Question 1

Which two statements are the most accurate regarding Cluster Protect? (Choose two.)

Accepted Answer

Explanation: The clusters that are to be protected must be registered with the same instance of Prism Central (Answer C): For Cluster Protect to function correctly, all clusters intended for protection must be registered under the same Prism Central instance. This ensures consistent management and coordination of protection policies and operations across clusters. The Cluster Protect feature requires AOS version 6.7 or higher (Answer D): Cluster Protect is a feature that is available starting from AOS version 6.7. To utilize this feature, ensure that the Nutanix clusters are running this version or a newer one. Reference: Nutanix Cluster Protection Documentation Nutanix AOS Release Notes

Question 2

To deploy NC2 in AWS using an existing VPC, which two AWS resources should be configured beforehand? (Choose two.)

Accepted Answer

A

Explanation: To deploy NC2 in AWS using an existing VPC, the following AWS resources should be configured beforehand: NAT Gateway: This allows instances in the private subnet to connect to the internet or other AWS services, while preventing the internet from initiating connections with those instances. Public and Private Subnets: These are necessary to segregate the network traffic. Public subnets provide a direct route to the internet gateway, while private subnets are used for internal resources that do not need direct access to the internet. Reference: Nutanix Cloud Clusters on AWS Deployment Guide Nutanix Support & Insights

Question 3

A company has purchased Nutanix AOS Pro licensing. Which add-on products are available with this license tier in the AWS cluster deployment wizard?

Accepted Answer

D

Explanation: With the Nutanix AOS Pro licensing, several advanced features and add-on products become available. Specifically, in the AWS cluster deployment wizard, the following add-ons are available: Files: Nutanix Files provides a software-defined, scale-out file storage solution that simplifies the management and scaling of unstructured data. Advanced Replication: Advanced Replication features in Nutanix include synchronous and asynchronous replication capabilities, allowing for robust disaster recovery and data protection solutions. DARE (Data-At-Rest Encryption): DARE ensures that all data stored on Nutanix clusters is encrypted, providing a higher level of security for sensitive information. These features are included in the AOS Pro licensing tier, offering enhanced data management, protection, and security capabilities. Reference: Nutanix Licensing Guide Nutanix Cloud Clusters on AWS Administration Guide Nutanix Best Practices for Advanced Features

Question 4

An administrator needs to allow wide open access to one particular NC2 AWS cluster from an on- premises subnet of 10.19.160.0/24. What is the proper Custom Security Group formatting to satisfy this task? A) https://kxbjsyuhceggsyvxdkof.supabase.co/storage/v1/object/public/file-images/Nutanix_NCP-CI-AWS/page_11_img_1.jpg B) https://kxbjsyuhceggsyvxdkof.supabase.co/storage/v1/object/public/file-images/Nutanix_NCP-CI-AWS/page_11_img_2.jpg C) https://kxbjsyuhceggsyvxdkof.supabase.co/storage/v1/object/public/file-images/Nutanix_NCP-CI-AWS/page_12_img_1.jpg D) https://kxbjsyuhceggsyvxdkof.supabase.co/storage/v1/object/public/file-images/Nutanix_NCP-CI-AWS/page_12_img_2.jpg

Accepted Answer

B

Explanation: To allow wide open access to a particular NC2 AWS cluster from an on-premises subnet (10.19.160.0/24), the proper Custom Security Group formatting needs to include the necessary tags that specify the external cluster UUID and the networks allowed. Custom Security Group Configuration: The configuration should include tags to identify the cluster and the networks that should be granted access. Key: nutanix:clusters Key: nutanix:clusters:external Value: Explanation of Choice: Option B includes the necessary tags and values, ensuring that the specific cluster UUID is recognized and the on-premises subnet (10.19.160.0/24) can communicate with the NC2 cluster. Security Group Tags: nutanix:clusters:external - Identifies the cluster as external. nutanix:clusters:external:cluster-uuid - Specifies the unique identifier for the cluster, enabling proper traffic routing and access. Reference: Nutanix Cloud Clusters on AWS Administration Guide AWS Security Group Documentation Nutanix Best Practices for Custom Security Group Configuration

Question 5

Which interface must be used to deploy NC2?

Accepted Answer

B

Explanation: The NC2 Tile within the my.nutanix.com portal is the correct interface to deploy NC2. This portal provides an integrated and user-friendly interface specifically designed for deploying and managing Nutanix Clusters on AWS. NC2 Deployment Interface: NC2 Tile within the my.nutanix.com portal: This portal provides the necessary tools and options to deploy and manage NC2 clusters. It includes functionalities for setting up the clusters, configuring network settings, and managing resources. Advantages: User-Friendly Interface: Simplifies the deployment process with a guided setup. Integrated Tools: Provides access to all necessary tools for managing the deployment and monitoring of NC2 clusters. Reference: Nutanix Cloud Clusters on AWS Administration Guide Nutanix my.nutanix.com Portal Documentation Nutanix Best Practices for Cluster Deployment

Question 6

An administrator is experiencing problems with several operations, including VM IP address
assignment validations, VM power-on and VM power-off operations.
Whenever a related operation is performed, an alert is generated in the NC2 console indicating that
the Cloud API endpoints are unavailable.
The issue was further investigated and it was determined that NC2 is unable to make API calls to the
underlying cloud infrastructure due to network connectivity misconfigurations.
Which two connectivity misconfigurations could be causing this issue? (Choose two.)

Accepted Answer

Explanation: Route tables for cloud subnets contain incorrect route entries: If the route tables associated with the cloud subnets contain incorrect route entries, the NC2 cluster might not be able to reach the necessary AWS services or endpoints. Correct route entries are crucial for ensuring proper communication between the NC2 cluster and the underlying AWS infrastructure. IAM roles and policies are incorrectly configured: Incorrectly configured IAM roles and policies can prevent NC2 from making API calls to AWS services. These roles and policies must be properly set up to allow the necessary permissions for NC2 to interact with AWS resources and perform required operations. Reference: Refer to the AWS documentation on route table configuration and IAM roles and policies, and Nutanix documentation on NC2 cloud connectivity and permissions.

Question 7

An administrator is planning a new NC2 on AWS deployment. The workload VMs to be deployed on
the new cluster have low storage and memory, but high CPU frequency (>3.0 GHz) requirements.
The administrate! has also been tasked with ensuring that the cluster nodes have the lowest number
of CPU cores to reduce application licensing requirements.
Which node type will satisfy this new deployment?

Accepted Answer

A

Explanation: For a new NC2 on AWS deployment where workload VMs have low storage and memory requirements but high CPU frequency (>3.0 GHz) requirements, and the goal is to minimize the number of CPU cores to reduce application licensing costs, the i3.metal instance type is the most suitable. i3.metal: High CPU Frequency: i3.metal instances offer high-frequency Intel Xeon processors (up to 3.1 GHz) which meet the high CPU frequency requirement. Low Storage and Memory: These instances come with a balanced amount of storage and memory, suitable for workloads with low requirements in these areas. Minimized CPU Cores: i3.metal instances have fewer CPU cores compared to other high-frequency instances like i4i.metal, making them ideal for minimizing application licensing costs. Other Instance Types: z1d.metal: While also offering high CPU frequency, these instances typically come with a higher core count and more memory, which may not be optimal for minimizing licensing costs. i4i.metal: Designed for I/O intensive applications with higher core counts. m5d.metal: Balanced instance type but with more cores and not as high CPU frequency as required. Reference: AWS EC2 Instance Types Documentation Nutanix Cloud Clusters on AWS Administration Guide Nutanix Best Practices for Instance Selection

Question 8

An administrator has deployed an NC2 on AWS cluster that is running mixed workloads. Multiple SQL database are running on the NC2 cluster using a native subnet of 10.78.1.0/24. The administrator wants to ensure only application servers from source subnet 10.79.1.0/24 that reside outside of the NC2 cluster can access the databases. Which two actions will help the administrator most securely achieve this? (Choose two.) A) https://kxbjsyuhceggsyvxdkof.supabase.co/storage/v1/object/public/file-images/Nutanix_NCP-CI-AWS/page_30_img_1.jpg B) https://kxbjsyuhceggsyvxdkof.supabase.co/storage/v1/object/public/file-images/Nutanix_NCP-CI-AWS/page_30_img_2.jpg C) https://kxbjsyuhceggsyvxdkof.supabase.co/storage/v1/object/public/file-images/Nutanix_NCP-CI-AWS/page_30_img_3.jpg D) https://kxbjsyuhceggsyvxdkof.supabase.co/storage/v1/object/public/file-images/Nutanix_NCP-CI-AWS/page_30_img_4.jpg

Accepted Answer

Explanation: To ensure that only application servers from the source subnet 10.79.1.0/24 can access the SQL databases running on the NC2 cluster in the subnet 10.78.1.0/24, the administrator can take the following actions: Option A: Create a custom Security Group with the following rules: Key = tag:nutanix:clusters Key = tag:nutanix:clusters:external and value = the clusters' UUID Key = tag:nutanix:clusters:external and value = 10.78.1.0/24 Option D: Create a custom Security Group with the following: Key = nutanix:clusters Key = nutanix:clusters:external and value = the clusters' UUID Key = nutanix:clusters:external and value = 10.79.1.0/24 These actions help create security rules that restrict access to the databases only from the specified source subnet, ensuring secure and controlled access. Reference: Nutanix Cloud Clusters on AWS Administration AWS Security Groups Documentation

Question 9

An administrator is deploying a new NC2 cluster on AWS and needs to ensure full connectivity is
established between the company’s on-premises datacenter and the AWS cloud.
Which two AWS offering will satisfy this requirement? (Choose two.)

Accepted Answer

Explanation: To establish full connectivity between the company’s on-premises datacenter and the AWS cloud, the following AWS offerings will satisfy this requirement: AWS VPN: This service allows you to create a secure connection between your on-premises network or other remote network and your AWS VPC using an IPsec VPN tunnel. It is suitable for low to moderate bandwidth requirements and provides secure, encrypted connections. Direct Connect: AWS Direct Connect is a dedicated network connection from your premises to AWS. It provides a private, high-bandwidth, low-latency connection which is ideal for high-throughput applications and workloads that need consistent network performance. Reference: AWS VPN Documentation AWS Direct Connect Documentation

Question 10

What is an available log module when configuring a syslog server in the Prism Central Admin Center?

Accepted Answer

D

Explanation: When configuring a syslog server in the Prism Central Admin Center for Nutanix, one of the available log modules is Acropolis. The Acropolis module logs system events related to the Nutanix Acropolis operating system, which is critical for monitoring and auditing system activities and performance. Configuring syslog with the Acropolis module ensures that important events and issues related to the Acropolis environment are captured and can be forwarded to an external syslog server for centralized logging and analysis. Reference: Refer to the Nutanix documentation on Prism Central and syslog configuration for the full list of available log modules and detailed steps for configuration.

Question 11

A company wants to start using Nutanix Cloud Clusters (NC2) in AWS. The company has large spend
commitments as part of an AWS Enterprise Discount Program (EDP) totaling $15 million.
What approach should the administrator take to ensure that Nutanix licensing costs to the EDP
commitment?

Accepted Answer

A

Explanation: Given the company's large spend commitments as part of an AWS Enterprise Discount Program (EDP) totaling $15 million, purchasing Nutanix licenses through the AWS Marketplace ensures that the costs contribute to the EDP commitment. This approach integrates the Nutanix license costs into the overall AWS spend, thereby maximizing the benefits of the EDP. Purchasing directly from Nutanix or leveraging existing licenses might not count towards the AWS EDP commitment, and trial licenses are typically for evaluation purposes and do not contribute to the committed spend. Reference: Refer to the Nutanix and AWS documentation on licensing and marketplace purchases, and EDP program details.

Question 12

An administrator is seeking help with an ongoing NC2 issue. After reaching out to Nutanix support, the administrator is introduced to NC2 specialist who can help troubleshoot the problem.

Accepted Answer

Explanation: Ensure the specialist is assigned the RBAC role with proper permissions (Answer A): Role-Based Access Control (RBAC) ensures that the specialist has the necessary permissions to troubleshoot and manage the NC2 environment. This avoids unnecessary privilege escalations and maintains security. Confirm the Support Authorization on the organization is set to Full Access (Answer C): Setting the Support Authorization to Full Access allows the Nutanix support specialist to have the required access to investigate and resolve issues in the environment. This is essential for effective troubleshooting. Reference: Nutanix RBAC Documentation Nutanix Support Access Guide

Question 13

Which entity should be contacted for cloud hardware supported (EC2 instances, VPC, etc) related to NC2?

Accepted Answer

B

Explanation: For issues related to cloud hardware support such as EC2 instances, VPC, etc., the public cloud vendor (AWS in this case) should be contacted. AWS provides support and documentation for their infrastructure and services, ensuring that users can get assistance for any hardware or cloud-specific queries. Reference: Nutanix Support & Insights

Question 14

Regarding a cloud cluster, which two upgrades can be performed using LCM? (Choose two.)

Accepted Answer

Explanation: AHV (Answer A): AHV (Acropolis Hypervisor) can be upgraded using Lifecycle Manager (LCM). LCM simplifies the upgrade process and ensures that all components are updated in a coordinated manner. BIOS (Answer C): BIOS upgrades can also be performed using LCM. This helps in maintaining hardware compatibility and performance by ensuring that the latest firmware is installed. Reference: Nutanix Lifecycle Manager (LCM) Documentation Nutanix AHV Upgrade Guide Nutanix BIOS Upgrade Documentation

Question 15

To manually create an AWS VPC with Public access to Prism Element for testing purposes, Which components must be created?

Accepted Answer

A

Explanation: To manually create an AWS VPC with Public access to Prism Element for testing purposes, the following components must be created: VPC: A Virtual Private Cloud to provide an isolated network for the resources. Delegated Subnets: Subnets within the VPC to segment the network and allocate IP ranges. Route Tables: To define routing rules for the subnets to ensure proper traffic flow. NAT Gateway: To enable instances in the private subnets to access the internet. Internet Gateway: To allow direct internet access to instances in the public subnets. Load Balancer: To distribute traffic across multiple instances for improved availability and redundancy. Reference: Refer to the AWS documentation on VPC creation and Nutanix documentation on network setup for Prism Element access.

Free Nutanix NCP-CI-AWS Actual Exam Questions