Question 1

The engineering team has created a new Virtual Service for the latest application in Amazon Web Services. The help desk has reported that clients are unable to access this web application and have discovered that the DNS name is resolving to a private address that is not accessible over the internet. Avi is used for DNS resolution of the cloud services.What is the most likely cause of this issue?

Options :

A : The engineer incorrectly entered the IP address in the DNS entry.

B : "Assign Elastic IP for External Client Access" was not checked.

C : The AWS Security Groups are not configured correctly.

D : A Network Security Policy is assigned to the Virtual Service.

Answer: B

Question 2

An operator is configuring a TCP/UDP Profile of type "TCP Proxy" for an application.

What are two valid reasons to configure the Custom mode for the TCP Proxy Settings? (Choose two.)

Options :

A : Expose client destination TCP port to the application

B : Statically configure the Receive Window

C : Disable Source Network Address Translation (SNAT)

D : Change the Idle Duration timeout

E : Enable Port Address Translation (PAT)

Answer: A,D

Question 3

An operator has been asked to increase SSL offload performance for a Virtual Service without compromising security. The Virtual Service is currently configured with both RSA and EC certificates.

Which action could the operator take to meet this requirement?

Options :

A : In the SSL/TLS Profile, disable all ciphers that have a check mark in the PFS column

B : In the Virtual Service, scale out to an additional Service Engine

C : In the SSL/TLS Profile, uncheck "Enable SSL Session Reuse"

D : In the Virtual Service edit page, arrange the order so the EC certificate is before RSA

Answer: A

Question 4

An operator has been informed by the application team that normal behavior of a new application will generate HTTP error code 403. The operator would like to avoid false positive in the significant logs.

Which action should be taken to meet this goal?

Options :

A : Write a Datascript for the HTTP Response event that matches on the HTTP 403 response code and disables logging for that response.

B : Create a new Analytics Profile which disables non-significant logs.

C : Create a new Analytics Profile which contains HTTP 403 in the "Exclude HTTP Status codes from Error Classification".

D : Create a new Analytics Profile which disables significant logs.

Answer: C

Question 5

An operator is configuring a TCP/UDP Profile of type "TCP Proxy" for an application.What are two valid reasons to configure the Custom mode for the TCP Proxy Settings? (Choose two.)

Options :

A : Expose client destination TCP port to the application

B : Statically configure the Receive Window

C : Disable Source Network Address Translation (SNAT)

D : Change the Idle Duration timeout

E : Enable Port Address Translation (PAT)

Answer: A,D

Free 5V0-43.21 Mock Exam – Practice Online Confidently

Buying Options: