Question 1

An operator has been asked to increase SSL offload performance for a Virtual Service without compromising security. The Virtual Service is currently configured with both RSA and EC certificates.

Which action could the operator take to meet this requirement?

Options :

A : In the SSL/TLS Profile, disable all ciphers that have a check mark in the PFS column

B : In the Virtual Service, scale out to an additional Service Engine

C : In the SSL/TLS Profile, uncheck "Enable SSL Session Reuse"

D : In the Virtual Service edit page, arrange the order so the EC certificate is before RSA

Answer: A

Question 2

In which situation would using the Advanced Setup mode of the "Create Virtual Service" wizard be required?

Options :

A : When creating HTTPS Virtual Service type

B : When adding servers as part of the Virtual Service creation

C : When specifying analytics settings

D : When determining the application type

Answer: B

Question 3

Which statement accurately describes Service Engine Groups?

Options :

A : They can contain Service Engines with different High Availability modes.

B : They can be shared across multiple clouds.

C : They can be deleted only after all Service Engines within it are deleted.

D : Service Engines can be a member of more than one Service Engine Group.

Answer: D

Question 4

Which Virtual Service policy object can be used to serve a static web page if a rule is matched?

Options :

A : Network Security Policy

B : HTTP Request Policy

C : HTTP Response Policy

D : Custom Error Page

Answer: D

Question 5

The engineering team has created a new Virtual Service for the latest application in Amazon Web Services. The help desk has reported that clients are unable to access this web application and have discovered that the DNS name is resolving to a private address that is not accessible over the internet. Avi is used for DNS resolution of the cloud services.

What is the most likely cause of this issue?

Options :

A : The engineer incorrectly entered the IP address in the DNS entry.

B : "Assign Elastic IP for External Client Access" was not checked.

C : The AWS Security Groups are not configured correctly.

D : A Network Security Policy is assigned to the Virtual Service.

Answer: B

Confidently Practice Online with Free 5V0-43.21 Exam Cram

Buying Options: