Pass Nutanix NCP-CI-Azure Exam with Guarantee Updated 83 Questions
Latest NCP-CI-Azure Pass Guaranteed Exam Dumps Certification Sample Questions
NEW QUESTION # 30
A company is extending asubnet from their on-premises environment to an NC2cluster on Azure. The company is considering using either a Virtual Tunnel End Point (VTEP) or a layer 2 subnet Extension over VPN.
In which two scenarios would it be advantageous to use VTEP for this requirement? (Choose two.)
- A. Only one remote Availability Zone exists that needs the subnet extended.
- B. Multiple remote Availability Zones exist to add to the same VTEP-based extended Layer 2 subnet.
- C. Connectivity between sites already does not provided encryption.
- D. Connectivity between sites already provides encryption.
Answer: B,D
Explanation:
* Scenario Analysis:
* A. Connectivity between sites already provides encryption: Using VTEP in this scenario is advantageous because VTEP does not inherently provide encryption. If encryption is already provided, VTEP can be effectively used without additional security concerns.
* D. Multiple remote Availability Zones exist to add to the same VTEP-based extended Layer 2 subnet: VTEP is well-suited for scenarios where multiple remote Availability Zones need to be connected to the same extended Layer 2 subnet. This allows for efficient management and seamless connectivity across different zones.
* Scenarios B and C:
* B. Only one remote Availability Zone exists that needs the subnet extended: This scenario does
* not leverage the strengths of VTEP, as it is better suited for multiple zones.
* C. Connectivity between sites already does not provide encryption: Using VTEP without existing encryption is not ideal as VTEP itself does not encrypt the traffic.
* Conclusion: VTEP is advantageous when encryption is already in place and when multiple remote zones need to be connected to the same extended subnet.
References:
* Nutanix NC2 Networking Guide
* Azure Networking Documentation
NEW QUESTION # 31
An administrator is tasked with preparing the company's Azure subscription for use with NCZ.
Which two Azure Resource Providers need to be registered? (Choose two.)
- A. Microsoft.Network
- B. Microsoft.HybridNetwork
- C. Microsoft.Nutanix
- D. Microsoft.HybridCompute
Answer: A,C
Explanation:
* Azure Resource Providers: To prepare an Azure subscription for NC2, specific resource providers must be registered to enable necessary services and resources.
* Required Providers:
* Microsoft.Network: This provider is essential for networking functionalities, including virtual networks, subnets, and other network resources necessary for NC2 deployment.
* Microsoft.Nutanix: This provider is specifically required for integrating and managing Nutanix resources within the Azure environment.
* Other Providers:
* Microsoft.HybridNetworkandMicrosoft.HybridCompute: These are not specifically required for NC2 but might be relevant for other hybrid or extended network configurations.
* Conclusion: Registering both "Microsoft.Network" and "Microsoft.Nutanix" ensures that all necessary network and Nutanix-specific resources are available for NC2 deployment.
References:
* Azure Resource Providers Documentation
* Nutanix on Azure Setup Guide
NEW QUESTION # 32
Which statement best describes south bound traffic to a Nutanix User VPC originating outside the BC2 cluster when using a no-NAT (routed path) having two or more Flow Gateways (FGW)?
- A. A BGP gateway runs inside of Prism Central. The BGP gateway advertises externally mutable IP addresses to the Azure Route Server, with each active FGW external IP address as the next hop.
- B. A BGP gateway runs on the CVM of the bare-metal hosts. The BGP gateway advertises externally routable IP addresses to the Azure Route Server, with each active FGW external IP address the next hop.
- C. A BGP gateway is deployed as Azure native VMs in the Prism Central VNet. The BGP gateway advertises externally routable IP addresses to the Azure Route Server, with each active FGW external IP address as the next hop.
- D. A BGP gateway is deployed as Azure native VMs in the Prism Central VNet. The BGP gateway advertises externally routable IP addresses to the Prism Central, with each active FGW external IP address as the next hop.
Answer: C
Explanation:
BGP Gateway Deployment: The BGP gateway is deployed as Azure native VMs within the Prism Central VNet. This deployment ensures seamless integration with Azure's networking infrastructure.
Route Advertisement: The BGP gateway advertises the externally routable IP addresses to the Azure Route Server. This setup allows for dynamic routing and efficient traffic management.
Flow Gateways (FGW) as Next Hops: Each active Flow Gateway's external IP address is used as the next hop. This configuration ensures that southbound traffic is correctly routed to the appropriate Flow Gateway, providing efficient and reliable connectivity.
Reference:
Nutanix NC2 Networking Guide
Azure Route Server and BGP Documentation
NEW QUESTION # 33
The cluster has the following configuration:
A Transit VPC exists as Default, but is additionally configured with a overlay-external-subnet-nonat overlay subnet The ERP for the Transit VPC is 10.1.1.0/25 A User VPC exists named User_VPC_Prod The ERP for the User VPC is 10.1.1.0/24 Outbound and inbound routes have been configured A User VM NO-NAT subnet has been configured in the User VPC The administrator has successfully created a VM and added the NIC associated with the NO-NAT subnet, but is not able to communication with other resources.
Which option will resolve this issue?
- A. The ERP in the User VPC must be from a different CIDR range than the ERP in the transit VPC.
- B. Check that the network ACLs for the NO-NAT subnet are not blocking the necessary traffic.
- C. Verify that the route table associated with the User VPC has appropriate routes to the Transit VPC.
- D. Ensure that the security groups associated with the VM allow traffic to and from the desired resources.
Answer: A
Explanation:
In this scenario, the issue arises from overlapping IP address ranges between the Transit VPC and the User VPC. Here's a detailed breakdown:
Understanding ERPs (Elastic Routing Prefixes):
The ERP for the Transit VPC is 10.1.1.0/25, which covers IP addresses from 10.1.1.0 to 10.1.1.127.
The ERP for the User VPC is 10.1.1.0/24, which covers IP addresses from 10.1.1.0 to 10.1.1.255.
IP Address Overlap:
Since 10.1.1.0/25 is a subset of 10.1.1.0/24, there is a significant overlap in the IP address ranges of these two ERPs.
This overlap can cause routing issues because the same IP address range is being used in both VPCs, leading to ambiguity in routing and communication.
Communication Issue:
When a VM in the User VPC tries to communicate with other resources, the network cannot accurately determine the correct route due to the overlapping IP address ranges.
This overlap prevents proper routing and results in the VM being unable to communicate with other resources as intended.
Resolution:
To resolve this issue, the ERPs must be in different CIDR ranges. This means the IP address ranges for the Transit VPC and the User VPC should not overlap.
For example, if the Transit VPC uses 10.1.1.0/25, the User VPC could use a different range such as 10.1.2.0/24 or any other range that does not overlap with 10.1.1.0/25.
By ensuring that the ERPs are in different CIDR ranges, the network can properly route traffic between the VPCs without any conflicts or ambiguities, thereby enabling the VM in the User VPC to communicate with other resources effectively.
NEW QUESTION # 34
Which service enables the monitoring of key metrics on various Azure services, including virtual networks, virtual machines, and bare metal hosts for an NC2 cluster?
- A. Azure Network Watcher
- B. Resource Manager
- C. Azure Monitor
- D. Azure Service Health
Answer: C
Explanation:
Azure Monitor Overview: Azure Monitor is a comprehensive monitoring service that collects, analyzes, and acts on telemetry data from Azure resources.
Key Metrics Monitoring: Azure Monitor enables the monitoring of various Azure services such as virtual networks, virtual machines, and bare metal hosts, providing insights and visibility into their performance and health.
Comparison of Services:
Resource Manager: Manages Azure resources but does not provide detailed monitoring capabilities.
Azure Service Health: Provides personalized alerts and guidance when Azure service issues affect you but is not a comprehensive monitoring solution.
Azure Network Watcher: Focuses on network performance monitoring and diagnostics but does not cover all resource types.
Conclusion: Azure Monitor is the most suitable service for monitoring key metrics across a wide range of Azure services.
Reference:
Azure Monitor Documentation
Nutanix NC2 on Azure Monitoring Guide
NEW QUESTION # 35
An administrator is planning to expand an NC2 on Azure cluster.
Which statement is true regarding prerequisites for expanding the cluster?
- A. Cluster must have at least three nodes.
- B. Cluster must be in a Cluster Stopped state.
- C. Cluster must be in a Cluster Connected state.
- D. Cluster must have at least five nodes.
Answer: C
Explanation:
* Cluster State Requirement: To expand a cluster, it must be operational and in a connected state to ensure seamless integration of additional nodes.
* Cluster Stopped State: If the cluster is stopped, it cannot perform expansion operations.
* Minimum Nodes Requirement: There is no minimum node count prerequisite for expanding the cluster as long as the cluster is connected.
* Cluster Connected State: Ensuring the cluster is connected verifies that it is operational and can communicate with additional nodes being added.
* Conclusion: The cluster must be in a Cluster Connected state to expand successfully.
References:
* Nutanix Clusters Expansion Guide
* Azure NC2 Configuration Documentation
NEW QUESTION # 36
An administrator needs to attach a network interface to a Flow Gateway VM.
What option should be enabled in the Azure portal and in the OS of the Flow gateway VM to meet this network requirement?
- A. IP Forwarding
- B. Dynamic Route
- C. Port Tagging
- D. Static Route
Answer: A
Explanation:
* IP Forwarding in Azure:Enabling IP forwarding allows the VM to forward network traffic that is not specifically addressed to itself. This is necessary for network devices like the Flow Gateway VM to route traffic correctly.
* Network Interface Configuration:Both the Azure portal settings and the VM's operating system must
* have IP forwarding enabled to ensure proper traffic handling and routing capabilities.
References:
* Azure Virtual Machine Networking Documentation
* Nutanix Flow Gateway Configuration Guide
NEW QUESTION # 37
A company wants NC2 networking components to be created manually with the correct naming conversation.
To achieve this the administrator manually creates the PC and Host VNets in Azure.
What additional Azure Network components must the administrator manually create?
- A. NAT Gateways, Delegated Subnets, Flow Gateway Subnets, VNet Peers
- B. Internet Gateways. Delegated Subnets, Flow Gateway Subnets, VNet Peers
- C. NAT Gateways. Delegated Subnets, Flow Gateway Subnets, Transit VPC
- D. internet Gateways, Private Endpoints, Flow Gateway Subnets, VNet Peers
Answer: A
Explanation:
* NAT Gateways:Necessary for providing outbound internet access to resources in the private subnet. It ensures that the virtual network can communicate with external services securely.
* Delegated Subnets:Required for deploying specific Azure services within the virtual network, allowing controlled access and management of the resources within these subnets.
* Flow Gateway Subnets:These subnets are used for managing traffic flow within the network, ensuring efficient routing and connectivity between different parts of the NC2 infrastructure.
* VNet Peers:Establish connections between different virtual networks within Azure, enabling seamless communication and resource sharing across various parts of the NC2 deployment.
References:
* Azure Virtual Network Documentation
* Nutanix NC2 Networking Setup Guide
NEW QUESTION # 38
An administrator is planning an NC2 deployment in Azure and wants to connect the company's on-premises datacenter to the cloud environment.
What connectivity solution should the administrator use to avoid traffic between the locations flowing over the public internet?
- A. Site-to-Site VPN
- B. ExpressRoute
- C. Point-to-Site VPN
- D. VTEP Gateways
Answer: B
Explanation:
To connect the company's on-premises datacenter to the Azure cloud environment while avoiding traffic over the public internet, the administrator should use Azure ExpressRoute. ExpressRoute provides a private connection to Azure, offering more reliability, faster speeds, and lower latencies compared to typical internet connections. This service ensures that data traffic does not traverse the public internet, enhancing security and performance. Reference Azure ExpressRoute Overview
NEW QUESTION # 39
An administrator needs to ensure API calls are executing successfully from NC2 to manage Azure resources.
Which cluster outbound to Azure connections are required to satisfy this task?
- A. managementazure.com
- B. apikeys.nutanix.com
- C. azure-support.nutan/x.com
- D. portal.azure.com
Answer: B
Explanation:
* API Key Management:For NC2 to manage Azure resources successfully, it needs to authenticate and authorize API calls. This is typically handled through API keys, which are managed via specific endpoints.
* Required Connection:The endpointapikeys.nutanix.comis crucial for managing these API keys.
Ensuring connectivity to this endpoint allows NC2 to verify and utilize the API keys needed for interacting with Azure services.
References:
* Nutanix NC2 API Configuration Guide
* Azure API Management Documentation
NEW QUESTION # 40
An administrator is tasked to identify the firewall requirement and submit the port request to the requirement team before the clusters deployment.
Which requirement should the administrator ensure is implement on the corporate firewall?
- A. Allow uni-directional internet Control Message Protocol (ICMP) traffic between the CVMs, femenr and Prism Central.
- B. Allow bi-directional Internet Control Message Protocol (ICMP) traffic between the CVMs, Prism Element, and Prism Central.
- C. ICMP and connectivity can be disabled between the CVMs, Prism Element, and Prism Central
- D. ICMP can disable but the connectivity should be enabled between the CVMs. Prism Element, and Prism Central.
Answer: B
Explanation:
* ICMP Traffic:ICMP is essential for network diagnostics and troubleshooting, such as ping and traceroute, which help in monitoring the connectivity and health of the network.
* Bi-Directional Traffic:Allowing bi-directional ICMP traffic ensures that all nodes (CVMs, Prism Element, and Prism Central) can both send and receive diagnostic messages, which is crucial for maintaining proper communication and network stability.
References:
* Nutanix Networking and Connectivity Requirements
* Corporate Firewall Configuration Guidelines
NEW QUESTION # 41
Exhibit.
Which action should the administrator take to troubleshoot the error shown in the exhibit?
- A. Check the PC VNet is peered correctly.
- B. Check the Azure AD App registration Client Secret.
- C. Check the NC2 organization permissions.
- D. Check the Azure subnet delegation status.
Answer: B
Explanation:
To troubleshoot the error shown in the exhibit where Azure credentials are not valid and the creation of the resource group failed, the administrator should:
Verify that the Azure AD App registration has been correctly configured, especially the Client Secret.
Ensure that the Client Secret is valid, has not expired, and matches what has been entered in the configuration.
This step is crucial because an invalid or expired Client Secret would prevent the validation of Azure credentials and the creation of necessary resources.
Reference
Azure AD App Registration and Secrets Management
Nutanix Cluster Configuration Documentation
NEW QUESTION # 42
A new subnet needs to be created within Flow Virtual Networking to accommodate a new type of workload in the company's NC2 Azure instance.
Which type of network will satisfy this task?
- A. VNET
- B. Underlay
- C. Overlay
- D. VPC
Answer: C
Explanation:
Flow Virtual Networking: Nutanix Flow Virtual Networking allows for the creation of overlay networks to segment and manage network traffic.
Network Types:
Underlay: Refers to the physical network infrastructure.
Overlay: Logical network built on top of the physical infrastructure, providing flexibility for creating isolated subnets and accommodating different workloads.
VPC: Virtual Private Cloud, a network within a public cloud provider.
VNET: Azure-specific virtual network.
Requirement: Creating a subnet for new workloads within Flow Virtual Networking suggests using an overlay network for logical separation and management.
Conclusion: An overlay network within Flow Virtual Networking will satisfy the task of accommodating a new type of workload in the NC2 Azure instance.
Reference:
Nutanix Flow Networking Guide
Azure Virtual Network Documentation
NEW QUESTION # 43
An administrator must ensure that certain NC2 VMs can access Azure resources. The NC2 VM traffic must not traverse the internet.
How would the administrator achieve this?
- A. By creating an Azure Private Endpoint for VMs in a Delegated Subnet
- B. By creating an Azure Private Endpoint for VMs in a NAT network via vWAN.
- C. By creating an Azure Private Endpoint for VMs in the host-mgmt subnet.
- D. By creating an Azure Private Endpoint for VMs in a No-NAT network via vWAN.
Answer: A
Explanation:
* Azure Private Endpoint:A Private Endpoint provides secure connectivity to Azure resources by enabling private access through the Azure backbone network. This ensures that the traffic does not traverse the internet, providing enhanced security and performance.
* Delegated Subnet:By creating an Azure Private Endpoint for VMs in a delegated subnet, the administrator ensures that the VMs can access Azure resources directly and securely without using the public internet.
References:
* Azure Private Endpoint Documentation
* Nutanix NC2 Networking Configuration Guide
NEW QUESTION # 44
An administrator deploys an NC2 cluster in Azure and uses 10.100.0.0/16 for one of the VNets.
The cluster is configured as follows:
* 8 nodes
* Prism Central Deployed
* Files Deployed
Following the deployment, the administrator experiences network connectivity issues.
Which reason explains the connectivity issues?
- A. The 10.100.0.0/16 range is reserved by IANA.
- B. The 10.100.0.0/16 range is not a valid CIDR range.
- C. The W.100.0.0/16 range contains too many IP addresses for an NC2 cluster.
- D. 10.100.0.0/16 range is reserved for internal cluster usage.
Answer: D
Explanation:
* Network Configuration: Using a specific IP range for a VNet can cause conflicts if that range is reserved or already in use by the cluster's internal operations.
* Internal Usage: In NC2, certain IP ranges are reserved for internal cluster functions and should not be used for VNets to avoid IP conflicts and connectivity issues.
* Impact: If the 10.100.0.0/16 range is reserved for internal usage, using it for a VNet would lead to IP conflicts, causing network connectivity issues.
* Verification: It's important to verify the reserved IP ranges in the NC2 documentation before assigning them to VNets.
* Conclusion: The connectivity issues are likely due to using the 10.100.0.0/16 range, which is reserved for internal cluster usage.
References:
* Nutanix Networking Guidelines
* Azure Virtual Network Documentation
NEW QUESTION # 45
A new subnet needs to be created within Flow Virtual Networking to accommodate a new type of workload in the company's NC2 Azure instance.
Which type of network will satisfy this task?
- A. VNET
- B. Underlay
- C. Overlay
- D. VPC
Answer: C
Explanation:
* Flow Virtual Networking: Nutanix Flow Virtual Networking allows for the creation of overlay networks to segment and manage network traffic.
* Network Types:
* Underlay: Refers to the physical network infrastructure.
* Overlay: Logical network built on top of the physical infrastructure, providing flexibility for creating isolated subnets and accommodating different workloads.
* VPC: Virtual Private Cloud, a network within a public cloud provider.
* VNET: Azure-specific virtual network.
* Requirement: Creating a subnet for new workloads within Flow Virtual Networking suggests using an overlay network for logical separation and management.
* Conclusion: An overlay network within Flow Virtual Networking will satisfy the task of accommodating a new type of workload in the NC2 Azure instance.
References:
* Nutanix Flow Networking Guide
* Azure Virtual Network Documentation
NEW QUESTION # 46
An administrator has been asked to create a cluster to support new workloads.
What are the maximum number of nodes supported in an NC2 on Azure environment?
- A. 14 nodes
- B. 24 nodes
- C. 28 nodes
- D. 18 nodes
Answer: D
NEW QUESTION # 47
An organization wants to use a Jump Host to access Prism Element and Prism Central within an NC2 cluster on Azure.
Which statement is true?
- A. Jump Host instance must be deployed in the cluster VNet.
- B. Jump Host instance can only be deployed in the Prism Central VNet.
- C. Jump Host instance can be deployed in the Prism Central VNet or an external VNet.
- D. Jump Host must not be used. Only VPN or ExpressRoute should be use.
Answer: C
Explanation:
Jump Host Deployment: A Jump Host is a secure server used to access other systems in a network. In the context of an NC2 cluster on Azure, it serves as an intermediary for accessing Prism Element and Prism Central.
Flexible Deployment Options: The Jump Host can be deployed in either the Prism Central VNet or an external VNet, providing flexibility in network design and access strategies. This allows the organization to choose the most suitable network for deploying the Jump Host based on their security and connectivity requirements.
Reference:
Nutanix NC2 on Azure Deployment Guide
Azure Virtual Network Configuration Documentation
NEW QUESTION # 48
What will be observed in the NC2 cluster when terminating a node from the Azure portal?
- A. NC2 will shutdown the node.
- B. NC2 will mark the node as degraded.
- C. NC2 will continue re-provisioning the node.
- D. NC2 will terminate the node from the cluster.
Answer: B
Explanation:
* Node Termination Observation:When a node is terminated from the Azure portal, the NC2 cluster will detect that the node is no longer operational.
* Marking as Degraded:NC2 will mark the node as degraded, indicating that the node is not functioning as expected. This status allows administrators to take necessary actions to resolve the issue, such as provisioning a new node or addressing the degradation cause.
References:
* Nutanix NC2 Cluster Management Guide
* Azure Instance Termination Documentation
NEW QUESTION # 49
A nutanix User VPC named Servers has a subnet named Tier1:
Servers: 10.0.0.0/20
Tier1: 10.0.0.0/25
Tier is using floating IPS to allow inbound traffic to the web servers that are hosted for a payroll system.
The company requires that the Network Security Group allow other Native Azure instances running in subnet AD (10.20.0.0/24) in the Prism Central VNet to be able to contact the web servers.
Which statement is true regarding this company requirement?
- A. The internal NIC of the Flow Gateway Network Security Group needs to allow to traffic from 1 10.20.0.0/24.
- B. The external NIC of the Flow Gateway Network Security Group needs to allow traffic from 10.20.0,0/24.
- C. Native Azure instances \n the Prism Central vNet will be allowed access by default.
- D. Policy based routing in the Servers VPC must be edited to allow traffic from 10.20.0.0/24.
Answer: A
Explanation:
Flow Gateway Network Security Group (NSG): NSGs control the traffic flow to and from network interfaces associated with VMs and other resources. Configuring the NSG correctly is crucial for ensuring that required traffic is allowed.
Internal NIC Configuration: To allow Native Azure instances in the Prism Central VNet (10.20.0.0/24) to access the web servers in the Tier1 subnet, the internal NIC of the Flow Gateway must be configured to allow traffic from 10.20.0.0/24. This ensures that inbound traffic from these instances is permitted and properly routed to the web servers.
Reference:
Azure Network Security Group Documentation
Nutanix Flow Gateway Configuration Guide
NEW QUESTION # 50
An administrator needs to open the following ports in the firewall between an on-premises cluster and azure for disaster recovery:
* 22
* 2009
* 2020
* 2049
* 3260
* 9440
Which rile-type should be created on the firewall for communication to be appropriately established?
- A. Bi-directional (TCP)
- B. Outbound (ICMP)
- C. Bi-directional (ICMP)
- D. Outbound (TCP)
Answer: A
Explanation:
Port Requirements: The specified ports (22, 2009, 2020, 2049, 3260, 9440) are commonly used for various services and require TCP communication.
Port 22: SSH
Port 2009: Used for Nutanix internal communication
Port 2020: Nutanix services
Port 2049: NFS
Port 3260: iSCSI
Port 9440: Nutanix Prism management
Communication Type: To ensure proper disaster recovery setup, bi-directional communication is needed to allow traffic to flow both from on-premises to Azure and vice versa.
TCP Protocol: These ports use the TCP protocol, which provides reliable communication between devices.
Conclusion: Creating a bi-directional (TCP) rule on the firewall allows the necessary communication for disaster recovery processes.
Reference:
Nutanix Networking and Security Documentation
Azure Networking Documentation
NEW QUESTION # 51
......
Nutanix NCP-CI-Azure Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 4 |
|
New NCP-CI-Azure Test Materials & Valid NCP-CI-Azure Test Engine: https://www.vceengine.com/NCP-CI-Azure-vce-test-engine.html
NCP-CI-Azure Updated Exam Dumps [2026] Practice Valid Exam Dumps Question: https://drive.google.com/open?id=1fKpIHzRYJACbNP1bzxazcy-vQ7lJQidK
