Nutanix NCP-NS Exam Questions Instant Access

Question 1

A VPC admin creates a policy to allow traffic between two IP subnets but forgets to enable reverse direction.

What happens in this scenario?

ATraffic is blocked completely because the policy is invalid.

BPolicy is rejected by Prism Central during validation.

CTraffic flows bidirectionally because policies are stateful by default.

DTraffic flows only in one direction, blocking return traffic.

Answer : D

Question 2

In Nutanix Flow, which action transitions a security policy from observing traffic to actively enforcing the rules?

ADisable Traffic Visualization for the policy.

BEnforce policy by setting its scope.

CChange policy mode from Monitor to Save.

DChange policy mode from Monitor to Enforce.

Answer : D

Question 3

Which policy mode records traffic without enforcing rule actions?

AEnforce

BMonitor

CIsolate

DSave

Answer : B

Question 4

Flow Network Security Next-Gen is supported in which two environments? (Choose two.)

AOn-Premises Overlay Networks

BNC2 VLAN Networks

CNC2 Overlay Networks

DOn-Premises VLAN Basic Networks

Answer : A, C

Question 5

During a security review, the administrator confirms that the existing security policy does not explicitly allow traffic from Environment: Development to Environment: Production. A VM in the Development category was still able to reach a Production VM over IPv6.

What is the most likely cause of this behavior?

AAn isolation policy was incorrectly applied instead of an application policy.

BThe Allow All IPv6 option in the policy was selected.

CThe policy was misconfigured and allowed all Layer 2 broadcast traffic.

DThe VM was using a static IPv6 address.

Answer : B

Question 6

A newly-deployed Flow Virtual Networking VPC environment is experiencing connectivity issues... A packet capture on the physical switch shows packets are being fragmented.

What is the probable cause of the packet fragmentation and performance issues?

AA Network Security Group is incorrectly filtering IP fragments.

BThe MTU on the physical or virtual switch layer is set too low.

CThe VM's guest OS network driver is faulty and requires an update.

DThe VPC's external network uplink has an incorrect VLAN ID configured.

Answer : B

Question 7

Refer to th exhibit.

An administrator needs to setup a Syslog server to capture the Flow Network Security Hit logs.

Which module name should be selected?

AFlow Service Logs

BAPI Audit

CSecurity Policy Hit logs

DAudit

Answer : C

Nutanix Certified Professional Network & Security v7.5 NCP-NS Exam Questions