A10-CPSA-4 A10 Certified Professional System Administration 4 Practice Questions
Prepare for A10-CPSA-4 with more than an answer.
- 1
True or False: The
alive-if-aliveoption underfw.session-aging.tcpis a recommended feature in ACOS 4.x for keeping idle TCP sessions open indefinitely as long as traffic is flowing.Show answer details
Correct answer: B
This statement is false. The
alive-if-aliveoption was removed in ACOS 4.1.4 and later. It is a deprecated feature and is not available for configuration in current versions. Administrators should use standard idle-timeout settings for session management. - 2
An administrator needs to create a local user account named
monitorthat can only view the system status and running configuration but cannot make any changes. Which set of commands should be used to create this account?Show answer details
Correct answer: C
In ACOS, local administrator accounts are created using the
admincommand. After creating the user and setting a password, you enter the user's configuration sub-mode. Theprivilege readcommand assigns the built-in read-only role to the account, restricting it toshowand other non-configuration commands. - 3
A new ACOS 4.x feature introduces predefined roles to simplify configuration. For a user who needs to manage SLB configurations within a private partition but have no access to network or system settings, which predefined role is most appropriate?
Show answer details
Correct answer: C
ACOS 4.1.4 introduced predefined roles for simplified configuration. The
PartitionSlbServiceAdminrole is specifically designed for users who need administrative (read/write) access to SLB objects (virtual servers, service groups, etc.) within a private partition, without granting them permissions to modify system-level or network-level configurations like routing or interfaces. - 4
An administrator is migrating a legacy ACOS 2.7.x HA configuration to VRRP-A on ACOS 4.x. The
vrrp-a ha-migrationcommand fails. Upon reviewing the legacy configuration, the administrator finds commands related toha-priority-costfor real servers. Why is the migration failing?Show answer details
Correct answer: A
According to the ACOS 2.7x to 4.x Migration Guide, legacy HA parameters for Real Servers, which includes
ha-priority-cost, are not supported by the automated migration script. These configurations are considered exceptions and must be removed or manually reconfigured using VRRP-A's tracking options before thevrrp-a ha-migrationcommand can succeed. - 5
A network administrator has configured two L3V partitions, 'TenantA' and 'TenantB', on an ACOS device. Both tenants require SNMP monitoring, but for security reasons, each tenant must use a different community string. Which statement accurately describes how to achieve this in ACOS 4.x?
Show answer details
Correct answer: B
ACOS 4.x enhances SNMP to be partition-aware. This allows administrators to configure SNMP settings, including community strings, independently within each L3V partition. This is essential for multi-tenant environments where monitoring credentials and configurations must be isolated.
- 6
You are managing an aVCS cluster. The current vMaster (ACOS1) has a VRRP-A priority of 150. A vBlade (ACOS2) has a VRRP-A priority of 120. You need to perform maintenance on ACOS1 and want ACOS2 to take over as the active device. Which command sequence will achieve this with the LEAST service disruption?
Show answer details
Correct answer: C
The best practice for a controlled, graceful failover in a VRRP-A setup is to manipulate the VRID priorities. By increasing the priority of the standby device (ACOS2) to be higher than the active device (ACOS1), you trigger a standard VRRP-A election process, causing a failover with minimal disruption. Rebooting is disruptive, and a
vmaster-take-overaffects the control plane (vMaster role) which is distinct from the data plane traffic flow managed by VRRP-A.
