Online 5V0-43.21 Dumps Help You Understand Questions Well

If you're interested in pursuing the VMware NSX Advanced Load Balancer (Avi) for Operators Skills 2024 certification, it's important to understand the exam format and the types of questions you can expect. This is where 5V0-43.21 questions come in. 5V0-43.21 exam dumps questions are designed to simulate the actual certification exam, providing you with a deeper understanding of the exam format and what to expect on test day. By taking practice exams and reviewing 5V0-43.21 questions, you can identify areas where you may need to focus your studying. Study free 5V0-43.21 exam dumps below.

Page 1 of 3

1. A single Virtual Service is configured to listen on multiple TCP service ports with a single server pool. The administrator would like to use the simplest configuration to keep the VS port and pool server port the same.

Which strategy should be used to meet this goal?

Build a Policy to map VS port to pool server port

Disable Port Translation in the VS configuration

Build a Data Script to map VS port to pool server port

Disable Port Translation in the Pool configuration

 Loading...

2. Which Virtual Service policy object can be used to serve a static web page if a rule is matched?

Network Security Policy

HTTP Request Policy

HTTP Response Policy

Custom Error Page

 Loading...

3. The operator observes that the Health Score for a particular Virtual Service has a gray background and no numeric value.

What is the explanation for the state of this Health Score?

The Service Engines on which the Virtual Service is placed have lost connection to the Controller.

All of the servers in the Virtual Service's configured Pools are down.

The Virtual Service has been disabled.

All Service Engines in the Service Engine Group are at maximum capacity, preventing the Virtual Service from being placed.

 Loading...

4. The network team has noticed that a Virtual Service has been marked down, but the application team has validated that the web servers are working as expected.

What is the issue?

The HTTP policy is configured to send a local response.

The HTTP Redirect policy is associated with the Virtual Service, and its pool is marked down by health check.

The Pool is configured with the wrong health monitor.

The DataScript is attached to the Virtual Service without a default pool.

 Loading...

5. Which two mechanisms for alerting an operator that an SSL/TLS certificate is about to expire are enabled by default? (Choose two.)

Health Score of VS which contain an expired SSL/TLS certificate will show up at the top in the Application Dashboard.

The Avi Controller will send an SNMP trap to alert the operator.

The Health Score of the VS will be lowered by a security penalty.

The Avi Controller will send an email to alert the operator.

In Template/Security/SSL TLS Certificates, the certificates that are about to expire will appear in yellow, orange, or red.

 Loading...

6. Which condition is not supported with an Elastic Scale High Availability mode?

Buffer Service Engines for high availability

Auto Scaling of Virtual Services

Maintaining original client source IP to the back-end server pool

Layer 3 / ECMP scale out

 Loading...

7. An operator in investigating a problem that requires checking the HTTP cookies supplied by the client.

When the logs are viewed, the operator finds that the cookies are not being shown.

Which configuration option should be enabled to fix this problem?

Real-time metrics

Log all headers

Non-significant logs

DataScript logs

 Loading...

8. Which item is NOT a valid TCP/UDP Profile Type?

UDP Proxy

UDP Fast Path

System-L4-Application

TCP Fast Path

 Loading...

9. An operator has been asked to increase SSL offload performance for a Virtual Service without compromising security. The Virtual Service is currently configured with both RSA and EC certificates.

Which action could the operator take to meet this requirement?

In the SSL/TLS Profile, disable all ciphers that have a check mark in the PFS column

In the Virtual Service, scale out to an additional Service Engine

In the SSL/TLS Profile, uncheck "Enable SSL Session Reuse"

In the Virtual Service edit page, arrange the order so the EC certificate is before RSA

 Loading...

10. An administrator needs to determine the rate of 5xx errors being returned by the Pool servers.

Which metrics graph in the Virtual Service Analytics tab can be used to complete this task?

Client Insights

End to End Timing

Conns

Requests

 Loading...

Page 2 of 3

11. An operator has created a Virtual Service with pass-through SSL using the System-L4-Application profile to load balance a secure HTTP application. The web servers only accept connections via TLS on port 443. The operator configures the Pool with default port 443 and an HTTP Health Monitor.

With this configuration, all pool members are marked as down. However, the application owner has confirmed that the web servers are operational.

Which configuration change should the operator make to correct this error?

Configure "Enable SSL" in the Pool configuration.

Configure "Enable SSL" in the HTTP Health Monitor.

Change the Application Profile in the Virtual Service to System-Secure-HTT

Configure a Health Monitor of Type: HTTPS instead of Type: HTT

 Loading...

12. Which method can be used to identify why a server has been marked down by a Health Monitor?

Mousing over the Health Score indicator of the Virtual Service

Searching for failed Health Monitor requests in Client Logs

Clicking on the Health Monitor in Templates -> Profiles -> Health Monitors to open the Health Monitor diagnostics screen Clicking on the failed

Health Monitor in the Pool -> Server Analytics screen

 Loading...

13. What is one component that is required to create a Virtual Service?

Pool

Application Type or Profile

Health Monitor

Server

 Loading...

14. Which method must be used by an Operator to create a new Virtual Service for multiple ports and network protocols?

Create multiple Application Profiles for each required port.

Create the Virtual Service using Basic Mode.

Create the Virtual Service using Advanced Mode.

Create the Virtual Service via the Service Engine CL

 Loading...

15. An administrator has defined these three SE Groups based on capacity: Small-Group, Medium-Group, and Large-Group. The operator is configuring a Virtual Service that needs to be placed on SE's in the Large-Group.

How should this goal be accomplished?

Create the VS in Basic Setup mode, and override the default SE Group.

Create the VS in Advanced Setup mode, and override the default SE Group in the Policy section.

Create the VS in Advanced Setup mode, and override the default SE Group in the Advanced section.

Create the VS in Basic Setup mode, and override the default SE Group in the Policy section.

 Loading...

16. An operator has noticed that the Avi GUI is very slow.

Which reason explains this slowness?

Log all headers and Non-significant logs options have been enabled for multiple busy VS

Compression has been enabled for multiple busy VSs.

Two different clouds have been configured in this Avi Controller.

Caching has been enabled for multiple busy VSs.

 Loading...

17. The network operations team has found that the CPU utilization of their Service Engines has increased greatly since enabling Web Application Firewall (WAF), and this has been causing increased application latency.

Which two WAF features should be used to improve WAF performance for this application? (Choose two.)

Change the WAF policy to detection mode

Write Positive Security Model rules

Increase the memory of the Service Engines

Create allow list bypass rules

Use a different Core Rule Set

 Loading...

18. Which WAF inspection method is the most computationally expensive?

Positive Security

Mode Delegation

Signature

Allow List

 Loading...

19. An operator suspects that the currently deployed Service Engines are undersized and is concerned about the impact of that situation. They are configured with 1 vCPU and 2 GB RAM.

Why is the operator concerned?

Operator would be unable to login to NSX Load Balancer Admin console

Additional Virtual Services could not be placed

SSL throughput would be affected

Client connections would be redirected to another pool

 Loading...

20. An operator selects "Average Values" and "Past 30 Minutes" for statistics type and timeframe on the Analytics tab of a Virtual Service and notices the graph only provides a new data point every five minutes. The graph had been updating more frequently when the Virtual Service was first created.

What is the explanation for this behavior?

The Real Time Metrics option has been disabled by another operator.

The GUI Refresh Interval has been increased to five minutes.

The statistics type should be set to "Current Values" rather than "Average Values."

The timeframe should be set to "Real Time" rather than "Past 30 Minutes."

 Loading...

Page 3 of 3

21. Which approach CANNOT be used to redirect HTTP to HTTPS for a Virtual Service?

Select the System-Secure-HTTP Application Profile

Use a Network Security Policy

Write a Datascript

Use an HTTP Request Policy

 Loading...

22. Which task is performed by the Controller?

Checking the health of the back-end Pool Members

Inserting Persistence Cookie into the data stream

Indexing the client logs

Determining which Service Engine processes a transaction in active/active scale-out mode

 Loading...

23. The network operations center has reported dramatically fewer entries in the logs tab of a new Virtual Service after the first 30 minutes of operation.

What is the likely cause of the reduced log volume?

Logs are being sent to syslog instead of the logs tab.

The Service Engine has disabled logging due to high CPU load.

Non-significant logs are not enabled.

A widespread internet outage has occurred.

 Loading...

24. Which DNS application profile setting returns NOERROR responses for IPv6 AAAA queries when there is no AAAA record present for the FQDN?

Change "Invalid DNS Query Processing" to drop

Change "Number of IPs returned by DNS server" to 4

Add an IPv6 domain name to "Valid Subdomains"

Change "Invalid DNS Query Processing" to respond

 Loading...

25. Which item can only be configured when the operator uses the Advanced Setup wizard?

Auto Allocation of the VIP

Service Port

Pool Group

IPv6 VIP

 Loading...

26. An operator has been informed by the application team that normal behavior of a new application will generate HTTP error code 403. The operator would like to avoid false positive in the significant logs.

Which action should be taken to meet this goal?

Write a Datascript for the HTTP Response event that matches on the HTTP 403 response code and disables logging for that response.

Create a new Analytics Profile which disables non-significant logs.

Create a new Analytics Profile which contains HTTP 403 in the "Exclude HTTP Status codes from Error Classification".

Create a new Analytics Profile which disables significant logs.

 Loading...

27. Which statement regarding SNAT is NOT true?

SNAT is enabled by default.

SNAT limits a Virtual Service to a maximum of 64k concurrent connections.

SNAT is required for connection multiplexing.

SNAT is required for scaling a Virtual Service across Service Engines.

 Loading...

 Loading...