101-01 Online Practice Questions and Answers

Correct Answer: D

Correct Answer: C

Correct Answer: B

Correct Answer: A

Correct Answer: D

Correct Answer: A

Correct Answer: CD

Configure the Steelhead appliance to optimize Secure Windows traffic Configuration steps for Signed SMB and Signed SMB2 3.2.1 On the server-side Steelhead navigate to Configure > Optimization > CIFS (SMB1). 3.2.2 Under the SMB Signing section, check the `Enable SMB Signing' checkbox 3.2.3 Ensure the `NTLM Transparent Mode" option is selected

Note: NTLM Delegation can also be used.

Etc.

Similar Configuration steps for Encrypted MAPI.

References: Optimization in a Secure Windows Environment, White Paper , pages 35-36 https:// support.riverbed.com/download.htm?filename=public/doc/technotes/Windows_secur ity_guide.pdf

Correct Answer: B

B: Because secure transport was built taking hybrid networking into account, you can configure a private and public IP address. The public IP address relies on reachability over a network marked Public. This configurations allows the controller to first be reached over the private network and then the public network.

C: The management plane is configured on the SCC using SSL and SSH secured communications, in which you create and distribute the path selection policy. When a network is marked as securable, it indicates that the SteelHead will join a group of other SteelHeads that can encrypt traffic. The SCC pushes the path selection policy to all the SteelHeads.

Incorrect:

Not D: The configurations allows the controller to first be reached over the private network and then the

public network. The private and public IP addresses do not need to come from the same in-path interface.

With the stp-client controller in-path enable command, the data center SteelHead (DC-SH) uses the private

and public IP addresses from the same in-path interface, while the branch office SteelHead (BR-SH) uses

the private and public IP addresses from different in-path interfaces.

References:

https://support.riverbed.com/bin/support/static/mcmq1o68fbs27lqc5798c4p8m6/html/ak9u1

115aieef8qcb43mjgf98d/scc_9.2_dg_html/index.html#page/scc_deploy_9.2/secure_transp ort.html

Correct Answer: E

Correct addressing, the opposite of transparent Addressing which includes Port or Full transparency,

enables you to use the connection pooling optimization feature. Connection pooling works only for

connections optimized using correct addressing. Connection pooling enables Steelhead appliances to

create several TCP connections between each other before they are needed. When transparent

addressing is enabled, Steelhead appliances cannot create the TCP connections in advance because they

cannot detect what types of client and server IP addresses and ports are needed.

Incorrect:

not B: If you manage IP address-based or TCP port-based QoS policies for optimized traffic on your WAN

or WAN routers, you might use full address transparency or port transparency.

Not C: Full address transparency preserves your client and server IP addresses and port numbers in the

TCP/IP header fields for optimized traffic in both directions across the WAN. VLAN tags can also be

preserved.

Note: RiOS v6.0 or later offers the following options for configuring WAN visibility modes:

*

Correct Addressing - WAN-side connections use Steelhead appliance IP addresses and Steelhead appliance server ports.

*

Transparent Addressing - the following are Transparent Addressing options: ?Port Transparency - WAN-side connections use Steelhead appliance IP addresses but use TCP server ports that mirror the LAN-side connection. ?Full Transparency - WAN-side connections mirror all IP addresses and TCP ports used on the LAN-side connection. ?Full Transparency with Forward Reset - The same as Full Transparency, with an additional packet during auto-discovery to aid with integration of stateful network devices on the WAN.

References: Steelhead Appliance Deployment Guide, Including the Steelhead Mobile Controller, December 2013, pages 49-51 https://support.riverbed.com/bin/support/download?did=a53locljdv9s5oc0agjp851iol

Correct Answer: C

With flexible SaaS licensing, all supported SaaS applications can be optimized with a single license, and new applications added with a click of a button. Subscriptions are based on the number of users supported, with no restriction as to which SaaS apps are optimized.

References: http://www.riverbed.com/se/solutions/solutions-by-technology/saas-and-cloudperformance.html