Question 1

Which statement accurately describes Service Engine Groups?

Options :

A : They can contain Service Engines with different High Availability modes.

B : They can be shared across multiple clouds.

C : They can be deleted only after all Service Engines within it are deleted.

D : Service Engines can be a member of more than one Service Engine Group.

Answer: D

Question 2

In which situation would using the Advanced Setup mode of the "Create Virtual Service" wizard be required?

Options :

A : When creating HTTPS Virtual Service type

B : When adding servers as part of the Virtual Service creation

C : When specifying analytics settings

D : When determining the application type

Answer: B

Question 3

An operator has been asked to increase SSL offload performance for a Virtual Service without compromising security. The Virtual Service is currently configured with both RSA and EC certificates.

Which action could the operator take to meet this requirement?

Options :

A : In the SSL/TLS Profile, disable all ciphers that have a check mark in the PFS column

B : In the Virtual Service, scale out to an additional Service Engine

C : In the SSL/TLS Profile, uncheck "Enable SSL Session Reuse"

D : In the Virtual Service edit page, arrange the order so the EC certificate is before RSA

Answer: A

Question 4

The engineering team has created a new Virtual Service for the latest application in Amazon Web Services. The help desk has reported that clients are unable to access this web application and have discovered that the DNS name is resolving to a private address that is not accessible over the internet. Avi is used for DNS resolution of the cloud services.

What is the most likely cause of this issue?

Options :

A : The engineer incorrectly entered the IP address in the DNS entry.

B : "Assign Elastic IP for External Client Access" was not checked.

C : The AWS Security Groups are not configured correctly.

D : A Network Security Policy is assigned to the Virtual Service.

Answer: B

Question 5

An operator is configuring a TCP/UDP Profile of type "TCP Proxy" for an application.

What are two valid reasons to configure the Custom mode for the TCP Proxy Settings? (Choose two.)

Options :

A : Expose client destination TCP port to the application

B : Statically configure the Receive Window

C : Disable Source Network Address Translation (SNAT)

D : Change the Idle Duration timeout

E : Enable Port Address Translation (PAT)

Answer: A,D

Higher Test Marks with Free Online 5V0-43.21 Exam Practice

Buying Options: