Online Access Free 6V0-22.25 Practice Test

A Security Administrator is deciding on a certificate strategy for a company's web services. The company has a mix of modern, high-performance public APIs and older internal applications with legacy clients. Which statements accurately describe the trade-offs between EC and RSA certificates in this context? (Choose 2.)

• A.RSA certificates should be used for the internal applications to ensure compatibility with legacy clients.
• B.EC certificates should be used for the public APIs to minimize handshake latency.
• C.EC certificates are always self-signed and cannot be issued by a public CA.
• D.RSA certificates offer stronger security than EC certificates at every key size.
• E.Both certificate types consume the same amount of CPU on the Avi Service Engines.

A Security Administrator is analyzing the logs for a Virtual Service before and after enabling a WAF policy. Before WAF was enabled, a typical log for a successful transaction appeared as a
"Non-Significant Log". How does the nature of logging change for that same transaction after the WAF policy is enabled and set to 'Enforcement' mode?

• A.Successful transaction logs will no longer be generated to save space.
• B.All logs, including successful ones, are now classified as "Significant Logs".
• C.The transaction log will now include a WAF section detailing the rules evaluated, even if no threat was detected.
• D.The log format remains identical, but a separate "WAF Event" is created in the Events tab.

An administrator is configuring an L4 Virtual Service with the Preserve Client IP option enabled.
What is the effect of this setting on the backend servers?
# Virtual Service > Advanced Settings
Application Profile: System-L4
[x] Preserve Client IP Address

• A.The backend servers will see the original client's IP address as the source of the TCP connection.
• B.The backend servers will see the IP address of the Avi Controller as the source IP for all connections.
• C.The Service Engine will insert the original client IP into an HTTP header.
• D.This option has no effect on the backend servers; it is only for logging purposes.

Which security feature protects against Layer-7 attacks?

• A.Web Application Firewall (WAF)
• B.DHCP Relay
• C.NAT
• D.IP Forwarding

An application requires client requests to be distributed based on a value in the HTTP URI. For instance, all requests for /api/v1/us-east/... should go to pool-us-east and all requests for
/api/v1/us- west/... should go to pool-us-west. Which load balancing algorithm, when combined with a specific string from the URI, can achieve this deterministic routing?

• A.Fastest Response
• B.Consistent Hash
• C.Round Robin
• D.Least Connections