New 2024 Realistic Free Nutanix NCP-CI-Azure Exam Dump Questions and Answer
NCP-CI-Azure Practice Test Engine: Try These 77 Exam Questions
NEW QUESTION # 22
An administrator is tasked with configuring connectivity between an on-premises datacenter and Azure.
Which two connectivity options are supported? (Choose two.)
- A. ExpressRoute
- B. Leased Line
- C. VPN
- D. Direct Connect
Answer: A,C
Explanation:
For configuring connectivity between an on-premises datacenter and Azure, the two supported options are:
* VPN (Virtual Private Network):Site-to-Site VPN allows you to create a secure connection from your on-premises network to Azure over the public internet using IPsec/IKE protocols.
* ExpressRoute:Provides a private connection between your on-premises infrastructure and Azure, ensuring traffic does not traverse the public internet.
Both options provide secure and reliable connectivity, with ExpressRoute offering enhanced performance and security due to its private connection.References
* Azure VPN Gateway
* Azure ExpressRoute Overview
NEW QUESTION # 23
NC2 Azure API calls are failing and MCM no longer shows telemetry or health of the cluster.
Where should the administrator look first?
- A. Check whitelisting of Outbound Communication
- B. Log into Prism and check alerts and notifications
- C. Check VPN/ExpressRoute
- D. SSH into the NC2 Azure CVMs
Answer: A
Explanation:
* Outbound Communication Whitelisting:For NC2 Azure API calls and telemetry data to function correctly, certain outbound communications must be allowed. If these communications are not whitelisted, API calls can fail, and telemetry or health data might not be reported correctly.
* First Check:Given the symptoms (failing API calls and missing telemetry), the first step should be to ensure that all necessary outbound communications are correctly whitelisted. This includes ensuring that endpoints and services required for NC2 operation are accessible.
References:
* Nutanix NC2 Networking Requirements
* Azure Networking and Security Configuration Guide
NEW QUESTION # 24
Which service enables the monitoring of key metrics on various Azure services, including virtual networks, virtual machines, and bare metal hosts for an NC2 cluster?
- A. Azure Network Watcher
- B. Azure Monitor
- C. Azure Service Health
- D. Resource Manager
Answer: B
Explanation:
* Azure Monitor Overview: Azure Monitor is a comprehensive monitoring service that collects, analyzes, and acts on telemetry data from Azure resources.
* Key Metrics Monitoring: Azure Monitor enables the monitoring of various Azure services such as
* virtual networks, virtual machines, and bare metal hosts, providing insights and visibility into their performance and health.
* Comparison of Services:
* Resource Manager: Manages Azure resources but does not provide detailed monitoring capabilities.
* Azure Service Health: Provides personalized alerts and guidance when Azure service issues affect you but is not a comprehensive monitoring solution.
* Azure Network Watcher: Focuses on network performance monitoring and diagnostics but does not cover all resource types.
* Conclusion: Azure Monitor is the most suitable service for monitoring key metrics across a wide range of Azure services.
References:
* Azure Monitor Documentation
* Nutanix NC2 on Azure Monitoring Guide
NEW QUESTION # 25
An administrator is trying to determine which type of DNS server to deploy for a networking infrastructure in Azure.
Which DNS server option would require either VPN or ExpressRoute connectivity?
- A. On-premises
- B. Cloudflare
- C. Azure
- D. Google
Answer: A
Explanation:
* DNS Server Options:
* Cloudflare: A public DNS service that operates over the internet.
* Azure: Azure DNS operates within the Azure cloud and does not require VPN or ExpressRoute for connectivity within Azure.
* On-premises: Requires a secure connection, such as VPN or ExpressRoute, to be accessible from Azure, as it resides outside the Azure cloud.
* Google: Another public DNS service accessible over the internet.
* Connectivity Requirements:
* On-premises DNS: To integrate on-premises DNS with Azure, secure connectivity (VPN or ExpressRoute) is necessary to ensure seamless and secure communication between the on-premises infrastructure and Azure resources.
* Conclusion: An on-premises DNS server would require VPN or ExpressRoute connectivity to be accessible and integrated with the Azure environment.
References:
* Azure DNS Overview
* VPN Gateway Configuration
* ExpressRoute Overview
NEW QUESTION # 26
An administrator has been asked to create a cluster to support new workloads.
What are the maximum number of nodes supported in an NC2 on Azure environment?
- A. 18 nodes
- B. 14 nodes
- C. 28 nodes
- D. 24 nodes
Answer: A
Explanation:
* NC2 Cluster Node Limit: NC2 on Azure has specific limitations regarding the maximum number of nodes supported in a single cluster.
* Maximum Nodes: According to the current NC2 on Azure guidelines, a single cluster can support up to
18 nodes.
* Workload Support: This limitation ensures optimal performance and management of resources within the Azure environment.
* Comparison of Options:
* 14 nodes: Less than the maximum supported.
* 24 nodes and 28 nodes: Exceed the maximum supported, potentially leading to performance and management issues.
* Conclusion: For supporting new workloads, the maximum number of nodes in an NC2 on Azure environment is 18.
References:
* Nutanix Clusters on Azure Technical Specifications
* Azure Virtual Machine Scale Sets Documentation
NEW QUESTION # 27
An administrator has been tasked with scoping an NC2 on Azure deployment. One of the requirements is to ensure that the bare metal instance will support up to 20 TB of storage capacity.
Which bare metal instance should the administrator choose?
- A. AN36
- B. HB176rs
- C. AN36P
- D. ND96asr
Answer: C
Explanation:
* Storage Capacity Requirement: The requirement specifies that the bare metal instance must support up to 20 TB of storage capacity.
* Instance Selection: Among the provided options, the AN36P instance is designed to support higher storage capacities and performance needs.
* AN36P Capabilities: The AN36P instance is optimized for storage-intensive applications and provides the necessary hardware specifications to handle up to 20 TB of storage.
* Comparison with Other Instances:
* ND96asr: Typically optimized for GPU workloads rather than storage.
* AN36: May not meet the 20 TB storage requirement.
* HB176rs: Geared towards high-performance computing rather than large storage capacities.
* Conclusion: Based on the requirements and instance specifications, AN36P is the most suitable choice for supporting up to 20 TB of storage.
References:
* Nutanix NC2 Instance Types
* Azure Virtual Machine Sizes
NEW QUESTION # 28
An administrator has created a new overlay network. Which is intended for the company's user VMs.
The cluster has these characteristics:
* Policy-based Routing is not configured
*Only using external NAT
*DNS Server: 8.8.8.8
After adding a few VMs to the network, the administrator notices that the VMs cannot reach resources outside the network, even by IP address.
What is a likely cause?
- A. The VPC connection is not established.
- B. The local cluster does not have access to the underlying network.
- C. The DNS server is unreachable.
- D. A default route was not configured for the external subnet.
Answer: D
Explanation:
When the administrator notices that the VMs cannot reach resources outside the network, even by IP address, it is likely that a default route was not configured for the external subnet. The default route is essential for directing traffic from the VMs to external networks. Without it, the VMs will not know how to route traffic to external destinations, which leads to connectivity issues.
References
* Azure Virtual Network Documentation
* Nutanix Flow Networking Best Practices
NEW QUESTION # 29
When configuring permissions for an Azure subscription, which role is required to delegate minimum permissions for the Azure AD App registration?
- A. Azure Contributor role
- B. Azure Reader role
- C. Azure Custom role defined by Nutanix
- D. Azure user Access Administrator role
Answer: D
Explanation:
* Azure AD App Registration: When setting up an application registration in Azure AD, specific permissions are required to delegate access.
* User Access Administrator Role: This role has the necessary permissions to manage user access to
* Azure resources, including delegating permissions for app registrations.
* Comparison of Roles:
* Azure Reader Role: Grants read-only access, insufficient for managing app registrations.
* Azure Contributor Role: Allows creation and management of resources but does not include permissions to manage access.
* Azure Custom Role: While it can be defined to meet specific needs, the User Access Administrator role is predefined to handle access delegation.
* Conclusion: The Azure User Access Administrator role is required to delegate minimum permissions for Azure AD App registration.
References:
* Azure Role-Based Access Control Documentation
* Azure AD App Registration Guide
NEW QUESTION # 30
Which console must be used to deploy a Nutanix cluster on Azure?
- A. Azure Console
- B. Prism Central Console
- C. Prism Element Console
- D. NC2 Console
Answer: D
Explanation:
* NC2 Console:The NC2 console is specifically designed for deploying and managing Nutanix clusters on Azure. It provides the necessary tools and interface to configure, monitor, and manage the NC2 clusters effectively.
* Cluster Deployment:Using the NC2 console ensures that all configurations and integrations with Azure are correctly handled, providing a seamless deployment experience.
References:
* Nutanix NC2 Deployment Guide
* Nutanix Console Documentation
NEW QUESTION # 31
An administrator is tasked with adding an Azure account to the NC2 console. A requirement is to configure an Azure user that can open, close or extend a support tunnel for the Nutanix Support team.
Which permission must be assigned to the user?
- A. Account Administrator
- B. Cluster Administrator
- C. Cluster Auditor
- D. Customer Auditor
Answer: A
Explanation:
* Account Administrator Role:This role grants the necessary permissions for managing the Azure account, including the ability to open, close, or extend a support tunnel. These capabilities are crucial for the Nutanix Support team to perform diagnostics and troubleshooting efficiently.
* Permissions Included:The Account Administrator role encompasses broader account management rights, ensuring that the user can interact with various support and operational aspects of the NC2 environment within Azure.
References:
* Azure Role-Based Access Control (RBAC) Documentation
* Nutanix NC2 Support Tunnel Requirements
NEW QUESTION # 32
An administrator is deploying an NC2 cluster in Azure and observes on NC2 console that nodes will not progress and continue in a Booting state.
What is the most likely cause for the node not continuing to deploy?
- A. An Azure Support case must first be submitted for allowlisting the Azure subscription.
- B. The Azure account does not have an active subscription.
- C. A private DNS server is being used that is not reachable.
- D. The subscription has not been validated to be allowlisted by Microsoft.
Answer: D
Explanation:
* Azure Subscription Validation: When deploying an NC2 cluster, the Azure subscription must be validated and allowlisted by Microsoft. This is a crucial step to ensure that the necessary permissions and configurations are set up for the deployment.
* Booting State Issue: If the nodes are stuck in the Booting state, it often indicates that the subscription has not been properly validated and allowlisted. This prevents the deployment from progressing as required resources and permissions are not fully accessible.
* Checking Allowlisting Status: Administrators should verify that their subscription has been allowlisted by contacting Azure support or checking the status through the Azure portal.
* Resolution: Once the subscription is validated and allowlisted by Microsoft, the deployment should proceed without the nodes getting stuck in the Booting state.
References:
* Nutanix NC2 on Azure Documentation
* Azure Subscription Management
NEW QUESTION # 33
Which entity should be contacted for cloud hardware support (EC2 instances, VPC, etc) related to NC2?
- A. Nutanix
- B. Partner
- C. Public Cloud Vendor
- D. Internal IT Operations team
Answer: C
Explanation:
* Cloud Hardware Support: For issues related to cloud hardware, such as EC2 instances or VPC configurations, the responsible entity is typically the public cloud vendor.
* Nutanix Responsibility: Nutanix manages the software layer and integration aspects of the NC2 service, but the underlying hardware support is managed by the cloud provider (e.g., AWS, Azure).
* Support Process:
* Public Cloud Vendor: Contact the public cloud vendor for issues directly related to the hardware, as they own and manage the physical infrastructure.
* Nutanix: For software and configuration issues specific to the NC2 service, contact Nutanix support.
* Conclusion: For cloud hardware-related support, the appropriate contact is the public cloud vendor.
References:
* Nutanix Support Guide
* Azure Support Documentation
NEW QUESTION # 34
The cluster has the following configuration:
A Transit VPC exists as Default, but is additionally configured with a overlay-external-subnet-nonat overlay subnet The ERP for the Transit VPC is 10.1.1.0/25 A User VPC exists named User_VPC_Prod The ERP for the User VPC is 10.1.1.0/24 Outbound and inbound routes have been configured A User VM NO-NAT subnet has been configured in the User VPC The administrator has successfully created a VM and added the NIC associated with the NO-NAT subnet, but is not able to communication with other resources.
Which option will resolve this issue?
- A. The ERP in the User VPC must be from a different CIDR range than the ERP in the transit VPC.
- B. Verify that the route table associated with the User VPC has appropriate routes to the Transit VPC.
- C. Ensure that the security groups associated with the VM allow traffic to and from the desired resources.
- D. Check that the network ACLs for the NO-NAT subnet are not blocking the necessary traffic.
Answer: A
Explanation:
In this scenario, the issue arises from overlapping IP address ranges between the Transit VPC and the User VPC. Here's a detailed breakdown:
* Understanding ERPs (Elastic Routing Prefixes):
* The ERP for the Transit VPC is 10.1.1.0/25, which covers IP addresses from 10.1.1.0 to
10.1.1.127.
* The ERP for the User VPC is 10.1.1.0/24, which covers IP addresses from 10.1.1.0 to 10.1.1.255.
* IP Address Overlap:
* Since 10.1.1.0/25 is a subset of 10.1.1.0/24, there is a significant overlap in the IP address ranges of these two ERPs.
* This overlap can cause routing issues because the same IP address range is being used in both VPCs, leading to ambiguity in routing and communication.
* Communication Issue:
* When a VM in the User VPC tries to communicate with other resources, the network cannot accurately determine the correct route due to the overlapping IP address ranges.
* This overlap prevents proper routing and results in the VM being unable to communicate with other resources as intended.
* Resolution:
* To resolve this issue, the ERPs must be in different CIDR ranges. This means the IP address ranges for the Transit VPC and the User VPC should not overlap.
* For example, if the Transit VPC uses 10.1.1.0/25, the User VPC could use a different range such as 10.1.2.0/24 or any other range that does not overlap with 10.1.1.0/25.
By ensuring that the ERPs are in different CIDR ranges, the network can properly route traffic between the VPCs without any conflicts or ambiguities, thereby enabling the VM in the User VPC to communicate with other resources effectively.
NEW QUESTION # 35
An administrator manager a virtual desktop environment running on an NC2 cluster in Azure.
The desktop running on the cluster need to contact resources on-premises through the ExpressRoute that has been setup. The save on bandwidth from the on-premises environment to Azure, the administrator wants the desktops to access the internet through an Azure NAT Gateway.
Which co0nfigruation will best accomplish this task?
- A. Assign all desktops Floating IPs and use an external-NAT network in the transit VPC. Set the default route of 0.0.0.0/0 for the Nutanix User VPC pointing to the external-NAT network.
- B. Set the default route of 0.0.0.0/0 for the Nutanix User VPC pointing to the external-NAT network. Set a route to the on-premises subnet for the Nutanix User VPC pointing to the external-NAT network.
- C. Set the default route of 0.0.0.0/0 for the Nutanix User VPC pointing to the external-No-NAT network.
- D. Set the default route of 0.0.0.0/0 for the Nutanix User VPC pointing to the external-NAT network. Set a route to the on-premises subnet for the Nutanix User VPC pointing to the external-No-NAT network.
Answer: D
Explanation:
* Default Route for Internet Traffic:By setting the default route of 0.0.0.0/0 for the Nutanix User VPC pointing to the external-NAT network, all internet-bound traffic from the desktops will be routed through the Azure NAT Gateway, conserving bandwidth on the ExpressRoute connection.
* On-Premises Route:Setting a specific route to the on-premises subnet for the Nutanix User VPC pointing to the external-No-NAT network ensures that traffic destined for on-premises resources bypasses the NAT Gateway and utilizes the ExpressRoute connection, optimizing the use of network paths.
References:
* Azure NAT Gateway Documentation
* Nutanix NC2 Networking Configuration Guide
NEW QUESTION # 36
An administrator is planning on building the network prior to deploying a Nutanix cluster into Azure.
Which two components require their own vNets for NC2 in Azure? (Choose two.)
- A. Virtual Network Gateway
- B. Prism Central
- C. Azure Load Balancer
- D. Bare-metal instance
Answer: B,D
Explanation:
* NC2 on Azure Deployment: Deploying Nutanix clusters in Azure involves configuring various components, each needing appropriate network isolation and configuration.
* Components and vNets:
* Bare-metal instance: Requires its own vNet to ensure proper network isolation and performance.
* Prism Central: Needs a dedicated vNet to manage and monitor the Nutanix environment, ensuring it has the required network access and isolation.
* Azure Load Balancer: Does not require its own vNet but needs to be associated with the appropriate vNet where services are deployed.
* Virtual Network Gateway: Is used for VPN connections but does not necessitate a separate vNet; it operates within an existing vNet.
* Network Isolation: Providing separate vNets for Bare-metal instances and Prism Central ensures optimal performance and management capabilities.
* Conclusion: Both Bare-metal instances and Prism Central require their own vNets in the NC2 on Azure deployment.
References:
* Nutanix Clusters on Azure Deployment Guide
* Azure Virtual Network Documentation
NEW QUESTION # 37
An administrator needs to configure the correct outbound requirement for a successful cluster deployment in Azure.
Which destination must have an outbound rule to meet this requirement?
- A. Https://downloads.cloud.nutanix.com/*
- B. https://nutanix.dev/*
- C. Https://support.nutanix.com/*
- D. Https://portal.nutanix.com/*
Answer: A
Explanation:
* Outbound Rule Necessity: For successful cluster deployment, certain outbound connections must be allowed to ensure proper download and configuration of resources.
* Critical Destination: "Https://downloads.cloud.nutanix.com/*" is a critical endpoint from which the Nutanix software and updates are downloaded during the cluster deployment process.
* Functionality: Ensuring an outbound rule for this destination allows the deployment to fetch necessary files and updates, enabling smooth cluster setup and operation.
* Other Destinations:
* Https://portal.nutanix.com/: Used for accessing the Nutanix portal, not directly related to deployment downloads.
* Https://support.nutanix.com/: Used for support-related tasks, not for deployment-specific downloads.
* https://nutanix.dev/: Related to development and API documentation, not necessary for initial deployment.
* Conclusion: Outbound connectivity to "Https://downloads.cloud.nutanix.com/*" is essential for downloading deployment resources.
References:
* Nutanix NC2 on Azure Network Configuration Guide
* Azure Network Security Documentation
NEW QUESTION # 38
An administrator has noticed the company's NC2 free trial expired 60 days ago.
Whatshouldthe administrator do to continue using all of the NC2 features on existing clusters?
- A. Contact the cloud vendor.
- B. Nothing. The clusters will have full feature support.
- C. Contact Nutanix support to redeploy the cluster.
- D. Switch to a paid subscription plan.
Answer: D
Explanation:
* Free Trial Expiration:Once the NC2 free trial period expires, the administrator needs to switch to a paid subscription plan to continue using all the features and functionalities provided by Nutanix NC2.
* Paid Subscription Benefits:Transitioning to a paid subscription ensures uninterrupted access to NC2 features, support, and updates, maintaining the operational capabilities of the existing clusters.
References:
* Nutanix Subscription and Billing Documentation
* Nutanix NC2 Support and Subscription Guide
NEW QUESTION # 39
When selecting the NC2 subscription plan from the Nutanix billing portal, which options are available?
- A. Pay-as-you-Go (PayG), Cloud Provider Credits, Bring you own License (BYOL)
- B. Reserved instances, Bring your own License (BYOL)
- C. Pay-as-you-Go (payG), Bring your own License (BYOL)
- D. Reserved instances, Cloud Provider Credits, Bring your own License (BYOL)
Answer: C
Explanation:
When selecting the NC2 subscription plan from the Nutanix billing portal, the available options are:
* Pay-as-you-Go (PayG):Allows you to pay for the services as you use them, providing flexibility and avoiding upfront costs.
* Bring your own License (BYOL):Enables you to use your existing Nutanix licenses within the cloud environment, offering cost savings if you already have licenses.
These options provide flexibility in how you can manage and pay for your Nutanix cloud clusters.References
* Nutanix Cloud Clusters Pricing and Plans
NEW QUESTION # 40
What action is performed in Azure when an instance is reported as being in a terminated state, but NC2 expects it to be in a running state?
- A. NC2 automatically reconnects with the instance.
- B. NC2 restarts the AHV host.
- C. NC2 alerts the administrator that a manual replacement is required.
- D. NC2 condemns the host and triggers replacement of the host.
Answer: D
Explanation:
* Instance Termination Detection:When an instance in Azure is reported as being in a terminated state but NC2 expects it to be running, the system will automatically take corrective actions.
* Host Condemnation and Replacement:NC2 will condemn the host, marking it as unusable, and will then trigger the replacement process to ensure that the cluster maintains its required capacity and performance levels. This automatic handling ensures minimal disruption to the workloads running on the cluster.
References:
* Nutanix NC2 Automated Management Features
* Azure Instance State Documentation
NEW QUESTION # 41
Native Azure VMs exist in a subnet (10.20.80.0/20) in the Prism Central VNet that need access to the workload running on the Nutanix User.
What needs to be modified to allow access from the native Azure VMs to the workloads running in the Nutanix User VPC?
- A. Change the ERP value to the the subnet range of the native Azure VMs (10.20.80.0/20) on the Transit VPC and the Nutanix User VPC.
- B. Adjust the Inbound Network Security Group on the Flow Gateway VM Internal NIC to allow traffic
102030,0/20. - C. Remove the ERP value on the transit VPC and Nutanix User VPC.
- D. Adjust the Inbound Network Security Group on the Flow Gateway VM External NIC to allow traffic
102030.0/20.
Answer: B
Explanation:
To allow access from the native Azure VMs to the workloads running in the Nutanix User VPC, the administrator needs to:
* Adjust the Inbound Network Security Group (NSG) on the Flow Gateway VM's Internal NIC.
* Specifically, allow traffic from the subnet range of the native Azure VMs (10.20.80.0/20) in the Inbound rules of the NSG associated with the Internal NIC of the Flow Gateway VM.
This configuration change permits the desired network traffic, ensuring that the native Azure VMs can communicate with the workloads in the Nutanix User VPC.References
* Azure Network Security Groups Overview
* Nutanix Networking and Security Best Practices
NEW QUESTION # 42
......
Guaranteed Success in Nutanix Certified Professional (NCP) NCP-CI-Azure Exam Dumps: https://www.dumpstests.com/NCP-CI-Azure-latest-test-dumps.html
Nutanix NCP-CI-Azure Daily Practice Exam New 2024 Updated 77 Questions: https://drive.google.com/open?id=1UBe5LU5w-32g__JjHUVqMgDjzxAJRk_K