Riverbed Certified Solutions Associate - Application Delivery

Protect a Web application from all OWASP TOP10 attacks Block know attacks using attack patterns (Baselines). Use white lists to block even unknown attacks. Block Web server responses to fight information disclosure Black list IPs if they attack the Web site.

Stingray Traffic Manager (STM) Apache Webserver 1.3 J2EE Webserver Windows IIS 5, 6, 7 Apache Webserver 2.x

Server selects ✘ Network router selects ✘ Network firewall selects ✘ Client selects ✔ Only one cipher suite is available in SSL/TLS; therefore, there is no need to select ✔

An Internet services ability to transfer huge amounts of data. ✘ An Internet services ability to integrate with compute clouds (and other highly virtualized environments). ✘ An Internet services ability to remain online when some of the underlying components malfunction orfail. ✘ An Internet services ability to scale into a cloud automatically. ✔

In the virtual server settings ✘ Inline and requires 3 interfaces ✘ In the global settings ✘ In the system settings ✔ In the class settings ✔

1000L ✘ 1000M ✘ 1000H ✘ 2000L ✔ 4000VH ✔

Web server ✘ Web client ✘ Web browser ✘ Web logger ✔ Web cache ✔

Create a self-signed server certificate and install this on the public Web server. ✘ Create a Certificate Signing Request, sign the CSR with your Enterprise Certificate Authority server andinstall the certificate on your public Web server. ✘ Create a Certificate Signing Request, sign the CSR using a trusted Certificate Authority service (such asVerisign, Entrustand) and install the certificate on your public Web server. ✘ Download a server certificate and private key from the Internet and install it on your public Web server. ✔ Use an off-line tool, like OpenSSL, to create the server certificate and install it on your public Webserver. ✔

The Internet Protocol (IP) ✘ User Datagram Protocol (UDP) ✘ File Transfer Protocol (FTP) ✘ Address Resolution Protocol (ARP) ✔ Internetwork Packet Exchange (IPX) ✔

Server Hello ✘ Client Hello ✘ ClientKeyExchange ✘ Certificate ✔ ChangeCipherSpec ✔