01. After a change window, CPU use on the Service Engines of one SE group rose noticeably while client request rates stayed flat. The change log lists five changes.
Which two changes added CPU work on the Service Engines?
(Choose two.)
a) Raising the polling rate of an automation tool against the Controller REST API
b) Adding a second NTP server to the Controller settings
c) Creating a new administrator account on the Controller
d) Enabling WAF on the HTTPS virtual service
e) Attaching network security policies to the virtual services
02. In an Elastic HA N+M SE group, virtual service app1 is scaled out natively across two SEs. The primary SE for app1 fails.
What is the impact on app1?
a) app1 is down until the Controller creates a replacement SE in the group
b) A secondary SE is promoted, takes over the VIP and keeps serving at reduced capacity
c) app1 suffers an outage until it is placed on the buffer SE
d) The surviving SE drains existing connections and refuses new ones
03. Users of a SharePoint site published through an HTTP virtual service are intermittently prompted for credentials and see authentication failures. The site relies on NTLM authentication. Its custom HTTP application profile has Connection Multiplex, X-Forwarded-For insertion and response compression enabled.
Which change should the administrator make?
a) Deactivate X-Forwarded-For insertion in the profile
b) Turn off gzip compression of responses in the profile
c) Deactivate Connection Multiplex in the profile
d) Enable SSL Everywhere on the profile's Security tab
04. An administrator needs custom WAF settings for a REST API that exchanges JSON and XML payloads, and plans to start from System-WAF-Profile-API, the default WAF Profile intended for API traffic.
Which approach follows the documented recommendation?
a) Create a new WAF Profile for the changes instead of editing System-WAF-Profile-API
b) Edit System-WAF-Profile-API directly, since it is the default for API traffic
c) Edit System-WAF-Profile, then attach it to the API's application profile
d) Raise the WAF Policy to Paranoia mode 4 instead of changing any profile
05. Virtual service crm runs on one SE in SE group seg-a, whose Minimum Scale per Virtual Service is 1. During business hours an administrator moves crm to SE group seg-b, an elastic HA group whose Minimum Scale per Virtual Service is 2.
What should the administrator expect?
a) The move is hitless, and crm keeps running on one SE in seg-b
b) Traffic is interrupted during the move, and crm is placed on two SEs in seg-b
c) The move is hitless, and crm is placed on two SEs in seg-b
d) Traffic is interrupted during the move, and crm stays on one SE until scaled out
06. A pool uses HTTP cookie persistence for a shopping application. When the server a client is persisted to goes down, the business wants that client sent to a healthy server at once rather than waiting for its persistence entry to expire. Clients whose persisted server stays healthy must keep their persistence.
Which persistence profile setting meets this requirement?
a) Select Never, so the persistence entry expires on its normal schedule first
b) Leave the cookie name blank so a random name is generated
c) Set the persistence timeout to 0 minutes
d) Select Immediate as the action when the persistent server goes down
07. Compression in an HTTP application profile has cut bandwidth for a content-heavy website, but Service Engine CPU has risen sharply. Much of the content is static and requested repeatedly.
Which profile change reduces the CPU cost of compression while keeping responses compressed?
a) Enable caching in the profile alongside compression
b) Change the compression mode to Aggressive, which uses gzip level 6
c) Turn on Connection Multiplex for server connections
d) Enable request body buffering for client uploads
08. SE groups seg-a and seg-b are in the same vCenter cloud, and their Service Engines run on the same ESX hosts and networks. A virtual service in seg-a is at its CPU limit on every seg-a SE, and seg-a is at its Max Number of Service Engines, while the seg-b SEs are nearly idle.
Why can the virtual service NOT scale out onto the seg-b SEs?
a) Scale-out across groups needs the SEs on separate ESX hosts
b) Each group is an isolation domain whose resources are never shared with others
c) Cross-group scale-out requires BGP-based scaling with ECMP routers
d) Cross-group scale-out needs auto-rebalance enabled in both seg-a and seg-b and a shared HA mode
09. Before turning on WAF for a busy virtual service, a capacity planner wants to know what share of its requests WAF would skip. The planner charts the WAF bypass percentage metric for the service, but the chart shows no data. The virtual service has no WAF Policy attached.
What explains the missing data?
a) WAF must be in Enforcement mode before any request is bypassed
b) The metric counts only parameterless GETs, and this service has none
c) WAF bypass metrics are analyzed only on a virtual service where WAF is enabled
d) The SE group must first be resized for WAF before the metric appears
10. Two virtual services, one for HTTP and one for HTTPS, must share the same IP address, VRF context, placement network and DNS FQDN.
Which object holds these shared settings for both virtual services?
a) A VS VIP object referenced by both
b) The SE group that hosts both virtual services
c) A pool shared by both virtual services
d) An application profile used by both