VMware 5V0-43.21 Actual Free Exam Questions & Community Discussion

Exam Code/Number: 5V0-43.21
Exam Name/Title: VMware NSX Advanced Load Balancer for Operators Skills
Certification Provider: VMware
Corresponding Certification: VMware Certification

Exam Questions: 88
Updated On: Jul 13, 2026

Question #10

Which two mechanisms for alerting an operator that an SSL/TLS certificate is about to expire are enabled by default? (Choose two.)

A. In Template/Security/SSL TLS Certificates, the certificates that are about to expire will appear in yellow, orange, or red.

B. The Avi Controller will send an email to alert the operator.

C. The Health Score of the VS will be lowered by a security penalty.

D. The Avi Controller will send an SNMP trap to alert the operator.

E. Health Score of VS which contain an expired SSL/TLS certificate will show up at the top in the Application Dashboard.

Discussion 0

Correct Answer: A,B Vote an answer

Question #11

Which statement accurately describes Service Engine Groups?

A. They can contain Service Engines with different High Availability modes.

B. Service Engines can be a member of more than one Service Engine Group.

C. They can be shared across multiple clouds.

D. They can be deleted only after all Service Engines within it are deleted.

Discussion 0

Correct Answer: B Vote an answer

Question #12

Which element of the End-to-End Timing graph identifies the average time taken for a web server to process a request, fetch content from a database, and generate the content?

A. Data Transfer

B. Server RTT

C. App Response

D. Total Time

Discussion 0

Correct Answer: C Vote an answer

Question #13

An operator has been asked to provide a list of SSL/TLS ciphers used for the last 100 requests of a Virtual Service. The operator can't find this information in the GUI.
Which action, if any, retrieves this information?

A. The operator will need to use the API since this list can only be retrieved through API.

B. The operator can't retrieve this through the GUI since Avi does not record the ciphers for compliance reasons.

C. The operator will need to export the logs in a CSV file to retrieve the list of ciphers.

D. The operator will need to enable Log all Headers in the VS configuration.

Discussion 0

Correct Answer: B Vote an answer

Question #14

The Network Operations Center reports that an application had an outage last night during an Avi upgrade. The Service Engine Group assigned to this Virtual Service is using the default configuration, and the Virtual Service was deployed using the Basic Virtual Service creation wizard.
What is the likely reason for this outage?

A. This is by design since Service Engine upgrades are disruptive.

B. There was a global internet outage.

C. Firewall rules were not configured for failover SE.

D. The Virtual Service was not scaled out.

Discussion 0

Correct Answer: A Vote an answer

Question #15

Which statement regarding SNAT is NOT true?

A. SNAT is enabled by default.

B. SNAT limits a Virtual Service to a maximum of 64k concurrent connections.

C. SNAT is required for scaling a Virtual Service across Service Engines.

D. SNAT is required for connection multiplexing.

Discussion 0

Correct Answer: D Vote an answer

Question #16

The engineering team has created a new Virtual Service for the latest application in Amazon Web Services. The help desk has reported that clients are unable to access this web application and have discovered that the DNS name is resolving to a private address that is not accessible over the internet. Avi is used for DNS resolution of the cloud services.
What is the most likely cause of this issue?

A. "Assign Elastic IP for External Client Access" was not checked.

B. The engineer incorrectly entered the IP address in the DNS entry.

C. The AWS Security Groups are not configured correctly.

D. A Network Security Policy is assigned to the Virtual Service.

Discussion 0

Correct Answer: C Vote an answer

Question #17

An operator has been asked by the security team to list all the private keys exported from the Avi GUI for the past month.
Can the operator fulfill this request?

A. Yes, Avi records such events if an account exporting the key is different than the account used to import/create the key.

B. Yes, Avi records such events if the Sensitive option has been enabled when importing/creating the key.

C. No, Avi does not record key exports.

D. Yes, Avi records key export events by default.

Discussion 0

Correct Answer: C Vote an answer

Question #18

An application owner wants to ensure that traffic is only sent to a web server in the pool when its connection to a back-end database is fully functional.
Which approach will ensure this goal?

A. Create a DataScript that performs a database lookup to the back-end database.

B. Configure an External Health Monitor that performs a database lookup to the back-end database.

C. Configure an HTTP Health Monitor to query a URI that returns a specific response if and only if a back-end database call is successful.

D. Create a Virtual Service with the back-end database server as pool member, and configure a TCP Health Monitor. Then, reconfigure the web servers to communicate with the database via this Virtual Service.

Discussion 0

Correct Answer: D Vote an answer

Download Free VMware 5V0-43.21 Demo

Simply submit your e-mail address below to get started with our free demo of your VMware 5V0-43.21 exam.