Question1: After upgrading the Steelhead Mobile Controller to the latest software release, it requires a reboot. During the reboot, what would happen to the users connected to the Steelhead Mobile Controller via the Steelhead Mobile client?
Question2: When configuring SSL optimization for Steelhead Mobile clients, what step must be taken?
Question3: What is the primary purpose of enabling Multiple Interface Support on the Interceptor appliance?
Question4: -- Exhibit -
-- Exhibit --
Refer to the exhibit. A Steelhead administrator has recently decided to implement two Interceptor appliances and one Steelhead appliance on his data center. After configuring the Interceptor, he noticed they are not forwarding traffic to the Steelhead. Why? (Select 2)
Question5: In a WCCP cluster using mask assignments, if there are six Steelhead appliances in the cluster, what is the minimum number of bits that should be used?
Question6: What service needs to be allowed if you are enforcing outbound security in the Steelhead Mobile solution?
Question7: A customer would like to deploy the Interceptor appliance on four aggregated 100 Mbps links which use LACP to bundle the physical links into a single logical link. Which of the following is true? (Select 2)
Question8: -- Exhibit -
-- Exhibit --
Refer to the exhibit. A Steelhead administrator has recently decided to implement QoS on SH12.
The WAN link between Branch1 and the Data Center is a T1. After implement QoS, he started seeing problems with traffic to Server1. What could be the problem and how would you fix it? (Select 2)
Question9: Which section of the Steelhead appliance Management Console can help identify speed/duplex errors?
(Select 2)
Question10: Which command will display current alarm status information?
Question11: Where in the Steelhead appliance can you verify IP address settings? (Select 2)
Question12: Adaptive data streamlining provides you:
Question13: What is the command to return a Steelhead appliance back to factory defaults?
Question14: For In-path rules on an Interceptor appliance, Source and Destination subnets are specified in what format? (where "x" is any single digit number):
Question15: When enabling MS-SQL Layer 7 optimizations, what are the best practices to use? (Select 2)
Question16: What type of reporting information will an Interceptor appliance store? (Select 2)
Question17: When two or more Steelhead appliances are configured with Connection Forwarding in such environments as WCCP clustering, what feature will allow remaining Steelhead appliances to continue to provide optimization for new connections when one unit fails?
Question18: Citrix optimization does not work although you removed ports 1494 and 2598 from the Interactive Ports label and enabled Citrix optimization on the client-side Steelhead appliance. What could be the problem?
(Select 2)
Question19: What are an Interceptor appliance's main functions? (Select 2)
Question20: What is required to be configured on a Steelhead appliance in order to work with an Interceptor appliance?
Question21: When deploying Interceptor appliances in a parallel cluster what feature must be disabled to ensure packet redirection upon failure?
Question22: What is visible on the CMC appliance home page dashboard? (Select 4)
Question23: Refer to the exhibit.
A customer is reporting that the first connection from a user to the server is failing. However, subsequent connections work properly and are optimized. How can this problem best be resolved?
Question24: A Windows Vista client tries to download a file from a Windows 2008 server over a 45Mbps link with
200ms. Assuming the connection is optimized, given the default configuration on the Steelhead, what optimization techniques would be applied?
1) Data Streamlining
2) Transport Streamlining
3) MS-SQL Transaction Prediction
4) HighSpeed TCP
5) MX-TCP
Question25: The primary data center Interceptor is configured to fail-to-block. What best describes the result of stopping the Interceptor appliance service?
Question26: While performing a health check for a Steelhead appliance at a remote site, you noticed some of the pass- through traffic should have been optimized. The pass-through reason for the suspicious traffic is "SYN on WAN side". Upon further investigating, you also noticed that all of the traffic initiated at the data center is pass-through while all of the traffic initiated at the remote site is optimized. There is only one path between the data center and the remote site and both Steelhead appliance are physically in-path. What are the possible causes? (Select 2)
Question27: One of the Steelhead appliances in your Steelhead appliance cluster is running an older version of RiOS.
You decide to schedule a change window to upgrade that Steelhead appliance's image to the current release. What should you do to ensure that the Steelhead appliance optimization still occurs and the upgraded Steelhead appliance no longer accepts new connections?
Question28: Which of the following interfaces should be used for datastore synchronization? (Select 2)
Question29: What ports are required for proper operation of the Steelhead Mobile client?
Question30: Which of the following commands will show the log level configuration? (Select 2)
Question31: Which of the following statements are true about server-side out-of-path deployments? (Select 4)
Question32: You are configuring HighSpeed TCP in an environment with an OC-3 (155Mb/s) and 60 milliseconds of round-trip latency. You know that the rule of thumb is to set the WAN router queue length to BDP for the link. Assuming 1500 byte packets, the queue length for this link would be closest to: (Hint: Use the calculator)
Question33: What platform is supported by SMC-VE?
Question34: After deploying the Steelhead appliances in-path, you are not seeing any optimization between
10.11.0.128 and 10.11.23.18.
Look at the following trace in the exhibit and explain why: (HINT: Look at the SYN packet)
Question35: You need to perform a tcpdump of traffic entering the Steelhead appliance's lan0_0 interface. Which of the following demonstrate the proper command format to perform the tcpdump and capture to a file?
Question36: By default, which Steelhead appliances are placed in an Interceptor appliance's auto pool?
Question37: Connection pooling feature on RiOS pre-establishes:
Question38: Which of the following are valid QoS priority queues for Steelhead appliances? (Select 3)
Question39: When bi-directional network address translation (NAT) is used between the Steelhead appliances, optimization is not working. A workaround to this is: (Select 2)
Question40: On the Interceptor appliance, the Neighbor Peers page shows which of the following?
Question41: Which two of the following attributes are required to be added to a TACACS+ server to enable monitor and admin logon access to the CMC appliance via TACACS: (Select 2)
Question42: What is the CLI command for starting the Configuration Wizard?
Question43: You are using Steelhead appliances in an Oracle Forms environment and are not seeing adequate acceleration. What could be the cause of this?
Question44: The Steelhead Mobile client on your laptop is showing a status of "Firewalled". What is the problem?
Question45: What is the default trap severity for system messages?
Question46: What is configured in an Acceleration policy? (Choose the best answer)
Question47: Refer to the exhibit.
A customer has a server-side out-of-path deployment, and reports that connections from some of their remote branch offices are not being optimized. What is the most likely problem?
Question48: With these default registry parameters, SMB signing is negotiated in the following manner. (Select 2)
Question49: What steps take place during an upgrade process?
Question50: In configuring failover settings, which of the following ports is set as the default for communicating with the backup Steelhead appliance?
Question51: -- Exhibit -
-- Exhibit --
Refer to the exhibit. In a WCCP environment with R3, SH10 and SH11, according to the exhibit attached, which statements are true? (Select 2)
Question52: The Home page in the Management Console for the CMC appliance can be configured to display what information?
Question53: Which of the following is true regarding the CMC appliance?
Question54: The IP address for which neighbor interface should be configured for Connection Forwarding?
1) lan0_0
2) inpath0_0
3) Primary
4) AUX
5) inpath7_7
Question55: Three Steelhead appliances SH1, SH2, and SH3 are deployed as shown in the exhibit. They are all using the default auto-discovery rule for optimization. However, CLIENT99 experiences a failure when attempting to access either the HTTP or FTP service on SERVER88. CLIENT99 was able to access these services prior to the deployment of the three Steelhead appliances.
Which of the following choices would most likely correct the problem?
Question56: Authentication fails for certain users after configuring the Server-Side Steelhead Appliance to be a RODC.
What could be the issue?
Question57: You have an in-house HTTP application running on port 8443 but you are not seeing HTTP optimization.
You checked and made sure that the HTTP blade is enabled. What is the likely problem?
Question58: The purpose of Intelligent Forwarding is to:
Question59: In a WCCP configuration, during a packet trace, you notice the return WCCP communication on a CAT
6500 is using GRE. The Steelhead appliance is directly connected to it. What can be done to alleviate the router's CPU? (Select 2)
Question60: Refer to the exhibit.
What configuration option is most relevant on Steelhead A to enable Steelhead Mobile Client R to set up the most efficient optimized connection to Server B?
Question61: -- Exhibit -
-- Exhibit --
Refer to the exhibit. On the Current Connections report, what does the number under "WAN KB" represent?
Question62: On the Steelhead Mobile Controller, what is the default setting of Reorder Intermediate Drivers?
Question63: What is the command to verify a configuration of the Interceptor peers and peer neighbors?
Question64: How do you view the full configuration in the CLI?
Question65: After a new physical in-path installation, all applications appear to be slower. Adding a pass-through rule does not seem to fix the problem. Which of the following is the most likely cause of the problem?
Question66: The WCCP protocol has a methodology of load balancing with two or more Steelhead appliances. What is the maximum number of buckets used for the HASH assignment?
Question67: Which user roles and permissions are supported by the CMC appliance? (Select 3)
Question68: In a Steelhead appliance deployment, the customer decides to use Full Transparency and block all incoming/outgoing TCP connections on port 7800 on their firewall. However, they are finding all TCP connections are passing through the Steelhead appliances (even ones that should be optimized via the in- path rule set).
If Full Transparency uses the original IP addresses and TCP ports for inner connections, what is the most likely cause of all TCP connections passing through the Steelhead appliances?
Question69: -- Exhibit -
-- Exhibit --
Refer to the exhibit. In a WCCP environment with R3, SH10 and SH11, according to the exhibit attached, which statements are true? (Select 2)
Question70: When upgrading from Steelhead EX v1.0 to Steelhead EX v2.0, what happens to existing VM slots on the appliance?
Question71: WCCP uses bits to create and distribute buckets. Using MASK assignment, what is the maximum number of bits used?
Question72: The default setting for "allow failure" in the Interceptor appliance version 2.0 is: (Select 2)
Question73: Which of the following are valid WCCPv2 control messages? (Select 3)
Question74: Which of the following commands followed by "write memory" will allow you to turn off in-path optimization but turn it back on upon rebooting the Steelhead appliance?
Question75: Refer to the exhibit.
If Steelhead Mobile Client B offers up a share on the network, what is needed on Steelhead Mobile Client R to open an optimized connection to this share if enhanced auto-discovery is enabled on all Steelhead appliances?
Question76: Refer to the exhibit.
A user from one of your branch offices reports connections to servers are failing after a new deployment.
The exhibit shows how the Steelhead appliances have been deployed. Which of the following will most likely fix the issue? (Select 2)
Question77: What information does the OVA package include about the Virtual Steelhead appliance? (Select 4)
Question78: How can you provide updates to multiple Steelhead Mobile clients at the same time? (Select 2)
Question79: In a serial cluster deployment of Interceptor appliances, which interfaces are connected from one Interceptor appliance to another Interceptor appliance assuming they are connected back to back?
Question80: While looking at the Current Connections page on a client-side Steelhead, you noticed that there is more CIFS traffic on the WAN than on the LAN for some connections. What may be the problem?
1) The source data is compressed or encrypted
2) File server not located on the same subnet as the server-side Steelhead
3) The Steelhead is counting both CIFS optimized and unoptimized traffic
4) CIFS read-ahead
5) CIFS write-behind
Question81: In an existing deployment, all connections appear to be unoptimized. The Current Connections page lists the connections as pass-through.
The logs indicate admission control "Jan 19 18:44:56 client sport[343]: [admission_control.WARN] Pausing intercept." What are some possible ways to alleviate the problem? (Select 2)
Question82: In order to reset the admin password that has been lost, the procedure can be done via what type of connection to a Steelhead appliance?
Question83: When using Correct Addressing and enhanced auto-discovery (EAD), what is the size of the probe response in the return SYN/ACK packet from the server?
Question84: Which statement is true regarding "fair-peering"?
Question85: For a new connection, a Load Balancing rule matches but none of the target Steelhead appliances in the rule are available. What will happen to the new connection?
Question86: Refer to the exhibit.
In the accompanying exhibit, SH3 and SH4 are able to optimize FTP and HTTP sessions between Client41 and the respective application hosts Server31 and Server32. However, optimization does not happen for Client42 and these application hosts. A quick check on SH3 and SH4 registers neither optimized nor pass- through traffic from Client42. Client42 is able to ping Client41 and the in-path address of SH4. Note that SH3 and SH4 are in auto-discovery mode. What is the likely cause?
Question87: How many in-path rules will a WAN-initiated (i.e. SYN packet arrives at a WAN port of an In-path interface) single connection match? Assume no packet ricochet occurs (i.e. the SYN travels through the Interceptor appliance once).
Question88: A single client-server TCP connection is made through two Steelhead appliances (default in-path deployment). This is a lab-controlled environment and no other client-server connections are made. How many TCP connections will exist between the in-path interfaces of both Steelhead appliances after the user connection is fully established?
Question89: -- Exhibit -
-- Exhibit --
Refer to the exhibit. When USER1 tried to access Server 1, the user sees the shown message on his Steelhead Mobile Client. What does this represent?
Question90: On the Steelhead Mobile Controller, when should you use the CIFS option 'Disable Write Optimization'?
Question91: When using Correct Addressing, what is the out-of-band (OOB) splice connection described as?
Question92: When deploying failover Interceptors, all in-path interfaces must:
Question93: In a new in-path deployment, connections are listed as pass-through on the branch office Steelhead appliance. Which of the following is the likely cause of the problem?
1) Pass-through rule preventing optimization
2) Server-side Steelhead appliance is down
3) Satellite proxy not copying auto-discovery probes
4) Asymmetric routing is detected for the client/server flow
5) Duplex mismatch on WAN or LAN interface
Question94: The fair peering feature on Interceptor appliances can be enabled:
Question95: Which of the following commands would allow you to generate a system dump from the CLI?
Question96: In the exhibit,
which interfaces should the WCCP router R1 listen to for multicast communication with the server-side Steelhead appliances, assuming the multicast address is 239.0.0.1? (Select 2)
Question97: In a virtual-inpath deployment, when the Steelhead appliance exports data to a flow data collector:
Question98: What methods can the CMC appliance use to provide notification of CMC system events? (Select 3)
Question99: On the Interceptor appliance, connection tracing feature enables you:
Question100: Refer to the exhibit.
Traffic going from Corp-A-DC-2 towards Corp-B will always use Link-1. Traffic from Corp-B back to Corp- A-DC-1 may traverse Corp-A-DC-1, over the GigaMAN before it reaches Corp-A-DC-2. No TCP connections are initiated from Corp-B to either Corp-A-DC-1 or Corp-A-DC-2. Unfortunately, the customer does not have any money to purchase any additional Steelheads. What are some possible fixes to ensure optimization occurs while Link-1 is operational? (If Link-1 ceases to function, optimization is not possible.) (Select 2)
Question101: What is the primary purpose of Connection Forwarding in WCCP deployments with multiple Steelhead appliances in a single cluster? (Select 2)
Question102: The Optimization service has been disabled on a Steelhead appliance. Which of the following events occur as a result?
Question103: The port used by the Steelhead appliance for connection forwarding is:
Question104: The adaptive data streamlining settings are:
Question105: The primary purpose of setting proxies (found on Networking - Proxies) on the Interceptor is to:
Question106: The primary purpose of the Redirect In-path rule is to:
Question107: When deploying policy-based routing for multiple Steelhead appliances in a cluster, the router should be configured to: (Select 2)
Question108: On Steelheads, by default tcpdump:
Question109: Which of the following custom TACACS+ attribute-value (AV) pairs gives the user administrative privileges?
Question110: What port number is configured on a Steelhead appliance to communicate to the TACACS+ server?
Question111: In the exhibit,
Client41 and Client42 have full access to the HTTP and FTP services provided by Server31 and Server32 respectively. They continue to have access to these servers after SH3 and SH4 are deployed. A quick check on SH3 and SH4 registers the connections from Client41 and Client 42 as pass-through traffic. Note that SH3 and SH4 are in auto-discovery mode. What are the likely causes? (Select 2)
Question112: What are the capabilities of an Interceptor appliance? (Select 3)
Question113: A customer wants to deploy parallel Interceptor appliances. How should an Interceptor appliance be configured in relation to another parallel Interceptor appliance?
Question114: What are the four types of policies on a CMC appliance?
Question115: If using Fixed-target rules, what Steelhead specific probe options are associated with the SYN packet?
Question116: When registering a Steelhead appliance to the CMC appliance, which of the following options are available? (Select 4)
Question117: The Interceptor appliance can be configured to redirect traffic to the Steelhead appliances via what methods?
Question118: Using an Interceptor appliance is an alternative to what network designs? (Select 2)
Question119: To prevent possible denial of service attack, such as TCP SYN flooding, which of the following features could be used?
Question120: Which authentication methods are available to the Steelhead Mobile Controller?
Question121: You are troubleshooting a new Steelhead Mobile installation where none of the VPN users with Steelhead Mobile client installed are being optimized. You determine that the Steelhead appliance in the data center is not in-path for VPN users. What are your options to fix this? (Select 2)
Question122: Which of the following are examples of Security policies on the CMC appliance? (Select 3)
Question123: Which of the following are Steelhead Mobile Controller alarms? (Select 2)
Question124: What are two types of Load Balancing rules on an Interceptor appliance?
Question125: What is the command to view configuration files on the CLI?
Question126: What type of problem does the error message below indicate:
Sep 13 03:50:51 SH alarmd[18371]: [alarmd.NOTICE]: Alarm 'admission_mem' triggering Sep 13 03:50:51 SH alarmd[18371]: [alarmd.NOTICE]: Alarm 'admission_control' triggering Sep 13 03:50:51 SH alarmd[18371]: [alarmd.NOTICE]: Alarm 'health' severity changed to 'Admission Control'
Question127: The secure vault on the CMC appliance: (Select 3)
Question128: A firewall at a remote site on the WAN side of Steelhead appliance (A) is stripping out the 76 and 78 values in the TCP options field. Steelhead appliance (B) is in the local cluster of appliances communicating with an Interceptor appliance. The desired result is for optimization to continue between Steelhead appliance (A) and Steelhead appliance (B) for all traffic originating from the remote site. A suggestion is made to use fixed target rule(s) to meet this objective. Based on the information provided select the best answer from the choices below:
Question129: What are the methods to upload an RSP package? (Select 3)
Question130: In a recent in-path deployment, users are complaining that some of their CIFS drive-mapping connections do not appear to be optimized. Upon further analysis, you discover the file shares reside on a domain controller. The Steelhead appliances are deployed in a default configuration. Which of the following is the most likely cause of the problem?
Question131: Which of the following deployments is incompatible with the Branch Warming feature?
Question132: When deploying a Virtual Steelhead appliance, how much extra memory should be allocated for the extra VMware overhead?
Question133: When configuring failover, in what manner must you configure your Steelhead appliances?
1) Master/Backup
2) Primary/Secondary/Tertiary
3) Master/Master
4) Backup/Backup
5) Primary/Principle
Question134: For a new connection, an Interceptor appliance has no peer affinity, which Steelhead appliance will the Interceptor appliance choose for the connection?
Question135: Company X has many offshore oil rigs they want to bring optimization to. The only available connection is through a satellite that has frequent bursts of packet loss. There are very few users per rig and HTTPS- based SharePoint performance is so poor they often time out pulling down even a small file. CIFS often does not work at all. They are considering the Steelhead Mobile solution to solve this problem. You suggest they deploy a Steelhead in-path at the data center and:
Question136: -- Exhibit -
-- Exhibit --
Refer to the exhibit. In a WCCP environment with R3, SH10 and SH11, it was observed that the returning traffic from Server2 is not being optimized by the Steelhead appliances. Why? (Select 2)
Question137: -- Exhibit -
-- Exhibit --
Refer to the exhibit. When USER1 tried to access Server 1, he sees the shown message on his Steelhead Mobile Client. What statements are true? (Select 2)
Question138: -- Exhibit -
-- Exhibit --
Refer to the exhibit. A Steelhead administrator has decided to implement two Interceptor appliances and one Steelhead appliance on his data center. After configuring the Interceptor appliances, and the Steelhead appliance, he decided to check if the connections are being forwarded appropriately. What happened? (Select 2)
Question139: What is contained in the probe of the return SYN/ACK packet when using enhanced auto-discovery (EAD)?
Question140: Under what circumstances would there be GRE traffic between the Interceptor and Steelhead appliances?
Question141: What is the default authorization policy used by Steelhead appliances?
Question142: The Interceptor appliance will attempt to redirect a connection to a Steelhead appliance in the auto pool:
Question143: What probe is being used in the inner channel between two Steelhead appliances when using Full Transparency in hex?
Question144: A deployment has two parallel Interceptor appliances (A and B) each across a different link directed at different data center locations. Each data center has one Steelhead appliance (Steelhead-1 or Steelhead-
2). The administrator wants probes coming into Interceptor A to be first serviced by Steelhead-1, then Steelhead-2 only if Steelhead-1 is full or unavailable. What is the most appropriate rule to be configured?
Question145: What is the default CMC appliance name resolved by the Steelhead appliance for initial configuration?
Question146: Branch office users live streaming video URL fragment requests are not optimized even though Microsoft Silverlight stream splitting is enabled. What could be the causing this? (Select 3)
Question147: Which TCP port will two Interceptor appliances communicate across in a parallel deployment?
Question148: Which of the following best describes the way a CMC appliance policy can be created?
Question149: What parameters are required to add a new Steelhead appliance on the CMC appliance? (Select 2)
Question150: -- Exhibit -
-- Exhibit --
Refer to the exhibit. The connections from USER1 to Server3 are not being optimized. What is the possible cause? (Select 2)
Question151: After installing a Steelhead appliance at a remote site, users started complaining about some optimized applications being slower. After some initial investigating, you discovered a backup job was consuming most of the bandwidth causing congestion. You also found that QoS is configured on the router and should have prevented this but it did not. What is the most likely cause?
Question152: The exhibit shows a data center side serial clustering deployment. In this organization, not every remote site has a Steelhead appliance deployed, and all remote locations will be connecting to the data center.
For connections initiated from the data center, there is a possibility that the Steelhead appliances shown in the exhibit will end up peering with each other, rather than the intended remote Steelhead appliances.
Where are peering rules needed to prevent this problem?
Question153: What is required for the Embedded Cascade Shark function to work? (Select 3)
Question154: When using Correct Addressing, without Enhanced Auto-discovery (EAD), what is the size of the probe response in the return SYN/ACK packet from the server-side Steelhead appliance?
Question155: Refer to the exhibit.
SH3 and SH4 are able to optimize FTP and HTTP sessions between Client41 and the respective application hosts Server31 and Server32. However, optimization seems to be a problem for Client42 and these application hosts. A quick check on SH3 and SH4 registers neither optimized nor pass-through traffic from Client42. Client42 is able to ping to both Server31 and Server32. Note that SH3 and SH4 are in auto- discovery mode. What is the likely cause?
Question156: The amount of memory required for Steelhead Mobile installation varies between 81 MB to 228 MB. What is the reasons for the variation?
Question157: To verify that the Steelhead Mobile client software is running, what process should you look for in the Windows Task Manager?
Question158: WCCP protocol has a methodology of load balancing with two or more Steelhead appliances. What are the maximum number of buckets able to be used for the MASK assignment?
Question159: -- Exhibit -
-- Exhibit --
Refer to the exhibit. A Steelhead administrator has recently decided to implement two Interceptor appliances and one Steelhead appliance on his data center. After configuring the Intercetor appliances, and the Steelhead appliance, he decided to check if the devices will work appropriately. Which Intercetor appliance diagnostic tool did the administrator use?
Question160: To increase the high availability of a site at a remote office, you decided to install a second Steelhead appliance as an active/active serial cluster. However, after installing the second Steelhead appliance at the remote site, users started complaining about slow access to the data center. You have verified that this is not a duplex issue. At the data center location all users access the Internet which pass-through the Steelhead appliances. What is the most likely problem?
Question161: Which of the following configuration policies are supported on the CMC appliance? (Select 4)
Question162: In an implementation using a 4-port card, which interface could be used as the Connection Forwarding neighbor? (Select 2)
Question163: When upgrading a Virtual Steelhead appliance, what steps can be taken to preserve the existing datastore?
Question164: What are the possible ways to downgrade a Virtual Steelhead appliance after it has been upgraded?
Question165: -- Exhibit -
-- Exhibit --
Refer to the exhibit. According to the screenshot, what does the highlighted symbol represent? (Select 2)
Question166: When manually registering a Steelhead appliance on the Central Management Console (CMC) appliance:
Question167: In a server-side out-of-path deployment, the server-side Steelhead appliance connects to the network via which physical interface:
Question168: Which of the following are examples of Networking policies on the CMC appliance? (Select 3)
Question169: A Steelhead administrator has recently decided to implement Steelhead Mobile clients on some of his company employees PCs. Most of the PCs only have 5 GB of disk space available. What would you do in this case? (Select 2)
Question170: A customer is reporting higher than normal CPU utilization on certain routers in their network. Looking at their Steelhead appliance logs, they see "intercept/localkernel/icore.c:1463] nat_check: SYN packet for already NAT'd connection 100.100.100.33:1611 -> 100.200.200.32:80 ==> 100.201.201.25:7801". All connections are showing up optimized but the logs persist. Given the exhibit,
what is the likely problem?
Question171: -- Exhibit -
-- Exhibit --
Refer to the exhibit. When USER1 tried to map shares to Server 1 and Server 2, he got the results shown.
What does the report represent? (Select 2)
Question172: The Interceptor appliance cluster can support how many optimized connections?
Question173: In creating a customized Steelhead Mobile client MSI package, what is the Group ID (GID) used for?
Question174: In a previously optimized environment, users have recently upgraded their Windows XP workstations to Windows 7. After the upgrade, users are complaining about slow CIFS and encrypted MAPI performance.
What is the most likely cause?
Question175: Refer to the exhibit.
The customer would like to prevent a "black-holing" situation when using PBR when SH11 goes down. The Steelhead appliances are directly connected to the routers. What options are available to determine state level status of the Steelhead appliance? (Select 3)
Question176: What is the process for dropping the connection of an individual user that is currently being optimized? As an example, consider an HTTP connection being optimized with a local address of 192.168.5.10 and remote address of 192.168.5.90. (Select 2)
Question177: Refer to the exhibit.
You configured CIFS prepopulation at Corp-A but it is not working. What is likely the cause of the issue?
Question178: When utilizing MAPI prepopulation, the default timer is set to:
Question179: Which of the following reports are available on the CMC appliance? (Select 4)
Question180: In configuring failover settings, which of the following interfaces is used for communicating with the backup Steelhead appliance?
Question181: You have an existing Steelhead appliance deployment which is achieving excellent optimization at five sites. You have deployed a Steelhead appliance physically in-path at a new small branch office and many of the new branch office users' applications are unoptimized; however some of the new branch office users' access to the same applications are optimized. None of the Steelhead appliances are in admission control. What is the likely cause?
Question182: Peer affinity is most closely related to:
Question183: What is the primary purpose of enabling Multiple Interface Support on the Interceptor?
Question184: -- Exhibit -
-- Exhibit --
Refer to the exhibit. A Steelhead administrator has recently decided to implement two Interceptor appliances and one Steelhead appliance on his data center. After configuring the Interceptor and the Steelhead, he noticed the information on the screen when he logs into one of the Interceptor appliances.
What does that represent? (Select 2)
Question185: What is the supported redirection scheme/s used when a Steelhead appliance is in a WCCP deployment?
Question186: When using SSL, what is the purpose of peer authentication?
Question187: Which of the following control messages are NOT used by WCCP? (Select 2)
Question188: Where are SDR references maintained on a Steelhead appliance?
Question189: On an Interceptor appliance, what does the Neighbor Peers reporting page display?
Question190: Which physical Steelhead interface communicates with the Interceptor appliance?
Question191: When upgrading a Steelhead appliance from the CMC appliance what methodologies can be used?
(Select 2)
Question192: When Connection Forwarding is in use, when a neighbor fails, the default behavior of the remaining neighbor will be to:
Question193: Which are true about the Steelhead appliance backups taken and stored by the CMC appliance? (Select 3)
Question194: What happens to traffic when a Steelhead appliance reports admission control?
Question195: What is configured in an Endpoint policy? (Choose the best answer)
Question196: Regarding the registering of Steelhead appliances,
Question197: When enabling WCCP v2 support, what does a multicast TTL value of 1 imply?
Question198: Refer to the exhibit.
What option in the Acceleration policy used on Steelhead Mobile Client A will most likely enhance the users experience connecting to Server B, if Server B is an Exchange 2003 Server?
Question199: What type of problem does the error message below indicate:
Sep 7 22:53:50 SH pm[18184]: [pm.NOTICE]: Output from sport:
/opt/rbt/bin/sport (pid 27529) received signal 12 (SIGUSR2) marking bit
Question200: Which of the following is NOT supported in Alarm Settings?
Question201: Which of the following points on WCCP v2 are correct? (Select 4)
Question202: Which of the following IP addressable interfaces can be connected for management purposes?
1) WAN
2) LAN
3) Primary
4) AUX
5) In-path
Question203: A customer noticed that after deploying the Steelhead between their switch and router, OSPF takes much longer to re-converge after the router fails. Which RiOS feature can you enable to reduce the convergence time?
Question204: Which of the following methods can be used to reduce the load on a router configured to use outbound interface WCCP redirection? (Select 3)
Question205: What interface on the CMC appliance is required for the initial configuration?
Question206: A data center location has three Steelhead appliances and one Interceptor appliance clustered together. If Steelheads A and B are unable to handle the new web traffic on port 80, the administrator does not want the connection to be serviced by Steelhead. Given the current rules, we want to prevent traffic from redirecting to Steelhead C.
Current Rules:
Rule 1: Redirect rule for ports 445, 139, 80, target SH A
Rule 2: Redirect rule for ports 8080, 80, target SH B
Auto (default rule)
Which rule should be added on the Interceptor to achieve desired functionality?
Question207: -- Exhibit -
-- Exhibit --
Refer to the exhibit. In a WCCP environment with R3, SH10 and SH11, which statement below is true?
Question208: Simplified routing learns to associate MAC addresses to IP addresses by: (Select 2)
Question209: On the Steelhead Mobile Controller, what VPNs require the use of Reorder Intermediate Drivers? (Select
2)
Question210: Can you optimize FTP using Steelhead Mobile?
Question211: A Steelhead administrator has recently decided to troubleshoot a TCP connection. He wants to find out if the Steelhead is adding a probe into the TCP SYN packets. For some reason, he is not being successful on his attempts. What could be the reason? (Select 2)
Question212: RiOS v7.0 and later the Steelhead Appliance can use HTTP stream splitting to optimize two different live video technologies: (Select 2)
Question213: What action is taken by the Interceptor if a connection does not match a configured load balance rule and the default pool is empty?
Question214: On the Interceptor appliance, what are the possible filter settings on a load balancing rule? (Select 4)
Question215: When using TACACS+ or RADIUS to authenticate management access to the CMC appliance, which of the following is true?
Question216: When deploying Interceptor appliances on aggregated links, you must: (Select 2)
Question217: Refer to the exhibit.
If Server A is an FTP server, which setting will enable active FTP optimization on Steelhead Mobile Client R?
Question218: What is the priority bit order for WCCP MASK?
Question219: WCCP uses bits to create and distribute buckets. Using HASH assignment, what are the maximum number of bits used?
Question220: What is the baud-rate of the console port on the CMC appliance?
Question221: Why should you use promiscuous mode on each in-path virtual NIC for Virtual Steelhead appliance?
(Select 2)
Question222: Place the following commands to upgrade a Steelhead appliance from the CLI in the correct order. (NotE.
include only the necessary steps)
1) SH (config) image install image.img 2
2) SH (config) image fetch http://server/path/image.img
3) SH (config) boot system 2
4) SH (config) restart clean
5) SH (config) reload
6) SH (config) write memory
Question223: During an upgrade, what steps are necessary to convert VM slots for use in Steelhead EX v2.0? (Select 3)
Question224: What Steelhead appliance models support the installation of Microsoft Windows Server 2008 R2 package on the RSP? (Select 2)
Question225: How does the Steelhead Mobile Controller provide Steelhead Mobile clients with the assigned policies and policy updates?
Question226: -- Exhibit -
-- Exhibit --
Refer to the exhibit. According to the packet capture, what statements are true? (Select 2)
Question227: Your Steelhead appliance deployment includes users accessing the Internet from branch offices with the traffic being back-hauled to the data center before going out to the Internet. However, HTTP latency optimization does not appear to be very effective, and in certain cases, is slower than without optimization.
What settings might help with this Internet-bound traffic?
Question228: Which of the following custom TACACS+ attribute-value (AV) pairs gives the user guest privileges?
Question229: To configure a Steelhead appliance for logical in-path mode, the following must be enabled in the General Service Settings page:
Question230: Which of the following is Endpoint alarm?
Question231: What port number is should be configured on a Steelhead appliance to communicate to the AAA RADIUS server?
Question232: Which of the following is true about fetching Steelhead appliance's configurations from a CMC appliance?
Question233: What should you do when you receive the following message?
[intercept.NOTICE] sending kickoff RST: 10.35.178.41:1169 -> 10.110.141.30:1031.
Question234: -- Exhibit -
-- Exhibit --
Refer to the exhibit. A Steelhead administrator has recently decided to configure data store synchronization between 2 Steelhead appliances on his data center. After applying the configurations, he noticed that it is not working. According to the logs provided, what would you suggest would fix the problem?
Question235: You need to take a full packet trace from the WAN interface of a Steelhead appliance to send into technical support. Which of the following commands will achieve this assuming typical Ethernet MTU? (Select 2)
Question236: -- Exhibit -
-- Exhibit --
Refer to the exhibit. A Steelhead administrator has recently decided to implement two Interceptor appliances and one Steelhead appliance on his data center. After configuring the Interceptor appliances, and the Steelhead appliance, he decided to check if the devices will work appropriately. According to the information shown, what statements are true? (Select 2)
Question237: For a Steelhead Mobile solution to work properly, what port needs to be allowed by the device that Steelhead Mobile is installed on?
Question238: Given four Steelheads are deployed in a WCCP cluster and all Steelheads are optimizing traffic to and from the data center. Steelhead-A fails and only Steelhead-B and Steelhead-C are intercepting new connections while Steelhead-D is NOT optimizing any traffic. What is the likely problem?
Question239: When troubleshooting a datastore wrapping alarm with 1 day wrapping notification configured, which of the following should be examined? (Select 2)
Question240: What are the default port labels on an Interceptor appliance?
Question241: How do you clean the datastore on a Steelhead appliance?
1) > restart empty
2) > reload clean
3) # restart empty
4) # restart clean
5) (config) # reload clean
Question242: What is the default behavior of an Interceptor appliance using 2.0 code when its peer Interceptor appliance is unavailable?
Question243: What information is available in the System Snapshot files on the Steelhead Mobile Controller?
Question244: -- Exhibit -
-- Exhibit --
Refer to the exhibit. The connection from USER1, going to SERVER2 is not being optimized by SH10.
What is the possible cause? (Select 2)
Question245: How is peer affinity reset in the CLI for an Interceptor appliance cluster?
Question246: In the exhibit,
there is a resident firewall inside the WAN cloud that drops packets with any TCP option. The customer allows you to use fixed-target rules instead. The firewall policy can only allow unassigned ports 7750-7751 to pass-through it. Additionally, the SH3 has been configured with service port 7750, while SH4 has been configured with service port 7751. Which of the following fixed-target rule specification is correct?
Question247: In the exhibit,
where should the WCCP redirection take place for traffic originating from the clients to the servers, assuming redirect IN is used?
Question248: -- Exhibit -
-- Exhibit --
Refer to the exhibit. What does the screenshot represent? (Select 2)
Question249: In a Steelhead deployment, the customer decides to use Full Transparency and block all incoming/ outgoing TCP connections on port 7800 on their firewall. However, they are finding all TCP connections are passing through the Steelheads (even ones that should be optimized via the in-path rule set).
If Full Transparency uses the original IP addresses and TCP ports for inner connections, what is needed to fix the problem?
Question250: What deployment type supports fail-to-wire?
Question251: The CMC appliance version 6.1 supports which SNMP versions? (Select 3)
Question252: A customer with no Steelhead appliances currently deployed wants to test Steelhead Mobile on a client that connects to corporate through a VPN over the Internet. The customer has the requirement that there be no network disruptions during the initial testing phase. Which of the following would work?
Question253: What is the command to clear all statistics on a Steelhead appliance?
Question254: Refer to the exhibit.
A connection times out when Client41 and Client42 attempt to either establish an HTTP session to Server31 or an FTP connection to Server32 after not connecting to them for some time. The very next attempt to connect to these services done immediately after the failure seems to work correctly. The clients are able to ping both servers and no access-lists are configured on the routers. SH3 uses the IP address of R3f0 as its default gateway. Upon powering off SH3 and SH4, the problem goes away even for first connection and everything works normally (even after not connecting for extended periods of time). Which of the following are likely to correct this problem?
Question255: The alerting threshold for CPU utilization is 70% and the reset threshold is 50%. Which of the following situations will result in an alarm being triggered? (Select 2)
Question256: What command should you use to see the direct URL of a package?
Question257: A Steelhead Mobile client can be configured to operate in visible or invisible mode (show client in system tray parameter). What part of the configuration is this setting included?
Question258: Refer to the exhibit.
What does the term resyncing mean?
Question259: A customer's network consists of a data center with an Interceptor appliance and a Steelhead appliance cluster and several remote sites each with Steelhead appliances.
You would like to pass-through an application unoptimized due to a suspected problem and are provided the following information:
The application uses a static TCP port, 15000.
The application is initiated from the remote site machines.
The same servers which host the application host several other applications as well.
Based on the information provided which option will allow the application to pass-through:
Question260: When upgrading from a Steelhead 5050 appliance to a Steelhead 6050 appliance what can be migrated to the new appliance? (Select 2)
Question261: How can you verify that encrypted Lotus Notes traffic is correctly optimized?
Question262: SH10 and SH11 are connection forwarding neighbors. After a configuration change on SH11, SH10 is in
"degraded" status. What is the possible cause? (Select 2)
Question263: Which of the following authentication methods are supported by the Steelhead appliance?
Question264: When registering a Steelhead appliance to the CMC appliance, which of the following options are available? (Select 4)
Question265: The port used by the Steelhead appliance for datastore synchronizations is:
Question266: When is it necessary to configure the SRDF Module rules? (Select 2)
Question267: -- Exhibit -
-- Exhibit --
Refer to the exhibit. According to the log information, what does that message represent? (Select 2)
Question268: On the Interceptor appliance, the Networking > Steelheads page displays which of the following?
Question269: In a quad Interceptor appliance deployment the directly connected pairs are configured in failover mode:
IC-A & IC-B are failover buddies
IC-C & IC-D are failover buddies
To prevent asymmetric routing IC-A should be configured to have a neighbor relationship with which of the following peer Interceptors? (Select 2)
Question270: You enabled port transparency but noticed that active FTP connections are failing. What may be the problem?
Question271: After completing the SRDF configuration on both Steelhead appliances and restarting the optimization service, the SRDF connections in the Current Connections report show a red protocol error icon in the Notes column. What could be a cause of this issue?
Question272: You choose to deploy a Steelhead appliance logically in-path using policy-based routing (PBR) as the traffic redirection method. Additionally, you want to mark the Type of Service (ToS) value for active FTP as AF21 using route-maps. Which route-map specified Type of Service (ToS) value is correct? (Hint: Use the calculator)
Question273: Hybrid Mode can best be defined as a combination of:
Question274: What is the default Connection Forwarding keep alive interval?
Question275: -- Exhibit -
-- Exhibit --
Refer to the exhibit. What statements are true? (Select 2)
Question276: When would Simplified Routing Destination Only be used? (Select 2)
Question277: In the Interceptor appliance version 3.0 and later the command to enable cluster failover is:
Question278: What type of configuration must be used on a Steelhead appliance in order to communicate with an Interceptor appliance?
Question279: Which of the following are configurable attributes of an Interceptor appliance? (Select 3)
Question280: Select the command needed to add support for virtual in-path to your Steelhead appliance so that you can use WCCP or PBR with a Steelhead appliance.
Question281: Assuming auto-discovery is used, WCCP redirect-in statements would normally be placed on which router interfaces? (Select 2)
Question282: It is not recommended to use the same Steelhead appliance to optimize both replication traffic and general user traffic because:
Question283: The Primary interface is REQUIRED for which deployment methods and features?
1) In-path
2) Server-side out-of-path
3) Logical in-path (WCCP/PBR)
4) Hybrid Mode
5) Proxy File Services (PFS)
Question284: Refer to the exhibit.
SH3 and SH4 are able to optimize HTTP sessions from Client41 to application host Server31. However, Client41 receives a failure messagE. "ftp connect: Unknown error number" while trying to connect Server32. The same applies to Client42. Note that SH3 and SH4 are in auto-discovery mode. Client41 and Client42 are able to ping Server32. What is the most likely cause of this failure?
Question285: You have outgrown your current Steelhead appliance and want to copy the datastore from your exiting Steelhead 550 appliance to a new 2050 Steelhead appliance. What feature would you use to synchronize the different model Steelhead appliance datastores?
Question286: What is the default In-path rule on an Interceptor appliance?
Question287: What should you do when you receive the following message?
Question288: If a Steelhead appliance is configured for logical in-path mode:
Question289: -- Exhibit -
-- Exhibit --
In a WCCP environment with R3, SH10 and SH11, it was observed that SH11's WCCP state is "read error". What is the possible cause?
Question290: Which of the following are configurable in the CMC appliance Jump-Start Wizard? (Select 4)
Question291: -- Exhibit -
-- Exhibit --
Refer to the exhibit. In a WCCP environment with R3, SH10 and SH11, according to the exhibit attached, which statements are true? (Select 2)
Question292: Which of the following features are available with the Virtual Steelhead appliance? (Select 2)
Question293: Refer to the exhibit.
In order to achieve optimization using auto-discovery for traffic coming from site C and destined to site A in the exhibit, which configuration below would be required?
Question294: How many failover buddies can be configured for a single Interceptor?
Question295: How many versions of CMC appliance software images can reside on the CMC simultaneously?
Question296: What types of operations can be observed under the Manage > Operation History page in the CMC Management Console? (Select 2)
Question297: In an in-path deployment, if a naked SYN packet arrives on the WAN interface of Steelhead, what probe option is added to this SYN packet for auto-discovery?
Question298: Two Steelhead appliances deployed in-path at different offices cannot auto-discover each other. What technique can be used to "force" the two Steelhead appliances to optimize traffic between each other?
Question299: In the exhibit,
where should the WCCP redirection take place for server return traffic, assuming redirect IN is used?
(Select 2)
Question300: Refer to the exhibit.
Corp-A and Corp-B have overlapping address space and therefore the network administrator implemented NAT to overcome this. Users from Corp-A NAT to 172.16.1.0/24 and users from Corp-B NAT to
172.16.2.0/24. Users in Corp-A use the destination address of 172.16.2.0/24 to access the resources in Corp-B. The servers in Corp-B use the client IP for authentication. You deploy the Steelhead appliance using the default WAN visibility mode but noticed all the connections are passed-through. What is the likely problem?
Question301: Which logging severity levels are supported by the CMC appliance? (Select 4)
Question302: TCP-over-IPv6 traffic is not optimized although you have enabled packet-mode optimization and restarted the optimization service. What could be causing this issue? (Select 2)
Question303: The Xbridge feature on Interceptor provides:
Question304: -- Exhibit -
-- Exhibit --
Refer to the exhibit. What does the display represent? (Select 2)
Question305: -- Exhibit -
-- Exhibit --
Refer to the exhibit. In a WCCP environment with R3, SH10 and SH11, the following screenshot shows that the load is not being distributed evenly in between the Steelhead appliances. Why?
Question306: What is the default Load Balancing rule on an Interceptor appliance?
Question307: The client-side Steelhead appliance has been configured for OOB Destination Transparency, what should the source IP/port be for the OOB connection?
Question308: How many in-path rules will a LAN-initiated (i.e. SYN packet arrives at a LAN port of an In-path interface) single connection match on an Interceptor appliance?
Question309: A customer wants to optimize traffic from remote VPN sites to DMZ servers in the data center shown in the accompanying exhibit.
The customer would also like to deploy their data center Steelhead appliance in a way that would allow them to keep transparency to the LAN servers, and allow the LAN servers to initiate optimized connections to remote sites. The current network architecture can satisfy these requirements by using which following deployment method?
Question310: On an Interceptor appliance running Fair Peering v2, what Steelhead characteristic is used to calculate peer affinity?
Question311: What of the following are true when deploying the Virtual Steelhead appliance? (Select 2)
Question312: How do you clear the peer affinity information from an Interceptor?
Question313: The Group ID (GID) links which two policies? (Select 2)
Question314: In a new physical in-path deployment, you realize that a Steelhead appliance at one of your branch offices is optimizing connections from other sites, however, no connections initiated from that branch office are being optimized. Which of the following is the most likely cause of this problem?
Question315: What is "Peer Affinity" on an Interceptor appliance?
Question316: A server-side logical in-path deployment is shown in the exhibit. Additionally, SH12 is configured with a fixed-target rule pointing to SH11. The client behind SH12 will not be able to establish a connection to SERVER1 as a logical loop will occur when the number of optimized connections in SH11 has reached the maximum system limit.
What is the best way to resolve this issue?
Question317: What are the four types of Interceptor appliance In-path rules?
Question318: If the VPN concentrator that a Steelhead Mobile client connects to is not in path with a Steelhead appliance, what changes could be made to the Riverbed infrastructure to allow optimization from the Steelhead Mobile clients?
Question319: Refer to the exhibit.
You noticed the following entry in the logs. What is the cause of the problem?
Question320: Citrix remote applications, running on the server and to access printers and disk drives, are not performing well. What can you configure to improve the performance?
Question321: RiOS v7.0 and later, the packet-mode-optimization feature can: (Select 2)