Free NCP-CI-Azure: Nutanix Certified Professional - Cloud Integration - Azure (NCP-CI-Azure v6.7) Exam Questions and Answers

Which encapsulation protocol does Flow Virtual Networking use to carry overlay subnet traffic between hosts in an NC2 on Azure cluster?

• AA. Geneve
• BB. STT
• CC. GRE
• DD. VXLAN

An NC2 on Azure cluster uses two Flow Gateway VMs that have established BGP sessions with an Azure Route Server in the hub VNet. An ExpressRoute gateway is in the same VNet. On-premises routers do not learn the prefixes of a no-NAT overlay subnet, although the routes appear in the Route Server. What should the administrator do?

• AA. Delegate the RouteServerSubnet to Microsoft.BareMetal/AzureHostedService
• BB. Create an NSG rule that allows TCP port 179 from the on-premises prefixes
• CC. Add a user-defined route to the GatewaySubnet that points to the Flow Gateway external interface
• DD. Enable branch-to-branch on the Azure Route Server

An administrator is designing the Azure network for an NC2 cluster. Company policy forbids public IP addresses on the cluster subnets, but the cluster must still reach the NC2 console and Azure APIs over the internet. Which Azure resource should be associated with the subnets?

• AA. Traffic Manager profile
• BB. Azure Bastion
• CC. Application Gateway
• DD. NAT gateway

An administrator wants the operations team's shared mailbox to receive Nutanix alerts generated by an NC2 on Azure cluster. Which configuration should the administrator use?

• AA. Email notifications in Microsoft Defender for Cloud for the subscription
• BB. Alert Email Configuration in the Prism Central settings
• CC. An action group in Azure Monitor scoped to the cluster resource group
• DD. A diagnostic setting on the NSG of the Cluster Management subnet

A company has a Microsoft Azure Consumption Commitment (MACC) and wants the NC2 software subscription invoiced by Microsoft and counted against that commitment. The company owns no Nutanix licenses. Which approach meets the requirement?

• AA. Purchase Nutanix Cloud Platform licenses through a Nutanix reseller and apply them to the cluster
• BB. Subscribe to the NC2 offer in the Azure Marketplace using the company's Azure subscription
• CC. Start the NC2 free trial and convert it to a paid plan from the My Nutanix portal
• DD. Buy an Azure reservation for the bare-metal nodes and register it in the NC2 console

A security team requires an AOS upgrade on a production NC2 on Azure cluster with no VM downtime. The administrator has access to the NC2 console, the Azure portal, Prism Central and Prism Element. Which method should the administrator use?

• AA. Run an inventory and then a rolling AOS upgrade with Life Cycle Manager from Prism
• BB. Re-image the nodes with Foundation after migrating all VMs to a different cluster
• CC. Apply the update to the bare-metal nodes with Azure Update Manager from the resource group
• DD. Terminate each node in the Azure portal so that NC2 replaces it with a newer AOS version

An NSG on the Cluster Management subnet of an NC2 on Azure cluster has an inbound rule at priority 100 that allows TCP 9440 from 10.20.0.0/16, the address space of the VNet. The administrator must restrict Prism Element access so that only the jump host subnet 10.20.5.0/24 can reach TCP 9440. No other custom rules exist on the NSG. Which change meets the requirement?

• AA. Add a deny rule for TCP 9440 from any source at priority 90 and leave the priority 100 rule unchanged
• BB. Add a deny rule for TCP 9440 from any source at priority 4096 and leave the priority 100 rule unchanged
• CC. Set the priority 100 rule source to 10.20.5.0/24 and delete the default AllowVnetInBound rule
• DD. Set the priority 100 rule source to 10.20.5.0/24 and add a VirtualNetwork deny rule for TCP 9440 at priority 110

An administrator is planning Flow Virtual Networking for an NC2 on Azure cluster and must create the subnet that will host Azure Route Server in the cluster VNet. Which requirement applies to this subnet?

• AA. It must be delegated to Microsoft.BareMetal/AzureHostedService
• BB. It must be named RouteServerSubnet and be /27 or larger
• CC. It can use any name if it is /27 or larger and has no delegation
• DD. It must be named GatewaySubnet and be /27 or larger

An administrator creates an inbound NSG rule that allows TCP 9440 to Prism Element on the Cluster Management subnet of an NC2 on Azure cluster. How does the NSG treat the response traffic for that connection?

• AA. It is allowed automatically because NSGs track connection state
• BB. It is blocked until a matching outbound allow rule is added to the same NSG
• CC. It is evaluated against outbound rules and dropped by the default DenyAllOutBound rule
• DD. It is allowed only if the NSG is also associated with the source subnet

An administrator wants to know how long the current storage capacity of an NC2 on Azure cluster will last at the present growth rate, so that nodes can be added before the cluster fills. Which tool should the administrator use?

• AA. The cluster billing summary in the NC2 console
• BB. Cost recommendations in Azure Advisor for the subscription
• CC. CPU metrics for the bare-metal nodes in Azure Monitor
• DD. Cluster runway in the Prism Central capacity planning view