VMware 6V0-22.25 問題集

質問 1：
When an Avi Controller is integrated with vCenter in "Write Access" mode, what specific lifecycle management tasks does the Controller perform for the Service Engines?
A. The Controller automatically creates, powers on, configures, and deletes Service Engine VMs as needed.
B. The Controller is responsible for applying patches and updates to the ESXi hosts that the SEs run on.
C. The Controller configures the physical network switches to provide connectivity to the SEs.
D. The Controller creates the vSphere Distributed Switch (VDS) and port groups for SE traffic.
正解：A

質問 2：
An administrator is managing an Avi deployment in a vCenter cloud configured in "Write Access" mode. A Virtual Service is configured with a maximum scale out of 4. When a traffic spike occurs, what action does the Avi Controller orchestrate to achieve elastic scale out?
A. It submits a request to the vSphere administrator to manually deploy a new Service Engine VM.
B. It modifies the vSphere Distributed Switch to redirect traffic to a less-utilized ESXi host.
C. It automatically clones the Service Engine template in vCenter, creates a new VM, powers it on, and pushes the necessary configuration.
D. It sends an alert to the administrator, who then uses a ControlScript to deploy a new Service Engine.
正解：C

質問 3：
A Virtual Service is configured with a System-L7 profile and has policies for content switching and header manipulation. Where are these L7 policies actually executed?
A. On the backend server, which has an Avi agent installed on it.
B. On the client's browser, via a script downloaded from the Avi Controller.
C. On the Avi Controller, which then instructs the backend server on how to route the request.
D. On the Service Engine, after it has terminated the client's TCP and SSL/TLS connections.
正解：D

質問 4：
An Avi Administrator is troubleshooting a performance issue where a Virtual Service, configured for scale-out, is not adding a second Service Engine despite high traffic levels. The administrator reviews the Virtual Service logs and events and finds the following recurring event message.
Timestamp: 2025-10-24 14:10:00
Event: VS_SCALE_OUT_FAILED
Reason: No available Service Engines in the Service Engine Group 'seg-
prod-web'. Check SE Group configuration and cloud resources.
Virtual Service: vs-webapp-prod
Based on this log event, what are the most likely causes of this scaling failure? (Choose 2.)
A. The WAF profile attached to the Virtual Service is preventing scaling operations.
B. All existing Service Engines in the 'seg-prod-web' group are already at their max_vs_per_se capacity limit.
C. The Service Engine Group ha_mode is set to 'Active/Standby'.
D. The Virtual Service's max_scaleout_per_vs limit has been reached.
E. The vCenter cloud configuration lacks sufficient resources (CPU/memory) to deploy a new Service Engine VM.
正解：B,E

質問 5：
An organization is deploying Avi Vantage into its main vCenter-managed data center. They also have a small, separate lab environment running on a single ESXi host (not managed by vCenter) that they want to use for testing. Which statements accurately describe how the Avi Controller deployment would differ between these two environments? (Select all that apply.)
A. The standalone ESXi environment cannot be used with Avi Vantage.
B. In the standalone ESXi environment, the Controller must be deployed in "No Orchestrator" mode.
C. The process of deploying the Controller OVA file is identical in both vCenter and the standalone ESXi host client.
D. In the vCenter environment, the Controller can be deployed in "Write Access" mode to automate Service Engine creation.
E. A single Avi Controller can manage both the vCenter and standalone ESXi environments by creating two separate clouds.
F. Service Engine VMs must be manually created and configured in the standalone ESXi environment.
正解：B,D,F

質問 6：
A Security Administrator is deciding on a certificate strategy for a company's web services. The company has a mix of modern, high-performance public APIs and older internal applications with legacy clients. Which statements accurately describe the trade-offs between EC and RSA certificates in this context? (Choose 2.)
A. EC certificates should be used for the public APIs to minimize handshake latency.
B. RSA certificates should be used for the internal applications to ensure compatibility with legacy clients.
C. RSA certificates offer stronger security than EC certificates at every key size.
D. Both certificate types consume the same amount of CPU on the Avi Service Engines.
E. EC certificates are always self-signed and cannot be issued by a public CA.
正解：A,B

質問 7：
An administrator is creating a new virtual service and needs to ensure that traffic is load-balanced based on the client's HTTP header. For example, all requests with the header X-Department:
Sales should go to pool-sales, and all requests with X-Department: Engineering should go to pool-engineering. Which Avi features must be configured to achieve this? (Choose 2.)
A. An L4 Application Profile.
B. A System-HTTP Application Profile.
C. An HTTP Request Policy with rules that match on the header and switch the pool.
D. A custom Health Monitor for each pool.
E. A DataScript policy to inspect the header and select the pool.
正解：B,C

質問 8：
An administrator is reviewing a log entry for a failed transaction and sees the following timing information.
Total Time: 5025 ms
Client RTT: 20 ms
Server RTT: 5 ms
App Response Time: 5000 ms
Data Transfer Time: 0 ms
What does the App Response Time of 5000 ms indicate?
A. It took 5 seconds for packets to travel from the Service Engine to the backend server.
B. It took 5 seconds for the backend server to process the request and send the first byte of its response.
C. It took 5 seconds for the client to receive the full response from the Service Engine.
D. It took 5 seconds for packets to travel from the client to the Service Engine.
正解：B