NCP-NS by Nutanix Valid Free Exam Practice Test

Question 1

Users have recently reported intermittent connectivity issues and slower-than-usual application performance for a Nutanix cluster to an administrator. The administrator needs to identify the root cause of these issues by analyzing the health of the infrastructure components.
What action should the administrator take first to diagnose the root cause of the problem?

A. Rebalance virtual machines across the cluster to balance resource load and improve performance. B. Reboot the Nutanix cluster nodes to clear any potential performance-related cache or memory issues. C. Enable network QoS to prioritize the performance of critical applications. D. Review cluster health status, checking for any warnings or alerts relevant to the performance issues.

Correct Answer: D

Question 2

An administrator is designing a Transit VPC to provide shared corporate services (e.g., DNS) for two tenant VPCs:
VPC-A requires WAN access using NAT.
VPC-B requires WAN access without NAT.
Both VPCs connect to the Transit VPC for shared services hosted on the corporate network.
Shared services residing in the Transit VPC use routed IP addressing for WAN connectivity.
Which two configuration elements should the administrator implement on the Transit VPC? (Choose two.)

A. Use one Overlay external subnet in the Transit VPC to which both VPCs will connect. B. Create two Overlay external subnets in the Transit VPC: one for VPC-A and one for VPC- C. Associate both a NAT and a No-NAT external VLAN to the Transit VPC to support separate egress paths. D. Associate one No-NAT external VLAN to the Transit VPC router for underlay connectivity.

Correct Answer: A,D

Question 3

An administrator has a VPC with a single active gateway node that successfully peers with an external router using a single BGP GW and session.
To eliminate a single point of failure, the administrator deploys a second BGP gateway to the VPC. After the second gateway is added and shows a healthy state, the external router still only sees a single BGP session.
What is the most likely reason for the second session not being established on the external router?

A. The BGP Hold-down timer on the external router is set too high. B. The external router needs BGP peering configuration pointing to the IP address of the first gateway node. C. The second BGP gateway requires a BGP session configured to peer with the external router. D. Network Security Groups are blocking BGP traffic from the second gateway's IP address.

Correct Answer: C

Question 4

How can the administrator discover the root cause of the issue?

A. Check the security policies again to ensure that the rule allowing port 3306 from Web -> Database is applied and active, then check the policy enforcement mode to ensure it is in Enforcement Mode. B. Check if traffic isolation has been configured on the Database tier and ensure that there is no policy preventing App tier communication with the Database tier. C. Confirm that Inter-VM connectivity is enabled within the VM networking settings and that VMs in the Database tier are configured correctly to accept inbound traffic. D. Verify that the port 3306 is open on the external gateway and that SNAT is not being applied for internal communication.

Correct Answer: A

Question 5

When creating a VPC, enabling the Transit VPC toggle changes the role of the VPC.
What does the Transit VPC toggle do?

A. Creates a hub-and-spoke VPC for routing B. Forces NAT for all external subnets C. Enables DHCP relay for routed subnets D. Converts all Overlay subnets into VLAN subnets

Correct Answer: A

Question 6

Which statement is correct about cloning Application Security Policies?

A. The system prevents saving the cloned policy if it has the same secured entities as the original. B. Only one policy can be cloned at a time. C. The default name of the cloned policy must be manually entered; the system does not provide a default. D. The policy type can be changed while cloning a policy.

Correct Answer: D

Question 7

What type of policy would be used to block all traffic between VMs in the category Environment:Sandbox and VMs in the category Environment:Production?

A. Application Policy B. Quarantine Policy C. Isolation Policy D. Shared Services Policy

Correct Answer: C

Question 8

Which action allows an administrator to reuse a single existing policy in a different scope?

A. Place policy in Monitor mode B. Clone C. Place policy in Enforce mode D. Export

Correct Answer: B

Question 9

An administrator is tasked with configuring an application policy for a two-tier public website with Web and DB components. The database servers need to communicate with each other for replication, but the web servers should not be able to communicate with each other. The administrator configures the policy... and sets it to Enforce mode.
Later testing reveals that the web servers are able to communicate with each other.
What should the administrator do to resolve this?

A. Edit the PubSite-Prod-Web entity group's intra-tier rule. B. Configure a VPC Network Policy to deny the traffic. C. Ensure the PubSite-Prod-Web servers are in different Subnets. D. Create an isolation policy for the PubSite-Prod-Web entity group.

Correct Answer: A

Question 10

While configuring a new security policy in a Nutanix microsegmentation environment, an administrator wants the policy to remain flexible even if virtual machines change subnets or obtain new IP addresses.
Which configuration approach should the administrator use when defining the policy scope?

A. Apply the policy after setting static routes for each VM. B. Configure the policy only on specific VLAN IDs. C. Use VM categories to define the secured and allowed entities. D. Assign IP addresses manually to all VMs included in the policy.

Correct Answer: C

Nutanix Certified Professional Network & Security v6.10 - NCP-NS Exam Practice Test