Soal Latihan RCSP-W (Part 1)

Sedikit dari soal-soal latihan RCSP yang saya dapat, ditambahi penjelasan semampu saya. Jika dirasa ada yang kurang silahkan ditambahkan ya.

1. What are two tipes of Load Balancing rules on an Interceptor appliance?

A. Auto, Drop
B. Redirect Pass-through
C. Allow, Deny
D. Auto-Balance, Auto-Terminate

Answer: B

Specify one of the following rule types:

• Redirect – Configure rules of this type for traffic you want to optimize.
• Pass-Through – Configure rules of this type as a second-preference rule for cases where you want to optimize when connections are available on specified targets, but, in the event targets have reached admission control capacity, you would rather pass through traffic than tax the auto-balance pool. For example, you might use pass-through rules to handle HTTP traffic on port 80.

Referensi: Interceptor User Guide, halaman 60

2. The primary purpose of the Redirect In-path rule is to:

A. Select which traffic to redirect to Steelhead appliances
B. Utilize the Interceptor appliance as a backup firewall device
C. Select which traffic to split to two different interfaces
D. Select to which Steelhead appliance(s) traffic will be redirected

Answer: A
Redirect – Redirect rules select traffic that might be redirected. Typically, you configure a redirect rule for source and destination addresses and ports you want to optimize with the Riverbed system. A separate set of load-balancing rules determine the Steelhead appliance to which the connection is to be redirected.

Referensi: Interceptor User Guide, halaman 54

3. The primary purpose of setting proxies (found on Networking — Proxies) on the Interceptor is to:

A. Allow for a web or FTP proxy when specifying a URL on the Management Console or CLI
B. Allow for another Interceptor to redirect on behalf of the current Interceptor
C. Allow for Steelhead appliances to dynamically handle the load of another Steelhead appliance
D. Allow for two Interceptor appliances to act redundantly in a serial configuration

Answer: A
Pada konfigurasi Host Settings, gunanya setting proxy address untuk Web atau FTP proxy access ke Interceptor appliance.

Referensi: Interceptor Appliance User Guide, halaman 18

4. Which authentication methods are available to the Steelhead Mobile Controller?

A. Local and LDAP
B. Local, NIS, and LDAP
C. Local, RADIUS, and TACACS+
D. Local, RADIUS, and Active Directory
E. NTLM and Kerberos

Answer: C

5. A customer wants to deploy parallel Interceptor appliances. How should an Interceptor appliance be configured ¡n relation to another parallel Interceptor appliance?

A. Peer Interceptor
B. As a failover buddy
C. As a peer neighbor
D. A and B
E. A, B, and C

Answer: A

If you deploy more than one Interceptor appliance per site, you must configure each Interceptor appliance to interact with every other Interceptor in one of two ways: as a failover Interceptor or as a cluster Interceptor.

• Failover Interceptors are pairs of serially connected Interceptor appliances. You deploy two Interceptor appliances physically in-path on all of the same physical links, and each appliance is configured to act as a backup for the other appliance for the same network links. If one appliance goes down or needs maintenance, the other appliance handles redirections for the connections over those links.
• Cluster Interceptors are two or more connected Interceptor appliances that are not necessarily serially connected. You configure peer Interceptor appliances to cover different network paths, typically parallel paths. This design enables Interceptor appliances to forward connections in an asymmetrically routed network.

An Interceptor appliance communicates with other Interceptor appliances over TCP connections on the enabled in-path logical interface (or all interfaces, if multiple-interface support is configured)that you designate for Interceptor-to-Interceptor communication. This applies to failover Interceptors and to cluster Interceptors.

Referensi: Interceptor User Guide, halaman 37

6. What deployment type supports fail-to-wire?

A. Physical in-path
B. Virtual in-path
C. Out-of-path
D. Virtual Steelhead appliance
E. Proxy file server

Answer: A

 7. On the Steelhead Mobile Controller, what VPNs require the use of Reorder Intermediate Drivers? (Select 2)

A. Nortel VPN
B. Cisco VPN client
C. Check Point
D. OpenVPN
E. Riverbed VPN client

Answer: A, C

Reorder Intermediate Drivers (Required for Check Point and Nortel VPN compatibility) – For Windows only. Check the check box to enable reordering of intermediate drivers for Check Point and Nortel VPN compatibility. The default setting is disabled. Enable this option only if the client is using Check Point or Nortel VPN client.

Referensi: Steelhead Mobile Controller User Guide, halaman 95

8. Which of the following deployments is incompatible with the Branch Warming feature?

A. In-path
B. Virtual in-path
C. Out-of-path
D. WCCP
E. PBR

Answer: C

9. Peer affinity is most closely related to:

A. Parallel Interceptor redirection based on Sport ID and client IP
B. Serial Interceptor redirection based on Sport ID to server
C. Segstore ID Steelhead mapping based on Sport ID of Steelhead appliances
D. The shipyard from which Riverbed is most likely to ship Interceptors

Answer: C

The Sport ID is a unique identifier for each Steelhead product, including mobile. On SHM, it loosely relates to the SID of the operating system. Peer affinity explained below:

10. A firewall at a remote site on the WAN side of Steelhead appliance (A) is stripping out the 76 and 78 values in the TCP options field. Steelhead appliance (B) is in the local cluster of appliances communicating with an Interceptor appliance. The desired result is for optimization to continue between Steelhead appliance (A) and Steelhead appliance (B) for all traffic originating from the remote site. A suggestion is made to use fixed target rule(s) to meet this objective. Based on the information provided select the best answer from the choices below:

A. On Steelhead appliance (A) configure a fixed-target rule to the Interceptor in-path address
B. On Steelhead appliance (A) configure a fixed target rule to the Interceptor in-path address with Steelhead appliance (B) as the backup target
C. On Steelhead appliance (A) configure a fixed target rule to the Steelhead appliance (B) in-path address
D. Fixed target rules will not work with Steelhead appliances virtually out of path and communicating with Interceptors
E. TCP option 76 or 78 are not relevant when an Interceptor appliance is used, Peer Affinity will automatically achieve this objective

Answer: C

InsyaAllah disambung lagi 😀