Nutanix Certified Professional - Network and Security (NCP-NS) 7.5

Question 1

Which two statements are true with respect to Flow Network Security Policies? (Choose two.)

A. Flow Network Security supports L7-based firewall rules.

B. Flow Network Security is a stateful firewall.

C. Flow Network Security supports rules based on L2 MAC Addresses.

D. Flow Network Security supports L3 and L4-based firewall rules.

Correct Answer: B,D

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 2

An administrator has deployed a VPC for a multi-tier application on Nutanix AHV. The Web tier requires public internet access, while the App and Database tiers must remain private and isolated. Which steps should the administrator take to configure the external network correctly?

A. Configure an external network for the Web tier subnet and leave App and Database tiers private.

B. Attach a single external network to the VPC and allow all tiers unrestricted internet access.

C. Use overlay networks for external access instead of configuring a VPC external network.

D. Assign external IPs to all VMs in the VPC to simplify connectivity.

Correct Answer: A

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 3

An administrator has two user VPCs connected via a Transit VPC. Routing works for most subnets, but one overlay subnet cannot reach external networks. What is the most probable cause?

A. DHCP configuration is disabled on the overlay subnet in the user VPC

B. Mismatch in ERP configuration in user and Transit VPC

C. Floating IP not assigned to the gateway

D. Incorrect ASN in the BGP configuration in the Transit VPC

Correct Answer: B

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 4

What is the role of the Network Controller in Flow Virtual Networking?

A. It is used to create VPN, VTEP, or BGP gateways to connect subnets using VPN connections, Layer 2 subnet extensions over VPN or VTEP, or over BGP session.

B. It enables you to configure and manage common administrative tasks that are applicable to the platform and various Nutanix apps.

C. Distribute the network traffic load across multiple guest VMs efficiently.

D. It manages configuration, monitoring, and optimization of network resources.

Correct Answer: D

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 5

An administrator is responsible for managing user access to a Nutanix cluster... configure custom user roles...
What is the first step in configuring and managing user roles for a Nutanix cluster?

A. Disable default roles and create new roles for each team.

B. Modify the administrator role to restrict access to critical system functions.

C. Create the requisite Custom Roles from custom or built-in Authorization Polices.

D. Create the requisite Authorization Polices from custom or built-in roles.

Correct Answer: D

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 6

An administrator has been tasked with configuring virtual switches and setting the appropriate MTU size for a Nutanix cluster to optimize network performance. The cluster needs to support high-throughput traffic between VMs and ensure compatibility with external networks. The administrator needs to configure the virtual switches and MTU size to enable jumbo frames while ensuring that all nodes and network components are properly aligned to prevent packet loss or fragmentation. What is the first step to configure the virtual switches and MTU size in a Nutanix cluster for optimal network performance?

A. Configure the MTU size to 9000 on all nodes and virtual switches, and verify that all physical network switches support jumbo frames.

B. Set the MTU size to 1500 on the Nutanix virtual switches and configure a separate VLAN for MTU traffic.

C. Enable multicast filtering on the virtual switches to optimize MTU configuration.

D. Set the MTU size to 1500 on all nodes and virtual switches for compatibility with external networks.

Correct Answer: A

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 7

What is the additional resource requirement for each Prism Central VM when enabling Flow Virtual Networking on a Small Prism Central deployment?

A. 2 GB of memory and 1 vCPUs

B. 4 GB of memory and 3 vCPUs

C. 3 GB of memory and 2 vCPUs

D. 5 GB of memory and 4 vCPUs

Correct Answer: B

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 8

The alert details mention a specific external network. Attempts to assign new Floating IPs to VMs fail, but existing Floating IPs continue to work. What is the cause of this alert?

A. A firewall is blocking communication between Prism Central and the VPC's virtual router.

B. The VPC's connection to the external network is down.

C. There are no more available IP addresses in the address pool configured for Floating IPs in that external network.

D. A firewall is blocking communication between Prism Central and the VPC's virtual router.

Correct Answer: C

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 9

While configuring a new security policy in a Nutanix microsegmentation environment, an administrator wants the policy to remain flexible even if virtual machines change subnets or obtain new IP addresses. Which configuration approach should the administrator use when defining the policy scope?

A. Configure the policy only on specific VLAN IDs.

B. Assign IP addresses manually to all VMs included in the policy.

C. Use VM categories to define the secured and allowed entities.

D. Apply the policy after setting static routes for each VM.

Correct Answer: C

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 10

An administrator is deploying a multi-tier application on a Nutanix AHV cluster. The Web tier needs to be accessible from the internet, the App tier must communicate only with the Web tier and the Database tier, and the Database tier should accept traffic only from the App tier. The administrator must determine the correct configuration to ensure secure, reliable connectivity for the Web tier while maintaining isolation from the Internet for the App and Database tiers. Which connectivity option should the administrator implement to meet the requirements?

A. Assign direct external IPs to all VMs in the VPC.

B. Use overlay networks for the Web tier to provide internet access.

C. Assign Floating IP assignments to Web tier only.

D. Connect all tiers directly to the external network with no NAT.

Correct Answer: C

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Nutanix Certified Professional - Network and Security (NCP-NS) 7.5 - NCP-NS-7.5 Exam Practice Test

Latest Update

Useful Links

Contact Us