VMware Certified Professional - VMware Avi Load Balancer Administrator Intermediate Practice Exam: Medium Difficulty 2025

A customer runs Avi Controllers in a 3-node cluster and Service Engines (SEs) across two data centers. During a WAN outage between data centers, applications in each site must continue to be load balanced locally without causing split-brain on the Controller cluster. Which design best meets this requirement?

An Avi deployment uses an IP Address Management (IPAM) profile for VIP allocation. A new tenant complains that creating a Virtual Service fails with an error indicating no available addresses. The administrator confirms the IPAM network is reachable and routable. What is the most likely configuration issue to check first?

You are deploying Avi in a vSphere environment. Security policy requires that Service Engines run on a dedicated cluster with strict placement rules and not consume resources on general-purpose clusters. What is the best Avi feature to use to meet this requirement while allowing automatic SE scaling?

A new application requires a single VIP that listens on TCP/443 and forwards to backend servers on TCP/8443. The backend servers use their own certificates, and the security team wants Avi to validate the backend certificate chain. What configuration should you implement?

A web application uses path-based routing: requests to /api must go to Pool-API and all other paths go to Pool-WEB. The customer also needs to insert an HTTP header (X-Forwarded-Proto=https) only for /api traffic. Which Avi configuration best satisfies this requirement?

A pool contains 10 backend servers. The application team requires that if a server is marked down by health monitoring, existing client sessions to that server should be drained for up to 5 minutes, but new connections must not be sent to it. Which configuration should you use?

An application uses HTTP/2 from clients to the VIP. The backend servers only support HTTP/1.1. The customer wants to keep HTTP/2 on the client side for performance but ensure compatibility to the servers. What should the administrator configure?

A security audit requires that only strong TLS versions and ciphers are offered to clients, and that the same policy is consistently applied across dozens of Virtual Services. What is the best operational approach in Avi?

After enabling mutual TLS (mTLS) on a Virtual Service, some clients fail to connect. The application team wants to confirm whether failures are due to missing client certificates, untrusted issuer, or handshake mismatch. What is the best Avi-native approach to troubleshoot this at the load balancer layer?

Users report intermittent slowness on a Virtual Service. The pool health monitors show all servers UP. The administrator needs to determine whether latency is introduced on the client side, at the Avi SE, or on the server response path, and identify which pool members contribute most. Which Avi feature set best helps answer this?