5V0-43.21 by VMware Actual Free Exam Questions And Answers

Question 1

An operator has been asked to provide a list of SSL/TLS ciphers used for the last 100 requests of a Virtual Service. The operator can't find this information in the GUI.
Which action, if any, retrieves this information?

A. The operator will need to use the API since this list can only be retrieved through API.

B. The operator will need to export the logs in a CSV file to retrieve the list of ciphers.

C. The operator can't retrieve this through the GUI since Avi does not record the ciphers for compliance reasons.

D. The operator will need to enable Log all Headers in the VS configuration.

Discussion 0

Correct Answer: C Vote an answer

Question 2

The engineering team has created a new Virtual Service for the latest application in Amazon Web Services. The help desk has reported that clients are unable to access this web application and have discovered that the DNS name is resolving to a private address that is not accessible over the internet. Avi is used for DNS resolution of the cloud services.
What is the most likely cause of this issue?

A. The engineer incorrectly entered the IP address in the DNS entry.

B. A Network Security Policy is assigned to the Virtual Service.

C. The AWS Security Groups are not configured correctly.

D. "Assign Elastic IP for External Client Access" was not checked.

Discussion 0

Correct Answer: C Vote an answer

Question 3

Which task is performed by the Controller?

A. Terminating SSL/TLS

B. Renewing SSL/TLS Certificates

C. Resolving client DNS queries for GSLB

D. Removing HTTP Headers from the data stream

Discussion 0

Correct Answer: C Vote an answer

Question 4

Which file type will the default WAF Profile bypass for inspection?

A. yml

B. .txt

C. ico

D. .exe

Discussion 0

Correct Answer: C Vote an answer

Question 5

A single Virtual Service is configured to listen on multiple TCP service ports with a single server pool. The administrator would like to use the simplest configuration to keep the VS port and pool server port the same.
Which strategy should be used to meet this goal?

A. Disable Port Translation in the Pool configuration

B. Build a Policy to map VS port to pool server port

C. Build a Data Script to map VS port to pool server port

D. Disable Port Translation in the VS configuration

Discussion 0

Correct Answer: C Vote an answer

Question 6

An HTTPS Virtual Service is reachable but displays an untrusted certificate error.
What would NOT cause this issue?

A. The certificate has expired.

B. The system default self-signed certificate was used.

C. The certificate is signed by a valid internal CA, but it is not trusted by the client.

D. The certificate is an EC certificate instead of an RSA certificate.

Discussion 0

Correct Answer: D Vote an answer

Question 7

An administrator needs to determine the rate of 5xx errors being returned by the Pool servers.
Which metrics graph in the Virtual Service Analytics tab can be used to complete this task?

A. Requests

B. Client Insights

C. End to End Timing

D. Conns

Discussion 0

Correct Answer: B Vote an answer

Question 8

Which three properties are configurable for a Service Engine Group? (Choose three.)

A. Service Engine CPU and memory

B. Analytics profile

C. Load balancing algorithm

D. Auto rebalance policy

E. Real time metrics

F. SSL profile

Discussion 0

Correct Answer: B,C,D Vote an answer

Question 9

Which issue requires elastic scale-out?

A. Mitigating disruption if a Controller fails

B. Managing heavy increases in traffic volume without disruption

C. Processing requests across multiple protocols

D. Handling Layer 7 processing such as SSL Termination or Web Application Firewall

Discussion 0

Correct Answer: B Vote an answer

VMware NSX Advanced Load Balancer for Operators Skills - 5V0-43.21 Exam Practice Test

Contact Us

Useful Links

Latest Updated