Nutanix NCP-NS Exam Questions Instant Access

Question 1

An administrator has observed the following message:

Which two statements most accurately describe the security hitlog captured above? (Choose two.)

AThis is a security hit log on the rule name 'Production-External-WebTier'.

BThe source ip address is 10.38.174.5 and source port is TCP/123.

C86.108.190.23 is sending a packet on UDP 123.

D10.38.174.57 is sending a packet destined to UDP 123.

Answer : B, D

Question 2

A VM with IP address 172.20.9.5 resides on a subnet with CIDR 172.20.9.0/24. The VPC is successfully peered via BGP with an external router... External networks outside the VPC are unable to reach the VM.

What configuration change should be made to enable reachability for the VM?

AModify the ERP values within the VPC to advertise a CIDR of 172.20.8.0/22

BApply a PBR rule for the VM's address forwarding traffic to the IP of the No-NAT external Gateway address

CApply a default route to the VPC sending all traffic to the NAT External Network

DAssociate a NAT external network to the VPC and apply a floating IP address to the VM

Answer : A

Question 3

Refer to the exhibit.

An organization uses an FNS-NG Service Chain to steer application traffic through a pair of third-party firewall Network Function VMs operating in Active/Standby mode.

Users suddenly report that all application access is blocked.

The administrator reviews Prism Central -> Network & Security -> Network Functions, where the summary shown in the exhibit is displayed.

Additional information:

Alert: "Network Function 'PANW Service Insertion' virtual NIC pair(s) are unhealthy."

Both firewall VMs are powered on and reachable.

The security policy using the service chain has not been changed.

Based on the exhibit and findings, what is the most likely cause of the traffic outage?

AThe service-chain health check failed to reroute sessions to the healthy firewall.

BOne of the Network Function vNIC pairs lost dataplane connectivity, interrupting traffic until health is stabilized.

CFirewall policy synchronization was not configured when the standby firewall became active.

DThe inbound vNIC on SE-PA-VM Firewall-2 failed, preventing redirected packets from reaching the firewall.

Answer : B

Question 4

Refer to the exhibit.

An administrator is reviewing an enforced security policy "Secure 3-VM Inventory App", as shown in the exhibit. The policy's inbound rules are configured to allow traffic from specific sources to each tier of the application. The visualization shows one blocked traffic flow.

Based on the information presented in the exhibit, which statement best describes this behavior?

AThe AppTier: FrontEnd and AppTier: AppLogic entities are on different subnets.

BThe Inventory App VM is being blocked from initiating a connection to the AppTier: Database category.

CThe AppTier: Database category is being blocked from initiating a connection to the Inventory App VM.

DThe security policy is blocking traffic because the Inventory App VM is using a port not allowed by the policy.

Answer : C

Question 5

What entity is automatically created on the cluster hosting Prism Central when Microsegmentation is enabled?

AA storage container named flow_data is created.

BA Bucket named flow_data is created.

CA File Share named flow_data is created.

DA virtual machine named flow_data is created.

Answer : A

Question 6

A junior network operator is assigned two predefined roles in Prism Central...

Role A: Prism Viewer

Role B: VPC Admin

The operator reports being able to successfully create, update, and delete Virtual Private Clouds (VPCs). However, the operator is unable to create a VM into the VPC.

How does Prism Central determine the operator's effective permissions?

AThe system applies the principle of 'most privilege,' granting the highest level of access from any assigned role.

BThe permissions of the VPC Admin role override the more restrictive Prism Viewer role.

CThe Prism Viewer role's permissions take precedence, preventing any write operations from the VPC Admin role.

DThe permissions are the union of both roles, granting VPC management rights and global read-only access.

Answer : A

Question 7

Which statement accurately describes the behavior of a Flow Network Security policy operating in Monitor mode?

AAll matching traffic is discovered and denied, but not allowed.

BTraffic is blocked unless it matches an 'allow' rule in Enforce mode.

COnly East-West traffic is discovered, but North-South traffic is not.

DAll matching traffic is discovered and allowed, but not blocked.

Answer : D

Nutanix Certified Professional Network & Security v7.5 NCP-NS Exam Questions