6V0-22.25 practice question 6 of 10

Which two mechanisms for alerting an operator that an SSL/TLS certificate is about to expire are enabled by default? Choose two.

Answer options

A: The Controller will send an email to alert the operator

B: The Controller will send an SNMP trap to alert the operator

C: The Health Score of the Virtual Service will be lowered by a security penalty Correct answer

D: In Templates > Security > SSL Certificates, the certificates about to expire will appear in yellow, orange, or red Correct answer

E: A red banner appears at the top of the UI

Correct Answer:

C. The Health Score of the Virtual Service will be lowered by a security penalty; D. In Templates > Security > SSL Certificates, the certificates about to expire will appear in yellow, orange, or red

Explanation

By default, NSX Advanced Load Balancer uses two primary internal mechanisms to notify operators about impending SSL/TLS certificate expiration. First, it generates an Event (specifically, SSLCERTEXPIRY) when a certificate enters the notification period. Second, the default system alert configuration (System-Default-Alert-Config) contains a pre-defined rule that listens for this specific event and triggers an Alert. This alert is then visible in the Avi Controller's UI, providing a clear, built-in notification to the operator without requiring any initial configuration for this specific behavior.

Why Incorrect

A. Sending an SNMP Trap is an external notification method that requires an administrator to configure an SNMP profile and an alert action.
B. Sending a notification to a Syslog server is an external action that is not configured by default and requires creating a notification profile.

References

1. VMware NSX Advanced Load Balancer Documentation, "Events and Alerts". This document describes how events are generated for various system occurrences, including certificate expiration, and how alerts are triggered based on those events.

2. VMware NSX Advanced Load Balancer Documentation, "Default Alerts". The documentation for the System-Default-Alert-Config explicitly lists SSLCertificateExpire as one of the alerts that are enabled by default.

3. VMware NSX Advanced Load Balancer Documentation, "Certificate Management". This section notes that "NSX Advanced Load Balancer generates an event when a certificate is about to expire." This confirms the default generation of the underlying event.

Keep practicing

Take the free 6V0-22.25 practice test

Ten exam-style questions with answers and explanations, plus the exam facts and study guides.

Start the free practice test