Join the discussion
Question 49/96
To disable SNAT, configure Preserve Client IP Address in which section?
Correct Answer: D
In Avi Load Balancer, disabling SNAT for a Virtual Service is handled through Preserve Client IP configuration. VMware Avi documentation states that preserving the client IP address is mutually exclusive with SNATing the Virtual Service. The related configuration is not part of the Application Profile or TCP Profile, because those profiles control application-layer or TCP proxy behavior rather than the forwarding model for source address preservation. It is also not simply a Service Engine Group property. For the supported configuration flow, Preserve Client IP is configured using a Network Service , including floating IP and related network service settings associated with the Service Engine Group, VRF, and cloud. Therefore, the correct section for configuring Preserve Client IP Address to disable SNAT is Network Service .
Add Comments
- Other Question (96q)
- Q1. An Avi Administrator enables a WAF policy with a large number of signatures on a high-traf...
- Q2. How do the Virtual Service, Pool, and Virtual IP (VIP) objects work together to deliver an...
- Q3. Which security feature protects against Layer-7 attacks?...
- Q4. A popular e-commerce website experiences massive, unpredictable traffic spikes during flas...
- Q5. An administrator is configuring a Virtual Service for a web application that serves a larg...
- Q6. In Avi's architecture, what are the primary responsibilities of the distributed data plane...
- Q7. Which statement is true for Avi to compress an HTTP response?...
- Q8. Which method does not identify why a server has been marked down by a Health Monitor?...
- Q9. A Network Architect needs to ensure that all HTTP requests for a specific application do n...
- Q10. A vSphere Administrator is preparing to upgrade an Avi Controller cluster from version 22....
- Q11. A vSphere Administrator is tasked with creating a new Virtual Service for a legacy TCP-bas...
- Q12. Besides handling traffic spikes, what are other key use cases for elastic scale out of a V...
- Q13. Which configuration results in a Virtual Service being marked down by the Service Engine?...
- Q14. An administrator is troubleshooting an application where backend servers are intermittentl...
- Q15. An administrator is configuring a new Virtual Service. The configuration is shown below. V...
- Q16. Which approach will ensure traffic is only sent to a server when its connection to a back-...
- Q17. A DevOps Engineer is setting up a fully automated environment using an ACME-compliant Cert...
- Q18. In which situation would the Advanced Setup mode of the Create Virtual Service wizard be r...
- Q19. An Avi Administrator has just enabled a comprehensive WAF policy on a Virtual Service. The...
- Q20. Which task is performed by the Avi Controller?...
- Q21. When the logs are viewed, the operator finds that cookies are not captured. Which configur...
- Q22. A DevOps engineer is creating a script to parse Avi logs and automatically alert the secur...
- Q23. A DevOps Engineer is concerned about the potential performance impact of enabling real-tim...
- Q24. What action can minimize a performance impact while troubleshooting a busy Virtual Service...
- Q25. Which issue or scenario requires elastic scale-out?...
- Q26. An administrator needs to secure multiple different websites (e.g., www.site-a.com, www.si...
- Q27. A vSphere Administrator is integrating a new Avi Controller with a vCenter Server. When cr...
- Q28. Which of the following is a direct benefit of Avi's distributed data plane architecture co...
- Q29. An Avi Administrator is trying to diagnose an issue with a virtual service. The Health Sco...
- Q30. Which method to indicate impending certificate expiry is not enabled by default?...
- Q31. A DevOps Engineer is automating the initial setup of an Avi Controller using the REST API....
- Q32. An administrator is configuring a vCenter Cloud in Avi. The vSphere environment contains m...
- Q33. A Security Administrator enables a WAF policy in 'Detection' mode on a production Virtual ...
- Q34. After deploying the Avi Controller OVA and powering it on for the first time, an administr...
- Q35. Which approach cannot be used to redirect HTTP traffic to HTTPS in the Virtual Service?...
- Q36. An organization wants to stream Avi logs in real-time to an external SIEM (Security Inform...
- Q37. Which load balancing algorithm distributes requests sequentially across servers?...
- Q38. Which SSL cipher type provides the best security?...
- Q39. What is the default high availability mode for Service Engines?...
- Q40. An Avi Administrator is managing a web application that is expecting a sharp increase in t...
- Q41. An application had an outage during an Avi upgrade. The Service Engine Group assigned to t...
- Q42. When is it more appropriate to use the N+M HA mode for a Service Engine Group instead of r...
- Q43. Which task is performed by the Avi Controller?...
- Q44. A Virtual Service for an online shopping site normally receives very low levels of traffic...
- Q45. Which statement about Policies is true?
- Q46. What is the relationship between a Service Engine and a Virtual Service? (Select all that ...
- Q47. A Virtual Service is configured with an HTTP Security Policy, Network Security Policy, Dat...
- Q48. When importing a new SSL/TLS certificate into the Avi Controller, an administrator notices...
- Q49. To disable SNAT, configure Preserve Client IP Address in which section?...
- Q50. An administrator is configuring the Analytics Profile for a Virtual Service and wants to r...
- Q51. Which metrics graph in the Virtual Service Analytics page will show the rate of 5xx errors...
- Q52. What is a valid reason to configure the Custom mode for the TCP Proxy Profile?...
- Q53. An Operator is examining a Virtual Service log entry to diagnose a client connectivity iss...
- Q54. A Security Administrator is creating a new SSL/TLS certificate for a public-facing web app...
- Q55. How does a distributed data plane architecture, like Avi's, enhance fault isolation compar...
- Q56. A Network Architect is designing the HA strategy for a Service Engine Group. The group wil...
- Q57. An administrator is configuring an SSL Profile for a virtual service and needs to select a...
- Q58. A Security Administrator is configuring a policy to add an HSTS (HTTP Strict Transport Sec...
- Q59. An organization is considering two different WAF profiles for their application. Profile A...
- Q60. Where are application traffic log messages specific to WAF found for a Virtual Service?...
- Q61. An application team has enabled a new WAF policy on their Virtual Service. They are concer...
- Q62. An organization is planning a major Avi Vantage upgrade. The environment consists of a 3-n...
- Q63. An Avi Administrator is configuring a Health Monitor for a pool of web servers. The goal i...
- Q64. A Network Architect is designing a solution for a critical, high-traffic application. The ...
- Q65. An Avi Administrator has upgraded the Controller cluster and is now ready to upgrade the S...
- Q66. A DevOps Engineer is migrating an application from a legacy load balancer to Avi. The lega...
- Q67. When a Virtual Service is configured for Layer 4 load balancing, which of the following in...
- Q68. An organization is deploying Avi Vantage into its main vCenter-managed data center. They a...
- Q69. A Network Architect is designing a solution for a large e-commerce platform that has very ...
- Q70. A Virtual Service is scaled out across three Service Engines (an Active/Active configurati...
- Q71. An administrator wants to enable real-time metrics for a Virtual Service that is experienc...
- Q72. A security administrator is reviewing logs after a potential security incident. The admini...
- Q73. A network architect is designing a new Avi deployment for a multi-tenant vCenter environme...
- Q74. In Avi, what object represents the front-end IP address where clients connect?...
- Q75. An Operator is monitoring a virtual service whose Health Score has just dropped from 100 t...
- Q76. Connection Multiplexing is most valuable for which HTTP version?...
- Q77. A Security Administrator is configuring a new WAF Policy and wants to understand the perfo...
- Q78. A Service Engine Group is configured with the "Distributed" placement mode. If there are t...
- Q79. Which analytics capability is built into Avi?
- Q80. A Network Architect is designing a solution for a custom TCP application. The design requi...
- Q81. An Operator is analyzing a Virtual Service log and is trying to determine if a WAF policy ...
- Q82. An application requires load balancing for both a TCP-based control channel on port 5001 a...
- Q83. Which statement is true regarding EC versus RSA certificates?...
- Q84. A Service Engine Group is configured with an N+M HA mode where N=5 and M=1. An administrat...
- Q85. An Avi Administrator is managing a multi-tenant environment where different applications h...
- Q86. A DevOps engineer is using an Ansible playbook to create a new HTTPS virtual service. The ...
- Q87. A vSphere Administrator is capacity planning for a new application that will be protected ...
- Q88. An organization has enabled Avi's real-time analytics for all their production Virtual Ser...
- Q89. An application team has reported that their backend servers are not seeing the original cl...
- Q90. A vSphere Administrator is deploying a new critical application that cannot tolerate any d...
- Q91. A vSphere Administrator is planning an Avi upgrade in a vCenter cloud environment. The pro...
- Q92. After a successful upgrade of the Avi Controller cluster, the administrator navigates to t...
- Q93. A financial application is being protected by an Avi WAF policy. During a security audit, ...
- Q94. A vSphere Administrator is configuring a Virtual Service for a web application and needs t...
- Q95. An administrator is tasked with temporarily disabling all WAF processing for a specific Vi...
- Q96. Which High Availability mode should be used for an application that cannot be SNATed?...
