corp-B NAT to 172.16.2.0/24. Users in Corp-A use the destination address of 172.16.2.0/24 to access the resources in Corp-B. The servers in Corp-B use the client IP for authentication. What do you need to do in order to make this deployment work? (Select 2)
During an upgrade, what steps are necessary to convert VM slots for use in Steelhead EX v2.0? (Select 3)
What differences are there between upgrading an active VSP configuration from Steelhead EX v1.0 to Steelhead vEX 2.0 and installing a fresh Steelhead EX v2.0 appliance? (Select 2)
How do you clean the datastore on a Steelhead appliance?
1) > restart empty
2) > reload clean
3) # restart empty
4) # restart clean
5) (config) # reload clean
To prevent possible denial of service attack, such as TCP SYN flooding, which of the following features could be used?
In a WCCP configuration, during a packet trace, you notice the return WCCP communication on a CAT 6500 is using GRE. The Steelhead appliance is directly connected to it. What can be done to alleviate the router's CPU? (Select 2)
A SteelCentral Controller for SteelHead (SCC) shows ≠ against some of the SteelHeads in the list. What exactly does this mean?
-- Exhibit –
-- Exhibit --
Refer to the exhibit. In a WCCP environment with R3, SH10 and SH11, it was observed that the returning traffic from Server2 is not being optimized by the Steelhead appliances. Why? (Select 2)
Users report that CIFS transfer speeds from a domain member server are much faster than from a domain controller. The Current Connections report confirms that connections to the domain controller show a red warning triangle. What configuration steps are required to resolve this issue?
You have just completed upgrading the software version on your SteelCentral Controller for SteelHead Mobile. What will happen to the software on the SteelHead Mobile clients?
A customer uses a single URL for a service that uses many servers with different certificates. What SSL options should be enabled to enhance performance?
You have a firewall between your clients and servers with a SteelHead deployed on the trunk link connected between them. The firewall must see all traffic on the original client and server IP address and VLAN IDs. What is required to support this?
A SteelHead blocks all traffic when the appliance is powered off. What reasons could cause this behavior? (Choose two.)
The picture below corresponds to a connection using the SteelHead SaaS GeoDNS feature. What is the IP address of the closest Microsoft Exchange Client Access Server (CAS)?
While performing a health check for a Steelhead appliance at a remote site, you noticed some of the pass-through traffic should have been optimized. The pass-through reason for the suspicious traffic is "SYN on WAN side". Upon further investigating, you also noticed that all of the traffic initiated at the data center is pass-through while all of the traffic initiated at the remote site is optimized. There is only one path between the data center and the remote site and both Steelhead appliance are physically in-path. What are the possible causes? (Select 2)
Citrix optimization does not work although you removed ports 1494 and 2598 from the Interactive Ports label and enabled Citrix optimization on the client-side Steelhead appliance. What could be the problem? (Select 2)
-- Exhibit –
-- Exhibit --
Refer to the exhibit. According to the log information, what does that message represent? (Select 2)
When configuring encrypted Lotus Notes optimization and the standard port is configured to require encryption, which of the following is true?
-- Exhibit –
-- Exhibit --
Refer to the exhibit. A Steelhead administrator has recently decided to configure data store synchronization between 2 Steelhead appliances on his data center. After applying the configurations, he noticed that it is not working. According to the logs provided, what would you suggest would fix the problem?
Once a SteelHead is registered for Cloud (SaaS) optimization it contacts the Cloud portal every 5 minutes to receive the latest information about the service. What would happen if a Firewall change stops the HTTPS communication with the Portal?
-- Exhibit –
-- Exhibit --
Refer to the exhibit. According to the screenshot, what does the highlighted symbol represent? (Select 2)
A version 9 SteelCentral Controller for SteelHead (SCC) connects to managed appliances using which protocols?
-- Exhibit –
-- Exhibit --
Refer to the exhibit. When USER1 tried to access Server 1, he sees the shown message on his Steelhead Mobile Client. What statements are true? (Select 2)
When a SteelHead reaches ‘admission control’, what happens to the network traffic it is processing?
-- Exhibit –
-- Exhibit --
Refer to the exhibit. In a WCCP environment with R3, SH10 and SH11, the following screenshot shows that the load is not being distributed evenly in between the Steelhead appliances. Why?
The SteelHead Out of Band splice (OOB) uses which addressing mode? Assume a default configuration.
In a virtual-inpath deployment, when the Steelhead appliance exports data to a flow data collector:
A SteelHead in an Interceptor cluster notifies the Interceptor that it is under high pressure. How many credits are reduced for that SteelHead?
-- Exhibit –
-- Exhibit --
Refer to the exhibit. What statements are true? (Select 2)
What type of problem does the error message below indicate:
Sep 13 03:50:51 SH alarmd[18371]: [alarmd.NOTICE]: Alarm 'admission_mem' triggering
Sep 13 03:50:51 SH alarmd[18371]: [alarmd.NOTICE]: Alarm 'admission_control' triggering
Sep 13 03:50:51 SH alarmd[18371]: [alarmd.NOTICE]: Alarm 'health' severity changed to 'Admission Control'
You plan to downgrade a SteelHead from RiOS v9.0.1 (Apr 17 2015) to 8.6.3 (Aug 7 2015). The appliance has not run v8.6.3 previously. Will this be successful?
You deploy a pair of SteelHead appliances in-path. At the server-side, there is a firewall inspecting traffic between the SteelHeads. The firewall must see the original client and server IPs and is configured to drop packets where the same host pairs and port pairs are reused within 30 seconds of termination. Which addressing mode would workaround this issue?
Branch office users live streaming video URL fragment requests are not optimized even though Microsoft Silverlight stream splitting is enabled. What could be the causing this? (Select 3)
Which of the following are configurable attributes of an Interceptor appliance? (Select 3)
When configuring SSL optimization for Steelhead Mobile clients, what step must be taken?
The amount of memory required for Steelhead Mobile installation varies between 81 MB to 228 MB. What is the reasons for the variation?
In a serial cluster deployment of Interceptor appliances, which interfaces are connected from one Interceptor appliance to another Interceptor appliance assuming they are connected back to back?
By default, which Steelhead appliances are placed in an Interceptor appliance's auto pool?
When deploying a Virtual Steelhead appliance, how much extra memory should be allocated for the extra VMware overhead?
When configuring failover, in what manner must you configure your Steelhead appliances?
1) Master/Backup
2) Primary/Secondary/Tertiary
3) Master/Master
4) Backup/Backup
5) Primary/Principle
On an Interceptor appliance, what does the Neighbor Peers reporting page display?
A customer would like to deploy the Interceptor appliance on four aggregated 100 Mbps links which use LACP to bundle the physical links into a single logical link. Which of the following is true? (Select 2)
After upgrading the Steelhead Mobile Controller to the latest software release, it requires a reboot. During the reboot, what would happen to the users connected to the Steelhead Mobile Controller via the Steelhead Mobile client?
What information does the OVA package include about the Virtual Steelhead appliance? (Select 4)
If the VPN concentrator that a Steelhead Mobile client connects to is not in path with a Steelhead appliance, what changes could be made to the Riverbed infrastructure to allow optimization from the Steelhead Mobile clients?
Is any user data sent across the out-of-band (OOB) connection of a Steelhead appliance?
Three Steelhead appliances SH1, SH2, and SH3 are deployed as shown in the exhibit. They are all using the default auto-discovery rule for optimization. However, CLIENT99 experiences a failure when attempting to access either the HTTP or FTP service on SERVER88. CLIENT99 was able to access these services prior to the deployment of the three Steelhead appliances.
Which of the following choices would most likely correct the problem?
A Steelhead Mobile client can be configured to operate in visible or invisible mode (show client in system tray parameter). What part of the configuration is this setting included?
How can you provide updates to multiple Steelhead Mobile clients at the same time? (Select 2)
What are the SSL trusts that must be configured for a Steelhead Mobile client to successfully optimize SSL traffic? (Select 2)
One of the Steelhead appliances in your Steelhead appliance cluster is running an older version of RiOS. You decide to schedule a change window to upgrade that Steelhead appliance's image to the current release. What should you do to ensure that the Steelhead appliance optimization still occurs and the upgraded Steelhead appliance no longer accepts new connections?
You can monitor your Steelhead appliance disk performance using which reports? (Select 2)
What is required to be configured on a Steelhead appliance in order to work with an Interceptor appliance?
When upgrading from a Steelhead 5050 appliance to a Steelhead 6050 appliance what can be migrated to the new appliance? (Select 2)
After a new physical in-path installation, all applications appear to be slower. Adding a pass-through rule does not seem to fix the problem. Which of the following is the most likely cause of the problem?
When using TACACS+ or RADIUS to authenticate management access to the CMC appliance, which of the following is true?
An unwanted Steelhead appliance appears on the current connections list of one of your Steelhead appliances. How can you stop inbound connections from this unknown appliance from optimizing with your Steelhead appliances?
What parameters are required to add a new Steelhead appliance on the CMC appliance? (Select 2)
The exhibit shows a data center side serial clustering deployment. In this organization, not every remote site has a Steelhead appliance deployed, and all remote locations will be connecting to the data center.
For connections initiated from the data center, there is a possibility that the Steelhead appliances shown in the exhibit will end up peering with each other, rather than the intended remote Steelhead appliances. Where are peering rules needed to prevent this problem?
Which user roles and permissions are supported by the CMC appliance? (Select 3)
You enabled port transparency but noticed that active FTP connections are failing. What may be the problem?
What types of operations can be observed under the Manage > Operation History page in the CMC Management Console? (Select 2)
WCCP protocol has a methodology of load balancing with two or more Steelhead appliances. What are the maximum number of buckets able to be used for the MASK assignment?
Refer to the exhibit.
SH3 and SH4 are able to optimize FTP and HTTP sessions between Client41 and the respective application hosts Server31 and Server32. However, optimization seems to be a problem for Client42 and these application hosts. A quick check on SH3 and SH4 registers neither optimized nor pass-through traffic from Client42. Client42 is able to ping to both Server31 and Server32. Note that SH3 and SH4 are in auto-discovery mode. What is the likely cause?
On the Interceptor appliance, the Neighbor Peers page shows which of the following?
In an in-path deployment, if a naked SYN packet arrives on the WAN interface of Steelhead, what probe option is added to this SYN packet for auto-discovery?
Given four Steelheads are deployed in a WCCP cluster and all Steelheads are optimizing traffic to and from the data center. Steelhead-A fails and only Steelhead-B and Steelhead-C are intercepting new connections while Steelhead-D is NOT optimizing any traffic. What is the likely problem?
What methods can the CMC appliance use to provide notification of CMC system events? (Select 3)
In a new in-path deployment, connections are listed as pass-through on the branch office Steelhead appliance. Which of the following is the likely cause of the problem?
1) Pass-through rule preventing optimization
2) Server-side Steelhead appliance is down
3) Satellite proxy not copying auto-discovery probes
4) Asymmetric routing is detected for the client/server flow
5) Duplex mismatch on WAN or LAN interface
Refer to the exhibit.
You configured CIFS prepopulation at Corp-A but it is not working. What is likely the cause of the issue?
You have an in-house HTTP application running on port 8443 but you are not seeing HTTP optimization. You checked and made sure that the HTTP blade is enabled. What is the likely problem?
A customer is reporting higher than normal CPU utilization on certain routers in their network. Looking at their Steelhead appliance logs, they see “intercept/localkernel/icore.c:1463] nat_check: SYN packet for already NAT'd connection 100.100.100.33:1611 -> 100.200.200.32:80 ==> 100.201.201.25:7801”. All connections are showing up optimized but the logs persist. Given the exhibit,
what is the likely problem?