5V0-43.21 Practice Online

Question 1

An operator is configuring a TCP/UDP Profile of type "TCP Proxy" for an application.

What are two valid reasons to configure the Custom mode for the TCP Proxy Settings? (Choose two.)

A : Expose client destination TCP port to the application

B : Statically configure the Receive Window

C : Disable Source Network Address Translation (SNAT)

D : Change the Idle Duration timeout

E : Enable Port Address Translation (PAT)

Answer: A,D

Question 2

An operator has been informed by the application team that normal behavior of a new application will generate HTTP error code 403. The operator would like to avoid false positive in the significant logs.

Which action should be taken to meet this goal?

A : Write a Datascript for the HTTP Response event that matches on the HTTP 403 response code and disables logging for that response.

B : Create a new Analytics Profile which disables non-significant logs.

C : Create a new Analytics Profile which contains HTTP 403 in the "Exclude HTTP Status codes from Error Classification".

D : Create a new Analytics Profile which disables significant logs.

Answer: C

Question 3

An operator has been asked to increase SSL offload performance for a Virtual Service without compromising security. The Virtual Service is currently configured with both RSA and EC certificates.

Which action could the operator take to meet this requirement?

A : In the SSL/TLS Profile, disable all ciphers that have a check mark in the PFS column

B : In the Virtual Service, scale out to an additional Service Engine

C : In the SSL/TLS Profile, uncheck "Enable SSL Session Reuse"

D : In the Virtual Service edit page, arrange the order so the EC certificate is before RSA

Answer: A

Question 4

Which statement accurately describes Service Engine Groups?

A : They can contain Service Engines with different High Availability modes.

B : They can be shared across multiple clouds.

C : They can be deleted only after all Service Engines within it are deleted.

D : Service Engines can be a member of more than one Service Engine Group.

Answer: D

Question 5

The engineering team has created a new Virtual Service for the latest application in Amazon Web Services. The help desk has reported that clients are unable to access this web application and have discovered that the DNS name is resolving to a private address that is not accessible over the internet. Avi is used for DNS resolution of the cloud services.

What is the most likely cause of this issue?

A : The engineer incorrectly entered the IP address in the DNS entry.

B : "Assign Elastic IP for External Client Access" was not checked.

C : The AWS Security Groups are not configured correctly.

D : A Network Security Policy is assigned to the Virtual Service.

Answer: B

Name:	VMware NSX Advanced Load Balancer for Operators Skills
Exam Code:	5V0-43.21
Certification:	VMware Other Certification
Vendor:	VMware
Total Questions:	87
Last Updated:	Apr 24, 2024

Download Demo 5V0-43.21 Dumps

Create Account

Password Recovery

5V0-43.21 Practice Online

Download Demo 5V0-43.21 Dumps

Member Login

Create Account

Password Recovery

5V0-43.21 Practice Online