5V0-43.21 VMware NSX Advanced Load Balancer(Avi) for Operators Skills Exam Dumps

dumps2024-11-16T10:52:16+08:00

5V0-43.21 VMware NSX Advanced Load Balancer(Avi) for Operators Skills exam is easy to pass now. There are 50 Single and Multiple Choice, Proctored questions in real VMware 5V0-43.21 exam, and you have 105 minutes to finish the test. The required passing score is 300. The available language is English. The exam price is $250. We provide the latest VMware NSX Advanced Load Balancer(Avi) for Operators Skills 5V0-43.21 exam dumps, which can ensure you pass the test easily. Free VMware NSX Advanced Load Balancer(Avi) for Operators Skills 5V0-43.21 exam dumps are available below.

Page 1 of 3

1. Which function is performed by the data plane?

Log indexing

Service engine lifecycle management

Configuration backups

Pool health monitoring

2. How would an operator replace the default certificate used by the Avi GUI with a trusted certificate?

Generate a certificate of type Controller Certificate, then assign it to the management V

Generate a certificate of type Controller Certificate, then update the Access Settings under Administration -> Settings.

Avi can auto-generate a trusted certificate from the GUI and use it for the GUI access.

The default certificate used by the Avi GUI is already trusted.

3. Which three techniques can an operator use to scale data plane performance? (Choose three.)

BGP-based horizontal scaling of SES in an SE Group

Native horizontal scaling of an individual SE

Increase the maximum number of Virtual Services in an SE Group.

Vertical scaling of an individual SE's resources

Native horizontal scaling of SES in an SE Group

O OSPF-based horizontal scaling of SEs in an SE Group

4. An operator needs to configure a second Virtual Service that re-uses an existing VS IP on a separate service port.

How is this handled in the Create VS configuration?

In the Basic Setup Wizard, create the second VS without Auto Allocate, and then type in the existing VS I

In the Advanced Setup Wizard, create the second VS as a Child Virtual Service.

In the Advanced Setup Wizard, create the second VS without Auto Allocate, and then type in the existing VS I

In the Advanced Setup Wizard, create the second VS with a "Virtual Service for VIP Sharing":

5. Which method must be used by an Operator to create a new Virtual Service for multiple ports and network protocols?

Create multiple Application Profiles for each required port.

Create the Virtual Service using Basic Mode.

Create the Virtual Service using Advanced Mode.

Create the Virtual Service via the Service Engine CL

6. A virtual service is configured with an HTTP Security policy, Network Security policy, DataScript Response policy, and an HTTP Request policy.

In which order will these be evaluated?

Network Security -> HTTP Security -> HTTP Request -> DataScript Response

Network Security -> HTTP Request -> HTTP Security -> DataScript Response

HTTP Security -> Network Security -> HTTP Request -> DataScript Response

DataScript Response -> Network Security -> HTTP Request -> HTTP Security

7. An administrator has configured an existing Layer 7 Virtual Service terminating SSL/TLS with WAF enabled. The administrator needs to include support for SMTP on the same FQDN/Virtual Service IP.

Which is the correct configuration method?

Create a second Virtual Service and IP for SMTP, and add a new record in DNS to handle SMTP separately.

Add the SMTP listening ports with separate L4 Application Profile to the same L7 SSL/TLS VS, and use content switching to select SMTP Pool based on inbound port/protocol.

Create a second Virtual Service that re-uses the same Virtual IP as the L7 SSL/TLS VS with separate listening ports, L4 Application Profile, and back-end SMTP pool.

Add the SMTP listening ports with separate L4 Application Profile to the same L7 SSL/TLS VS, and disable destination port translation to the existing server pool.

8. What are two benefits of EC certificates over RSA certificates? (Choose two.)

ECC provides similar strength as RSA but with much smaller keys.

The certificates cost less money.

Modern browsers no longer support RSA certificates.

Processing for ECC is less CPU-intensive than for RS

RSA certificates cannot be used in certain countries.

9. An operator configured a new content switch rule for HTTP Virtual Service and wants to check the logs on the Virtual Service level to verify that the rule was executed as expected. However, the request cannot be found in the logs.

Which action, if any, should the operator take so these logs can be seen?

Enable non-significant logs on the Service Engine where Virtual Service is placed.

Enable log headers option on the Virtual Service level.

Enable non-significant logs on the Virtual Service level.

No action will work because if the logs are not visible, it means there are no requests from the client.

10. Which item can only be configured when the operator uses the Advanced Setup wizard?

Auto Allocation of the VIP

Service Port

Pool Group

IPv6 VIP

Page 2 of 3

11. Which built-in application profile is a valid option for a Virtual Service?

System-DTLS

System-Fast-Path

System-ICMP

System-DNS

12. Which statement accurately describes Service Engine Groups?

They can contain Service Engines with different High Availability modes.

They can be shared across multiple clouds.

They can be deleted only after all Service Engines within it are deleted.

Service Engines can be a member of more than one Service Engine Group.

13. Where are logging messages related to the inspection of application traffic found when enabling the Web Application Firewall (WAF) on a Virtual Service?

Logs tab of Virtual Service detail screen

Security tab of the Virtual Service detail screen

Analytics tab of Virtual Service detail screen

Alerts tab of the Operations screen

14. The network operations center has reported dramatically fewer entries in the logs tab of a new Virtual Service after the first 30 minutes of operation.

What is the likely cause of the reduced log volume?

Logs are being sent to syslog instead of the logs tab.

The Service Engine has disabled logging due to high CPU load.

Non-significant logs are not enabled.

A widespread internet outage has occurred.

15. In which situation would using the Advanced Setup mode of the "Create Virtual Service" wizard be required?

When creating HTTPS Virtual Service type

When adding servers as part of the Virtual Service creation

When specifying analytics settings

When determining the application type

16. Which SE Group parameter affects the value of N for N+M HA?

CPU Reserve

VCPUs/Service Cores per SE

Scale per Virtual Service

Buffer Service Engines

17. An operator selects "Average Values" and "Past 30 Minutes" for statistics type and timeframe on the Analytics tab of a Virtual Service and notices the graph only provides a new data point every five minutes. The graph had been updating more frequently when the Virtual Service was first created.

What is the explanation for this behavior?

The Real Time Metrics option has been disabled by another operator.

The GUI Refresh Interval has been increased to five minutes.

The statistics type should be set to "Current Values" rather than "Average Values."

The timeframe should be set to "Real Time" rather than "Past 30 Minutes."

18. Which element of the End-to-End Timing graph identifies the average time taken for a web server to process a request, fetch content from a database, and generate the content?

Server RTT

Total Time

App Response

Data Transfer

19. What is one component that is required to create a Virtual Service?

Pool

Application Type or Profile

Health Monitor

Server

20. What is the maximum number of virtual network adapters that can be used on single Service Engine running in a vSphere environment?

Page 3 of 3

21. The network team has noticed that a Virtual Service has been marked down, but the application team has validated that the web servers are working as expected.

What is the issue?

The HTTP policy is configured to send a local response.

The HTTP Redirect policy is associated with the Virtual Service, and its pool is marked down by health check.

The Pool is configured with the wrong health monitor.

The DataScript is attached to the Virtual Service without a default pool.

22. Which DNS application profile setting returns NOERROR responses for IPv6 AAAA queries when there is no AAAA record present for the FQDN?

Change "Invalid DNS Query Processing" to drop

Change "Number of IPs returned by DNS server" to 4

Add an IPv6 domain name to "Valid Subdomains"

Change "Invalid DNS Query Processing" to respond

23. Which approach CANNOT be used to redirect HTTP to HTTPS for a Virtual Service?

Select the System-Secure-HTTP Application Profile

Use a Network Security Policy

Write a Datascript

Use an HTTP Request Policy

24. Which Virtual Service policy object can be used to serve a static web page if a rule is matched?

Network Security Policy

HTTP Request Policy

HTTP Response Policy

Custom Error Page

25. Which statement regarding SNAT is NOT true?

SNAT is enabled by default.

SNAT limits a Virtual Service to a maximum of 64k concurrent connections.

SNAT is required for connection multiplexing.

SNAT is required for scaling a Virtual Service across Service Engines.

26. Which three options can be configured via the HTTP Application Profile? (Choose three.)

X-Forwarded-For header

PROXY Protocol

HTTP cookie persistence

Caching

Rate limiting

Web Application Firewall

27. Which statement is true for Avi to compress an HTTP response?

Caching must be disabled.

The Web Application Firewall must be disabled.

Client round trip time must be greater than 100ms.

Client's Accept-Encoding header must be in the request.

5V0-43.21 VMware NSX Advanced Load Balancer(Avi) for Operators Skills Exam Dumps

5V0-43.21 VMware NSX Advanced Load Balancer(Avi) for Operators Skills Exam Dumps

Share this post

Related Posts