Nutanix Certified Professional - Cloud Integration - Azure v6.7 NCP-CI-Azure Exam Questions

Answer : D

NAT Based Network: A NAT-based network is designed to provide inbound and outbound internet access while obscuring the internal private addresses. This setup uses Network Address Translation (NAT) to map internal IP addresses to a public IP address, ensuring that internal addresses are not exposed to the public internet.

Security and Connectivity: NAT provides a layer of security by hiding internal IP addresses and allowing controlled access to external resources. This configuration is well-suited for VMs that need to communicate with servers on the public internet while maintaining the privacy of their internal network addresses.

Azure Virtual Network NAT Documentation

Nutanix Networking and Security Configuration Guide

Answer : A, B

NC2 on Azure Deployment: Deploying Nutanix clusters in Azure involves configuring various components, each needing appropriate network isolation and configuration.

Components and vNets:

Bare-metal instance: Requires its own vNet to ensure proper network isolation and performance.

Prism Central: Needs a dedicated vNet to manage and monitor the Nutanix environment, ensuring it has the required network access and isolation.

Azure Load Balancer: Does not require its own vNet but needs to be associated with the appropriate vNet where services are deployed.

Virtual Network Gateway: Is used for VPN connections but does not necessitate a separate vNet; it operates within an existing vNet.

Network Isolation: Providing separate vNets for Bare-metal instances and Prism Central ensures optimal performance and management capabilities.

Conclusion: Both Bare-metal instances and Prism Central require their own vNets in the NC2 on Azure deployment.

Nutanix Clusters on Azure Deployment Guide

Azure Virtual Network Documentation

Answer : C

Replication Factor (RF3): RF3 requires that data is replicated across three different nodes to ensure data durability and fault tolerance. This replication scheme allows the system to tolerate the failure of two nodes simultaneously.

Minimum Node Requirement for RF3: To meet the RF3 requirements while maintaining operational capability, a minimum of five nodes is necessary. This configuration ensures that there are enough nodes to distribute the data and provide the necessary redundancy.

Nutanix Replication Factor Documentation

Nutanix NC2 on Azure Deployment Guide

Answer : B

Outbound Rule Necessity: For successful cluster deployment, certain outbound connections must be allowed to ensure proper download and configuration of resources.

Critical Destination: 'Https://downloads.cloud.nutanix.com/*' is a critical endpoint from which the Nutanix software and updates are downloaded during the cluster deployment process.

Functionality: Ensuring an outbound rule for this destination allows the deployment to fetch necessary files and updates, enabling smooth cluster setup and operation.

Other Destinations:

Https://portal.nutanix.com/: Used for accessing the Nutanix portal, not directly related to deployment downloads.

Https://support.nutanix.com/: Used for support-related tasks, not for deployment-specific downloads.

https://nutanix.dev/: Related to development and API documentation, not necessary for initial deployment.

Conclusion: Outbound connectivity to 'Https://downloads.cloud.nutanix.com/*' is essential for downloading deployment resources.

Nutanix NC2 on Azure Network Configuration Guide

Azure Network Security Documentation

Answer : C

NATed Path Configuration: When using the NATed Path, it is essential to ensure that traffic can flow out of the Flow gateway VM to external networks.

Default Route: Adding a default route on the Nutanix User VPC ensures that all outbound traffic is directed to the appropriate network gateway.

Configuration Steps:

Navigate to the routing settings of the Nutanix User VPC.

Add a default route with the destination of 0.0.0.0/0, pointing to the External Overlay network.

Security Group Settings:

Ensure that the External Flow Gateway Security Group on the External NIC allows outbound traffic.

Ensure that the Internal Flow Gateway Security Group on the internal NIC allows outbound traffic (if needed for internal network flows).

Conclusion: Properly configuring the default route on the Nutanix User VPC enables outbound traffic flow via the NATed Path through the External Overlay network.

Nutanix Flow Gateway Configuration Guide

Azure VPC Routing Documentation

Answer : C

Azure Subscription Validation: When deploying an NC2 cluster, the Azure subscription must be validated and allowlisted by Microsoft. This is a crucial step to ensure that the necessary permissions and configurations are set up for the deployment.

Booting State Issue: If the nodes are stuck in the Booting state, it often indicates that the subscription has not been properly validated and allowlisted. This prevents the deployment from progressing as required resources and permissions are not fully accessible.

Checking Allowlisting Status: Administrators should verify that their subscription has been allowlisted by contacting Azure support or checking the status through the Azure portal.

Resolution: Once the subscription is validated and allowlisted by Microsoft, the deployment should proceed without the nodes getting stuck in the Booting state.

Nutanix NC2 on Azure Documentation

Azure Subscription Management

Answer : D

Floating IP Address Limitation: The cluster already has 25 floating IP addresses in use by other VMs. If the administrator cannot assign a floating IP address to the new VM, it is because the pool of available floating IPs is exhausted.

Requesting Additional Floating IPs: To resolve this issue, the administrator needs to request additional floating IP addresses to be allocated to the NAT subnet. This will ensure that there are enough IP addresses available for all VMs requiring inbound connectivity.

Nutanix Networking Configuration Guide

Azure IP Address Management Documentation