Which two mechanisms for alerting an operator that an SSL/TLS certificate is about to expire are enabled by default? (Choose two.)

Question

Options

• AHealth Score of VS which contain an expired SSL/TLS certificate will show up at the top in the
• BThe Avi Controller will send an SNMP trap to alert the operator.
• CThe Health Score of the VS will be lowered by a security penalty.
• DThe Avi Controller will send an email to alert the operator.
• EIn Template/Security/SSL TLS Certificates, the certificates that are about to expire will appear in

• A
  2% (1)
• C
  4% (2)
• D
  94% (51)

Explanation

Avi Networks (NSX Advanced Load Balancer) enables two passive/active alert mechanisms out of the box: it automatically sends an email notification (D) to configured administrators when a certificate approaches expiration, and visually flags expiring certificates in the Templates > Security > SSL TLS Certificates dashboard (E) - both require zero additional configuration.

Why the distractors are wrong:

• A is a plausible distractor but misrepresents the behavior - affected Virtual Services don't automatically sort to the top of the list as a default alerting mechanism.
• B (SNMP trap) requires you to explicitly configure an SNMP trap profile and assign it to an alert action; it is not on by default.
• C (Health Score security penalty) applies to expired certificates (not expiring ones) and functions as a health indicator, not a proactive alert mechanism - and it still isn't one of the two defaults.

Memory tip: Think "See it and Say it" - Avi defaults to letting you see expiring certs in the UI certificate list (E) and says something by emailing you (D). Both are passive/built-in; anything requiring extra plumbing (SNMP, custom health actions) is not a default.

No community discussion yet for this question.