Nutanix NCP-NS Exam Questions Instant Access

Question 1

An administrator needs to make a web server VM, which is inside a private VPC overlay subnet, accessible from the external network. The administrator assigns a Floating IP to the VM, but the service is still unreachable from the outside.

What is a likely reason for this failure?

AA Floating IP was assigned from a different external subnet than the one used by the VPC.

BThe VPC has no default route configured to use the external subnet.

CThe VM was not rebooted after the Floating IP was assigned.

DThe web server VM is not running the latest version of NGT.

Answer : B

Question 2

Which action allows an administrator to reuse a single existing policy in a different scope?

APlace policy in Enforce mode

BClone

CPlace policy in Monitor mode

DExport

Answer : B

Question 3

An administrator sets up a VPN between two Nutanix VPCs in different Availability Zones. After deployment, the VPN tunnel shows as Up, but traffic between the VPCs is not flowing.

Which configuration step is most likely missing?

ANAT policy on each of the VPC routers

BIPsec encryption settings on the VPN profile

CMTU adjustment on the AHV hosts

DStatic routes for remote subnets on the VPC

Answer : D

Question 4

A new multi-tier application is being deployed across several subnets in a Nutanix environment. The security team wants to create a Flow Network Security Policy to restrict traffic between the tiers, but the complete matrix of required network ports and protocols is not fully documented.

Which strategy should the team employ first to accurately capture the necessary communication patterns without risking application outage?

ACreate an IPFIX export of all the application traffic and monitor all traffic for 48 hours.

BApply a Security policy in Monitor mode to discover all traffic between the application tiers.

CCreate broad Security Policy to permit all TCP traffic between the tiers to ensure connectivity.

DApply a Security Policy in Enforce mode adding the required flows as they appear in the flow logs.

Answer : B

Question 5

An administrator is tasked with configuring an application policy for a two-tier public website with Web and DB components. The database servers need to communicate with each other for replication, but the web servers should not be able to communicate with each other. The administrator configures the policy... and sets it to Enforce mode.

Later testing reveals that the web servers are able to communicate with each other.

What should the administrator do to resolve this?

ACreate an isolation policy for the PubSite-Prod-Web entity group.

BEdit the PubSite-Prod-Web entity group's intra-tier rule.

CConfigure a VPC Network Policy to deny the traffic.

DEnsure the PubSite-Prod-Web servers are in different Subnets.

Answer : B

Question 6

An administrator recently deployed a new set of virtual machines... 3-tier web application... restricted as follows:

Only application VMs can talk to database VMs on port 3306

Frontend VMs should only communicate with application VMs on port 8080

Which action will correctly create and configure the Security Policies in Nutanix Flow to satisfy this task?

ACreate VLANs for each tier and configure ACLs to restrict communication.

BCreate IP-based rules for each VM category within a Security Policy.

CConfigure a global 'Allow All' Security Policy and rely on guest OS firewalls for tier-based restrictions.

DCreate categories for each tier then define an Application Policy allowing specific ports between them.

Answer : D

Question 7

An administrator has configured two VPCs with overlapping externally routable prefixes (ERPs). The two VPCs are associated to separate external networks that are part of the same physical routing domain.

What outcome should the administrator expect?

ARouting conflicts and unreachable external paths

BNAT is always automatically enforced

CPrefixes are merged into a single advertised route

DThe larger prefix takes priority automatically

Answer : A

Nutanix Certified Professional Network & Security v7.5 NCP-NS Exam Questions