Exam for engine

NEW QUESTION 100
An administrator is tasked with temporarily disabling all WAF processing for a specific Virtual Service to perform a baseline performance test. They need to ensure that the WAF engine does not inspect any traffic for this VS, but they want to keep the WAF configuration in place to re- enable it easily after the test.
The current WAF configuration for the Virtual Service is shown below.
# Virtual Service > WAF Policy
WAF Policy: custom-waf-policy-prod
Mode: Enforcement
What is the most direct and appropriate method to achieve this?

NEW QUESTION 101
Which Virtual Service policy object can be used to serve a static web page if a rule is matched?

NEW QUESTION 102
Which property is configured in a Service Engine Group?

NEW QUESTION 103
What action can minimize a performance impact while troubleshooting a busy Virtual Service?

NEW QUESTION 104
An Avi Administrator is configuring a new Service Engine Group to host many small, non-critical virtual services. The primary goal is resource efficiency. The administrator wants to have a shared pool of standby Service Engines that can take over if any active SE fails. For example, if there are 20 active SEs, the administrator wants to have 2 standby SEs available for the entire group. Which HA mode for the Service Engine Group achieves this?

NEW QUESTION 105
A DevOps team is deploying a containerized microservices application on a Kubernetes cluster.
How does the Avi Vantage architecture with its distributed data plane support this modern application environment? (Select all that apply.)

NEW QUESTION 106
A vSphere Administrator is reviewing two different HA configurations in Avi. Configuration A is a Service Engine Group in N+M mode. Configuration B is a Virtual Service scaled out across multiple SEs. What is the fundamental difference between these two HA models?

NEW QUESTION 107
A Security Administrator has just enabled a WAF Policy on a Virtual Service by setting it to
‘Enforcement’ mode. Immediately after, users report that legitimate file uploads are being blocked. The administrator suspects the WAF is incorrectly flagging these requests. Which action should the administrator take to allow the legitimate traffic while still investigating the issue?
# WAF Profile Snippet
mode: WAF_MODE_ENFORCEMENT
# … other settings
learning_params:
enable_per_uri_learning: true
# … other settings

NEW QUESTION 108
An administrator needs to secure multiple different websites (e.g., www.site-a.com, www.site- b.org, shop.site-c.net) on a single Virtual Service using a single IP address and port (e.g., 443).
How does Avi’s certificate management handle this? (Select all that apply.)

NEW QUESTION 109
Which High Availability mode should be used for an application that cannot be SNATed?

NEW QUESTION 110
A Network Architect is designing a solution for a large e-commerce platform that has very predictable, high-traffic “flash sale” events every weekend. The primary goal is to minimize infrastructure costs during weekdays while ensuring maximum performance during the sales. The platform is deployed in a vCenter environment. Which combination of Avi features should the architect use to create the most efficient scaling strategy? (Select all that apply.)

NEW QUESTION 111
Which issue or scenario requires elastic scale-out?

NEW QUESTION 112
When a new WAF Policy is attached to a Virtual Service, users report they are receiving a “403 Forbidden” error when trying to reach their application. Which configuration could likely cause this issue?

NEW QUESTION 113
An administrator needs to create a policy that closes the connection for any client trying to access an application using an outdated and insecure version of TLS (e.g., TLS 1.0). Which policy type in Avi is responsible for evaluating this type of connection property?
# Policy Evaluation Point
Client —[SSL/TLS Handshake]—> Service Engine —> Backend Server

NEW QUESTION 114
A vSphere Administrator is creating a new application deployment in Avi. The application consists of three identical web servers that will serve the traffic. In the Avi object model, which component represents the logical grouping of these three web servers?

NEW QUESTION 115
An administrator is creating two new applications. Application A is a standard web service.
Application B is a completely separate database service. The administrator creates vs-app-A and vs-app-B. Can vs-app-A and vs-app-B share the same Pool of backend servers?

NEW QUESTION 116
What is a valid reason to configure the Custom mode for the TCP Proxy Profile?

NEW QUESTION 117
An administrator wants to enable real-time metrics for a Virtual Service that is experiencing performance fluctuations. After enabling these metrics, where in the Avi UI would the administrator go to see the live, second-by- second updates for metrics like ‘Application Response Time’ and ‘Throughput’?
# Analytics Profile Configuration
enable_realtime_metrics: True

NEW QUESTION 118
An administrator is troubleshooting an application where some users are being unexpectedly logged out. The application maintains session state using a cookie named JSESSIONID. The administrator finds a log entry for one of the affected users. Which pieces of information within a detailed log view would be most helpful in diagnosing this issue? (Choose 2.)

NEW QUESTION 119
Doing HTTP to HTTPS redirect in an HTTP Policy is: