101-01 Online Practice Questions and Answers

When deploying a Steelhead appliance server-side out-of-path in the data center, what will be the source IP address seen by the destination server in the data center?

A. The client PC's IP address

B. The client-side Steelhead appliance's Primary IP address

C. The client-side Steelhead appliance's In-path IP address

D. The server-side Steelhead appliance's Primary IP address

Assuming the Steelhead appliance has a 250 GB datastore capacity, by enabling PFS on a supported Steelhead appliance which of the following would be true:

A. The datastore capacity will shrink due to the amount of space used by PFS

B. The datastore capacity will grow due to the amount of space added by PFS

C. The datastore capacity does not change

D. The datastore capacity will have to be reformatted

The default action performed by the Steelhead appliance when it receives a packet with an existing DSCP value 46 is to:

A. Override the value with a default of 0

B. Override the value with the value of AF11

C. Reflect the value received by the original packet

D. Reflect the value returned by the symmetric TCP flow

Assume the SSL server is configured for the default SSL port. Which port has to be specified in the in-path rules of the client-side Steelhead appliance?

A. 443

B. 445

C. 7801

D. 8080

What are the default port labels on the Steelhead appliance? (Select 3)

A. Secure

B. Interactive

C. RBT-Proto

D. Fixed-Target

E. Pass-Through

When performing a logical in-path deployment, which interface needs to be physically cabled for optimization to occur?

A. LAN

B. AUX

C. WAN

D. Primary

Log messages in the Steelhead appliance Management Console such as "error=SMB_SHUTDOWN_ERR_SEC_SIG_ENABLED" are an indication of what condition?

A. The Steelhead appliance has entered admission control

B. The Steelhead appliance has detected an asymmetric network

C. The Steelhead appliance is configured with the incorrect speed or duplex on the Primary interface

D. The Steelhead appliance is configured with the incorrect speed or duplex on the in-path interfaces

E. The Steelhead appliance is configured in "Tunnel Mode"

F. The Steelhead appliance has detected Windows Server Message Block (SMB) signing

What platform of VMware enables you to run the Central Management Console as a virtual appliance? (Select 2)

A.ESX

B. Desktop

C. VMX

D. ESXi

E. VMDK

Which of the following is NOT a valid in-path rule on the Interceptor appliance?

A. Redirect

B. Pass-through

C. Discard

D. Deny

E. Fair-peering

You have a SteelHead with paths over a public and a private network. You want to encrypt the traffic which goes via the public network. Which are the relevant SteelHead configuration requirements? (Choose two.)

A. The peer SteelHead must be marked as a Cloud SteelHead in the local SteelHead peering table.

B. The network must be set to 'public' by ticking the 'Public Network' box in the configuration.

C. A SteelCentral Controller for SteelHead must be used to push the secure transport configuration.

D. The In-Path IP address of the SteelHead must be in public address space.

Which SteelHead optimization feature provides layer 7 acceleration?

A. MXTCP

B. SDR

C. LZ

D. Optimization blades

E. HSTCP

A service provider would like to implement multi-tenanting on a SteelCentral Controller for SteelHead (SCC) such that the customers would be able to run their own reports. Which of the following are true?

A. SCC does not support multi-tenancy. A virtual or physical SCC would need to be provisioned for each customer.

B. The SSL certificate for SCC management would need to be distributed to the customers.

C. RADIUS or TACACS+ would need to be used to offload the authentication to achieve the privileges required.

D. HTTP server should be disabled for the web UI and only SSL used.

E. Each customer would have to be configured with privileges for their own SteelHeads and no others.

Automatic registration of devices with the SteelCentral Controller for SteelHead (SCC) requires which one of the following?

A. RiOS 8.0 for SteelHead and 4.0 for Interceptor

B. The SCC must have joined the Windows domain

C. Pre-trusted SSL certificates on the devices and SCC

D. The serial number of the managed device to be preconfigured in the SCC

E. The name "riverbedcmc" to be an entry in DNS resolving to the SCC primary IP address

What does enabling "Out-of-Path Support" do on the General Service Settings page?

A. It allows for Interceptor and VVCCP working.

B. It allows the Primary interface to listen on port 7810.

C. It disables the LAN Interface.

D. It disables optimization on all in-path interfaces.

E. It allows the Primary interface to listen on ports 7800 and 7810.

With a server-side Interceptor deployment, once a TCP handshake has been completed between the server-side SteelHead and the server, how will data packets sent from the server get forwarded to the server-side SteelHead?

A. Destination NAT is performed on the Interceptor, changing the destination IP adress from the client IP to the SteelHead's IP.

B. The server sees the IP address of the SteelHeads in-path interface as its client, so there is no need for the Interceptor to forward it.

C. They are GRE-encapsulated by the Interceptor, and forwarded using the SteelHead IP.

D. The Interceptor tunnels them over the connection using port 7850 to the SteelHeads.

E. The Interceptor applies the MAC address of the SteelHead's in-path interface and forwards at layer 2.