Download Nutanix NCP-CI-Azure Mock Test Study Material

NCP-CI-Azure Questions Prepare with Learning Information

NEW QUESTION # 21
An administrator is tasked with providing User VMs in Azure that are hosted within a Flow NAT network outbound internet connectivity.
In which order would the traffic flow through each component?

• A. User VM > Delegated Subnet > Flow Gateway > Floating IP Address > Azure NAT GW
• B. User VM >Flow Gateway > Floating IP Address > Azure NAT GW
• C. User VM >Floating IP Address > Flow Gateway > Azure LB
• D. User VM > Delegated Subnet > Flow Gateway > Floating IP Address > Azure LB

Answer: A

Explanation:
* User VM:The initial source of the traffic within the Azure environment.
* Delegated Subnet:Traffic from the User VM flows through the delegated subnet, which is configured to handle specific network traffic.
* Flow Gateway:The Flow Gateway manages and routes the traffic from the delegated subnet, providing network services and connectivity.
* Floating IP Address:The Flow Gateway assigns a floating IP address for the outbound traffic, facilitating NAT operations.
* Azure NAT Gateway:The traffic is then routed through the Azure NAT Gateway, which provides outbound internet connectivity for the User VMs, ensuring secure and efficient routing.
References:
* Azure Virtual Network NAT Documentation
* Nutanix NC2 Configuration Guide

NEW QUESTION # 22
An administrator needs to configure the correct outbound requirement for a successful cluster deployment in Azure.
Which destination must have an outbound rule to meet this requirement?

• A. Https://portal.nutanix.com/*
• B. https://nutanix.dev/*
• C. Https://support.nutanix.com/*
• D. Https://downloads.cloud.nutanix.com/*

Answer: D

Explanation:
* Outbound Rule Necessity: For successful cluster deployment, certain outbound connections must be allowed to ensure proper download and configuration of resources.
* Critical Destination: "Https://downloads.cloud.nutanix.com/*" is a critical endpoint from which the Nutanix software and updates are downloaded during the cluster deployment process.
* Functionality: Ensuring an outbound rule for this destination allows the deployment to fetch necessary files and updates, enabling smooth cluster setup and operation.
* Other Destinations:
* Https://portal.nutanix.com/: Used for accessing the Nutanix portal, not directly related to deployment downloads.
* Https://support.nutanix.com/: Used for support-related tasks, not for deployment-specific downloads.
* https://nutanix.dev/: Related to development and API documentation, not necessary for initial deployment.
* Conclusion: Outbound connectivity to "Https://downloads.cloud.nutanix.com/*" is essential for downloading deployment resources.
References:
* Nutanix NC2 on Azure Network Configuration Guide
* Azure Network Security Documentation

NEW QUESTION # 23
Exhibit

An NC2 on Azure cluster was deployed with two Flow Gateway in HA (FHW1 and FGW2). After a week of use, four bare-metal nodes were added to the NC2 cluster and additional workloads were added. The existing workloads were using floating IPs to allow inbound traffic to communicate with the running workloads on the NC2 cluster.
It was determined that additional bandwidth for north/south traffic would be needed. Two additional Flow Gateways were added (FGW3 and FGW4) from the NC2 portal configuration menu.
The existing workloads prior to expansion on the NC2 cluster will be able to use which Flow Gateways using the NAT traffic path after the expansion?

• A. All four Flow Gateways.
• B. They will be able to use FGW3 and FGW4 once the NC2 workloads reboots.
• C. Only the Flow Gateway each workload was using prior to expansion.
• D. All four Flow Gateways using a MAC/Hash algorithm.

Answer: C

Explanation:
In the NC2 on Azure cluster scenario, the existing workloads were using floating IPs for inbound traffic before the addition of new Flow Gateways (FGW3 and FGW4). The NAT traffic path established initially will continue to direct traffic through the originally assigned Flow Gateways (FGW1 and FGW2). The existing workloads will not automatically utilize the new Flow Gateways (FGW3 and FGW4) without a reconfiguration or reboot, which reassigns the NAT paths.
References
* Nutanix Flow Networking and Configuration Guide

NEW QUESTION # 24
Native Azure VMs exist in a subnet (10.20.80.0/20) in the Prism Central VNet that need access to the workload running on the Nutanix User.
What needs to be modified to allow access from the native Azure VMs to the workloads running in the Nutanix User VPC?

• A. Adjust the Inbound Network Security Group on the Flow Gateway VM External NIC to allow traffic
  102030.0/20.
• B. Change the ERP value to the the subnet range of the native Azure VMs (10.20.80.0/20) on the Transit VPC and the Nutanix User VPC.
• C. Adjust the Inbound Network Security Group on the Flow Gateway VM Internal NIC to allow traffic
  102030,0/20.
• D. Remove the ERP value on the transit VPC and Nutanix User VPC.

Answer: C

Explanation:
To allow access from the native Azure VMs to the workloads running in the Nutanix User VPC, the administrator needs to:
* Adjust the Inbound Network Security Group (NSG) on the Flow Gateway VM's Internal NIC.
* Specifically, allow traffic from the subnet range of the native Azure VMs (10.20.80.0/20) in the Inbound rules of the NSG associated with the Internal NIC of the Flow Gateway VM.
This configuration change permits the desired network traffic, ensuring that the native Azure VMs can communicate with the workloads in the Nutanix User VPC.References
* Azure Network Security Groups Overview
* Nutanix Networking and Security Best Practices

NEW QUESTION # 25
An administrator is trying to determine which type of DNS server to deploy for a networking infrastructure in Azure.
Which DNS server option would require either VPN or ExpressRoute connectivity?

• A. On-premises
• B. Azure
• C. Cloudflare
• D. Google

Answer: A

Explanation:
* DNS Server Options:
* Cloudflare: A public DNS service that operates over the internet.
* Azure: Azure DNS operates within the Azure cloud and does not require VPN or ExpressRoute for connectivity within Azure.
* On-premises: Requires a secure connection, such as VPN or ExpressRoute, to be accessible from Azure, as it resides outside the Azure cloud.
* Google: Another public DNS service accessible over the internet.
* Connectivity Requirements:
* On-premises DNS: To integrate on-premises DNS with Azure, secure connectivity (VPN or ExpressRoute) is necessary to ensure seamless and secure communication between the on-premises infrastructure and Azure resources.
* Conclusion: An on-premises DNS server would require VPN or ExpressRoute connectivity to be accessible and integrated with the Azure environment.
References:
* Azure DNS Overview
* VPN Gateway Configuration
* ExpressRoute Overview

NEW QUESTION # 26
Exhibit.

An administrator is trying to figure out why the NC2 cluster deployment in Azure failed.
Which issue might be the cause?

• A. DNS servers are not reachable from cluster management VNet.
• B. The company does not have sufficient NCI/AOS licenses.
• C. The selected bare metal node type is not supported in the deployment region.
• D. The administrator has not specified a DNS server during deployment.

Answer: C

Explanation:
* Error Message Analysis:The error message indicates that the node cannot boot successfully and will be replaced with a new node. This points towards an issue related to the specific node type or configuration.
* Bare Metal Node Support:One common cause for such deployment failures is selecting a bare metal node type that is not supported in the chosen deployment region. Azure has specific regions where certain node types are available, and attempting to use an unsupported node type in a region can result in provisioning failures.
References:
* Nutanix KB 9768 for troubleshooting deployment issues: KB 9768
* Azure Region Availability Documentation
* Nutanix NC2 on Azure Deployment Guide

NEW QUESTION # 27
An administrator has been asked to create a cluster to support new workloads.
What are the maximum number of nodes supported in an NC2 on Azure environment?

• A. 18 nodes
• B. 28 nodes
• C. 14 nodes
• D. 24 nodes

Answer: A

Explanation:
* NC2 Cluster Node Limit: NC2 on Azure has specific limitations regarding the maximum number of nodes supported in a single cluster.
* Maximum Nodes: According to the current NC2 on Azure guidelines, a single cluster can support up to
18 nodes.
* Workload Support: This limitation ensures optimal performance and management of resources within the Azure environment.
* Comparison of Options:
* 14 nodes: Less than the maximum supported.
* 24 nodes and 28 nodes: Exceed the maximum supported, potentially leading to performance and management issues.
* Conclusion: For supporting new workloads, the maximum number of nodes in an NC2 on Azure environment is 18.
References:
* Nutanix Clusters on Azure Technical Specifications
* Azure Virtual Machine Scale Sets Documentation

NEW QUESTION # 28
Which entity should be contacted for cloud hardware support (EC2 instances, VPC, etc) related to NC2?

• A. Internal IT Operations team
• B. Public Cloud Vendor
• C. Partner
• D. Nutanix

Answer: B

Explanation:
* Cloud Hardware Support: For issues related to cloud hardware, such as EC2 instances or VPC configurations, the responsible entity is typically the public cloud vendor.
* Nutanix Responsibility: Nutanix manages the software layer and integration aspects of the NC2 service, but the underlying hardware support is managed by the cloud provider (e.g., AWS, Azure).
* Support Process:
* Public Cloud Vendor: Contact the public cloud vendor for issues directly related to the hardware, as they own and manage the physical infrastructure.
* Nutanix: For software and configuration issues specific to the NC2 service, contact Nutanix support.
* Conclusion: For cloud hardware-related support, the appropriate contact is the public cloud vendor.
References:
* Nutanix Support Guide
* Azure Support Documentation

NEW QUESTION # 29
After creating a new Nutanix User VPC, what is needed to allow traffic to flow out of the Flow gateway VM when using the NATed Path?

• A. Add a default route on the Transit VPC of 0.0.0.0/0 to the Flow Gateway.
• B. Edit the Internal Flow Gateway Security Group on the internal NIC to allow outbound taffic
• C. Add a default route on the Transit VPC of 0.0.0.0/0 to the Flow Gateway.
• D. Add a default route on the Nutanix User VPC of 0.0.0.0/0 to the External Overlay network.
• E. Edit the External Flow Gateway Security Group on the External NIC to allow outbound traffic.

Answer: D

Explanation:
* NATed Path Configuration: When using the NATed Path, it is essential to ensure that traffic can flow out of the Flow gateway VM to external networks.
* Default Route: Adding a default route on the Nutanix User VPC ensures that all outbound traffic is directed to the appropriate network gateway.
* Configuration Steps:
* Navigate to the routing settings of the Nutanix User VPC.
* Add a default route with the destination of 0.0.0.0/0, pointing to the External Overlay network.
* Security Group Settings:
* Ensure that the External Flow Gateway Security Group on the External NIC allows outbound traffic.
* Ensure that the Internal Flow Gateway Security Group on the internal NIC allows outbound traffic (if needed for internal network flows).
* Conclusion: Properly configuring the default route on the Nutanix User VPC enables outbound traffic flow via the NATed Path through the External Overlay network.
References:
* Nutanix Flow Gateway Configuration Guide
* Azure VPC Routing Documentation

NEW QUESTION # 30
An administrator is planning an NC2 deployment in Azure and wants to connect the company's on-premises datacenter to the cloud environment.
What connectivity solution should the administrator use to avoid traffic between the locations flowing over the public internet?

• A. ExpressRoute
• B. VTEP Gateways
• C. Point-to-Site VPN
• D. Site-to-Site VPN

Answer: A

Explanation:
To connect the company's on-premises datacenter to the Azure cloud environment while avoiding traffic over the public internet, the administrator should use Azure ExpressRoute. ExpressRoute provides a private connection to Azure, offering more reliability, faster speeds, and lower latencies compared to typical internet connections. This service ensures that data traffic does not traverse the public internet, enhancing security and performance.References
* Azure ExpressRoute Overview

NEW QUESTION # 31


Which action shouldthe administrator take to troubleshoot the error shown in the exhibit?

• A. Check the PC VNet is peered correctly.
• B. Check the Azure subnet delegation status.
• C. Check the NC2 organization permissions.
• D. Check the Azure AD App registration Client Secret.

Answer: D

Explanation:
To troubleshoot the error shown in the exhibit where Azure credentials are not valid and the creation of the resource group failed, the administrator should:
* Verify that the Azure AD App registration has been correctly configured, especially the Client Secret.
* Ensure that the Client Secret is valid, has not expired, and matches what has been entered in the configuration.
This step is crucial because an invalid or expired Client Secret would prevent the validation of Azure credentials and the creation of necessary resources.
References
* Azure AD App Registration and Secrets Management
* Nutanix Cluster Configuration Documentation

NEW QUESTION # 32
An administrator is planning to expand an NC2 on Azure cluster.
Which statement is true regarding prerequisites for expanding the cluster?

• A. Cluster must be in a Cluster Stopped state.
• B. Cluster must have at least five nodes.
• C. Cluster must have at least three nodes.
• D. Cluster must be in a Cluster Connected state.

Answer: D

Explanation:
* Cluster State Requirement: To expand a cluster, it must be operational and in a connected state to ensure seamless integration of additional nodes.
* Cluster Stopped State: If the cluster is stopped, it cannot perform expansion operations.
* Minimum Nodes Requirement: There is no minimum node count prerequisite for expanding the cluster as long as the cluster is connected.
* Cluster Connected State: Ensuring the cluster is connected verifies that it is operational and can communicate with additional nodes being added.
* Conclusion: The cluster must be in a Cluster Connected state to expand successfully.
References:
* Nutanix Clusters Expansion Guide
* Azure NC2 Configuration Documentation

NEW QUESTION # 33
An administrator is tasked to identify the firewall requirement and submit the port request to the requirement team before the clusters deployment.
Which requirement should the administrator ensure is implement on the corporate firewall?

• A. Allow uni-directional internet Control Message Protocol (ICMP) traffic between the CVMs, femenr and Prism Central.
• B. ICMP can disable but the connectivity should be enabled between the CVMs. Prism Element, and Prism Central.
• C. ICMP and connectivity can be disabled between the CVMs, Prism Element, and Prism Central
• D. Allow bi-directional Internet Control Message Protocol (ICMP) traffic between the CVMs, Prism Element, and Prism Central.

Answer: D

Explanation:
* ICMP Traffic:ICMP is essential for network diagnostics and troubleshooting, such as ping and traceroute, which help in monitoring the connectivity and health of the network.
* Bi-Directional Traffic:Allowing bi-directional ICMP traffic ensures that all nodes (CVMs, Prism Element, and Prism Central) can both send and receive diagnostic messages, which is crucial for maintaining proper communication and network stability.
References:
* Nutanix Networking and Connectivity Requirements
* Corporate Firewall Configuration Guidelines

NEW QUESTION # 34
Which resource is capable of being connected to a private endpoint as it is not displayed on delegated subnets?

• A. User VMs
• B. CVMs
• C. Hosts
• D. Prism Central

Answer: D

Explanation:
* Private Endpoint:Private Endpoints allow secure access to Azure services over a private network connection. They do not typically appear on delegated subnets, which are used for specific Azure services.
* Prism Central Connectivity:Prism Central can be connected to a private endpoint to ensure secure communication without exposing it to the public internet. This setup ensures secure and private management of the Nutanix environment.
References:
* Azure Private Endpoint Documentation
* Nutanix NC2 Deployment and Security Guide

NEW QUESTION # 35
Which interface must be used to deploy NC2?

• A. Prism Central Dashboard
• B. Foundation running in a Cloud Virtual Machine
• C. NC2 Tile within the my.nutanix.com portal
• D. Cloud Provider portal

Answer: C

Explanation:
* my.nutanix.com Portal:This portal provides access to various Nutanix services and features, including the NC2 deployment interface.
* NC2 Tile:The NC2 tile within the portal is specifically designed for deploying and managing Nutanix Cloud Clusters. It provides the necessary tools and settings to initiate and configure NC2 clusters on Azure or other cloud environments.
References:
* Nutanix NC2 Deployment Guide
* my.nutanix.com Portal Documentation

NEW QUESTION # 36
Which address must Azure Directory Service be able to resolve when deploying a new NC2 cluster?

• A. Apikeys.nutanix.com
• B. Gateway-internal-api-cloud.nutanix.com
• C. Download.cloud.nutanix.com
• D. Gateway-external-api.cloud.nutanix.com

Answer: D

Explanation:
* Azure Directory Service Role: Azure Directory Service must be able to resolve specific Nutanix URLs to ensure proper communication and functionality during the deployment of an NC2 cluster.
* Critical Endpoint: The address "Gateway-external-api.cloud.nutanix.com" is critical for establishing external API communications required for the deployment and management of the NC2 cluster.
* DNS Resolution: Proper DNS resolution of this address ensures that the Azure Directory Service can interact with Nutanix services and APIs necessary for cluster operations.
* Verification Process:
* Ensure that DNS settings allow resolution of "Gateway-external-api.cloud.nutanix.com".
* Test connectivity and resolution prior to deployment to avoid issues.
* Importance: Without resolving this address, the deployment process might face connectivity issues, leading to potential deployment failures.
References:
* Nutanix NC2 on Azure Setup Guide
* Azure Active Directory Integration

NEW QUESTION # 37
An administrator is tasked with configuring connectivity between an on-premises datacenter and Azure.
Which two connectivity options are supported? (Choose two.)

• A. ExpressRoute
• B. VPN
• C. Direct Connect
• D. Leased Line

Answer: A,B

Explanation:
For configuring connectivity between an on-premises datacenter and Azure, the two supported options are:
* VPN (Virtual Private Network):Site-to-Site VPN allows you to create a secure connection from your on-premises network to Azure over the public internet using IPsec/IKE protocols.
* ExpressRoute:Provides a private connection between your on-premises infrastructure and Azure, ensuring traffic does not traverse the public internet.
Both options provide secure and reliable connectivity, with ExpressRoute offering enhanced performance and security due to its private connection.References
* Azure VPN Gateway
* Azure ExpressRoute Overview

NEW QUESTION # 38
An administrator has been tasked with ensuring NC2 VMs are able to access Azure and on-premises resources.
The NC2 VM traffic must not traverse the internet.
How can the administrator achieve this?

• A. By using an Interface Endpoint
• B. By using a Site-to-Site VPN
• C. By using ExpressRoute
• D. By using an SSH connection

Answer: C

Explanation:
* Requirement Analysis: The NC2 VMs need to access Azure and on-premises resources without traversing the internet, ensuring secure and direct connectivity.
* Solution Options:
* SSH Connection: Suitable for individual remote access, not for full VM connectivity to Azure and on-premises resources.
* Interface Endpoint: Facilitates private connectivity to specific Azure services, but not comprehensive for all resources.
* ExpressRoute: Provides private, dedicated connectivity between Azure and on-premises environments. This ensures that traffic does not traverse the public internet, meeting the security and performance requirements.
* Site-to-Site VPN: Provides secure connectivity but can involve traversing the internet, which is against the requirements.
* Conclusion: ExpressRoute is the optimal solution as it offers a private connection that does not involve internet traversal, ensuring secure and efficient access to both Azure and on-premises resources.
References:
* Azure ExpressRoute Documentation
* Nutanix Clusters on Azure Networking Guide

NEW QUESTION # 39
A nutanix User VPC named Servers has a subnet named Tier1:
Servers: 10.0.0.0/20
Tier1: 10.0.0.0/25
Tier is using floating IPS to allow inbound traffic to the web servers that are hosted for a payroll system.
The company requires that the Network Security Group allow other Native Azure instances running in subnet AD (10.20.0.0/24) in the Prism Central VNet to be able to contact the web servers.
Which statement is true regarding this company requirement?

• A. Native Azure instances \n the Prism Central vNet will be allowed access by default.
• B. The external NIC of the Flow Gateway Network Security Group needs to allow traffic from
  10.20.0,0/24.
• C. Policy based routing in the Servers VPC must be edited to allow traffic from 10.20.0.0/24.
• D. The internal NIC of the Flow Gateway Network Security Group needs to allow to traffic from 1
  10.20.0.0/24.

Answer: D

Explanation:
* Flow Gateway Network Security Group (NSG):NSGs control the traffic flow to and from network interfaces associated with VMs and other resources. Configuring the NSG correctly is crucial for ensuring that required traffic is allowed.
* Internal NIC Configuration:To allow Native Azure instances in the Prism Central VNet (10.20.0.0/24) to access the web servers in the Tier1 subnet, the internal NIC of the Flow Gateway must be configured to allow traffic from 10.20.0.0/24. This ensures that inbound traffic from these instances is permitted and properly routed to the web servers.
References:
* Azure Network Security Group Documentation
* Nutanix Flow Gateway Configuration Guide

NEW QUESTION # 40
An administrator must ensure that certain NC2 VMs can access Azure resources. The NC2 VM traffic must not traverse the internet.
How would the administrator achieve this?

• A. By creating an Azure Private Endpoint for VMs in a No-NAT network via vWAN.
• B. By creating an Azure Private Endpoint for VMs in a NAT network via vWAN.
• C. By creating an Azure Private Endpoint for VMs in the host-mgmt subnet.
• D. By creating an Azure Private Endpoint for VMs in a Delegated Subnet

Answer: D

Explanation:
* Azure Private Endpoint:A Private Endpoint provides secure connectivity to Azure resources by enabling private access through the Azure backbone network. This ensures that the traffic does not traverse the internet, providing enhanced security and performance.
* Delegated Subnet:By creating an Azure Private Endpoint for VMs in a delegated subnet, the administrator ensures that the VMs can access Azure resources directly and securely without using the public internet.
References:
* Azure Private Endpoint Documentation
* Nutanix NC2 Networking Configuration Guide

NEW QUESTION # 41
......

Most Reliable Nutanix NCP-CI-Azure Training Materials: https://pass4sure.dumptorrent.com/NCP-CI-Azure-braindumps-torrent.html