VMware NSX Advanced Load Balancer for Operators Skills (5V0-43.21) Free Practice Test

Question 1

All Pool resources are "Down" and not available, but the Virtual Service port is still responding.
The operator would like the VS port to not respond when there are no Pool resources available.
Which configuration will cause this response?

A. Virtual Service -> Settings -> "Ignore reachability constraints for server pool"

B. Pool -> Advanced -> "Remove listening port when VS is down"

C. Virtual Service -> Advanced -> "Remove listening port when VS is down"

D. Pool -> Settings -> "Ignore reachability constraints for server pool"

Correct Answer: D

Question 2

Which Network Security Policy action is valid?

A. Continue

B. Redirect

C. Rate Limit

D. Send Local Response

Correct Answer: B

Question 3

An operator has created a Virtual Service with pass-through SSL using the System-L4-Application profile to load balance a secure HTTP application. The web servers only accept connections via TLS on port 443. The operator configures the Pool with default port 443 and an HTTP Health Monitor.
With this configuration, all pool members are marked as down. However, the application owner has confirmed that the web servers are operational.
Which configuration change should the operator make to correct this error?

A. Configure "Enable SSL" in the Pool configuration.

B. Configure "Enable SSL" in the HTTP Health Monitor.

C. Configure a Health Monitor of Type: HTTPS instead of Type: HTTP.

D. Change the Application Profile in the Virtual Service to System-Secure-HTTP.

Correct Answer: C

Question 4

An administrator has attached a WAF Policy to their Virtual Service and starts getting reports from users that they are receiving a "403 Forbidden" error when trying to reach their application.
Which configuration would likely cause this issue?

A. The WAF Policy signatures are disabled.

B. The WAF Policy is in detection mode.

C. The WAF Policy is in enforcement mode.

D. The WAF Policy has learning mode disabled.

Correct Answer: D

Question 5

Which method must be used by an Operator to create a new Virtual Service for multiple ports and network protocols?

A. Create the Virtual Service using Basic Mode.

B. Create the Virtual Service via the Service Engine CLI.

C. Create the Virtual Service using Advanced Mode.

D. Create multiple Application Profiles for each required port.

Correct Answer: C

Question 6

The application team has requested that traffic destined for /downloads be sent to a different set of back-end servers than the rest of the traffic.
Which feature should be used to accomplish this goal?

A. Content switch action in an HTTP Request policy

B. Pool Group priority

C. Redirect to HTTPS action in an HTTP Security policy

D. Redirect action in an HTTP Request policy

Correct Answer: A

Question 7

Which two mechanisms for alerting an operator that an SSL/TLS certificate is about to expire are enabled by default? (Choose two.)

A. The Health Score of the VS will be lowered by a security penalty.

B. The Avi Controller will send an SNMP trap to alert the operator.

C. The Avi Controller will send an email to alert the operator.

D. In Template/Security/SSL TLS Certificates, the certificates that are about to expire will appear in yellow, orange, or red.

E. Health Score of VS which contain an expired SSL/TLS certificate will show up at the top in the Application Dashboard.

Correct Answer: C,D

Question 8

Which statement is true in relation to native scale out?

A. The scaling out process is disruptive to existing connections because existing flows are redistributed across Service Engines.

B. A large volume of client uploads is not a good use case for Scale Out because of packet-per-second limitations of the primary SE.

C. Load will be evenly balanced across all Service Engines because traffic is balanced on a per-packet basis.

D. Scaling out has no impact on SSL/TLS processing capacity because SSL processing is handled only by the primary SE.

Correct Answer: A

Question 9

Which WAF inspection method is the most computationally expensive?

A. Signature

B. Positive Security

C. Allow List

D. Mode Delegation

Correct Answer: B

Welcome to TestSimulate

VMware NSX Advanced Load Balancer for Operators Skills (5V0-43.21) Free Practice Test