Question 1

An operator has been asked to increase SSL offload performance for a Virtual Service without compromising security. The Virtual Service is currently configured with both RSA and EC certificates.

Which action could the operator take to meet this requirement?

Options :

A : In the SSL/TLS Profile, disable all ciphers that have a check mark in the PFS column

B : In the Virtual Service, scale out to an additional Service Engine

C : In the SSL/TLS Profile, uncheck "Enable SSL Session Reuse"

D : In the Virtual Service edit page, arrange the order so the EC certificate is before RSA

Answer: A

Question 2

In which situation would using the Advanced Setup mode of the "Create Virtual Service" wizard be required?

Options :

A : When creating HTTPS Virtual Service type

B : When adding servers as part of the Virtual Service creation

C : When specifying analytics settings

D : When determining the application type

Answer: B

Question 3

An operator has been informed by the application team that normal behavior of a new application will generate HTTP error code 403. The operator would like to avoid false positive in the significant logs.

Which action should be taken to meet this goal?

Options :

A : Write a Datascript for the HTTP Response event that matches on the HTTP 403 response code and disables logging for that response.

B : Create a new Analytics Profile which disables non-significant logs.

C : Create a new Analytics Profile which contains HTTP 403 in the "Exclude HTTP Status codes from Error Classification".

D : Create a new Analytics Profile which disables significant logs.

Answer: C

Question 4

Which statement accurately describes Service Engine Groups?

Options :

A : They can contain Service Engines with different High Availability modes.

B : They can be shared across multiple clouds.

C : They can be deleted only after all Service Engines within it are deleted.

D : Service Engines can be a member of more than one Service Engine Group.

Answer: D

Question 5

An operator is configuring a TCP/UDP Profile of type "TCP Proxy" for an application.

What are two valid reasons to configure the Custom mode for the TCP Proxy Settings? (Choose two.)

Options :

A : Expose client destination TCP port to the application

B : Statically configure the Receive Window

C : Disable Source Network Address Translation (SNAT)

D : Change the Idle Duration timeout

E : Enable Port Address Translation (PAT)

Answer: A,D

Confidently Practice Online with Free 5V0-43.21 Exam Cram

Buying Options: