Limited-Time Offer: Enjoy 50% Savings! Ends in 00h 00m 00s Coupon code: 50OFF
Skip to content

Free Nutanix Certified Professional Network & Security v7.5 NCP-NS Exam Questions

Page: 1 / 11 Total 106 questions

Want more questions? Get Premium Access.

Question 1

An administrator uses Nutanix Flow to secure a three-tier application (Web, App, and Database tiers).

After observing the traffic, they find that:

The Web tier communicates with the App tier over HTTP (port 80)

The App tier communicates with the Database tier over TCP port 1433

The Database tier does not initiate connections

The Web tier receives inbound HTTP traffic from the corporate DMZ on port 8080

No other traffic should be allowed

What should the administrator do to document and then securely apply these flows in Nutanix Flow?

Correct Answer: A. Use Flow Network Visualization to capture observed flows and convert them into microsegmentation security policies.

Question 2

An administrator has a requirement to capture application flow data for a policy in Monitor mode and export those events to an external SIEM for correlation with other logs.

Which two actions are required to achieve this? (Choose two.)

Correct Answer: B. Enable Policy Hit Logging on the monitored policy.; D. Configure a remote syslog destination in Prism Central.

Question 3

Refer to the exhibit.

How should an Application Policy be created whose rules apply only to vNIC1 of VM1?

Correct Answer: A. Create an Entity Group with Cat:SubnetA and Cat:VM1 and then add the Entity Group as Secured Entity to the Application Policy.

Question 4

An administrator recently deployed a new set of virtual machines... 3-tier web application... restricted as follows:

Only application VMs can talk to database VMs on port 3306

Frontend VMs should only communicate with application VMs on port 8080

Which action will correctly create and configure the Security Policies in Nutanix Flow to satisfy this task?

Correct Answer: D. Create categories for each tier then define an Application Policy allowing specific ports between them.

Question 5

When creating a VPC, enabling the Transit VPC toggle changes the role of the VPC.

What does the Transit VPC toggle do?

Correct Answer: B. Creates a hub-and-spoke VPC for routing

Question 6

An administrator is designing a VPC for a three-tier application. The workloads must communicate with the Internet using source NAT and also communicate with on-premises networks 10.50.0.0/16 and 172.20.32.0/20 with no address translation. In the Create VPC dialog, the administrator can associate external subnets and specify destination prefixes.

Which configuration satisfies the requirements?

Correct Answer: C. Associate a NAT external network for 0.0.0.0/0 and a NONAT external network for 10.50.0.0/16, 172.20.32.0/20.

Question 7

An organization plans to apply security controls based on user group membership in Active Directory.

What configuration is required in Prism Central before VDI policies can be used?

Correct Answer: D. Configure category values mapped to AD groups.

Question 8

Which policy mode blocks all traffic that is not explicitly allowed by the policy?

Correct Answer: D. Enforce Mode

Question 9

An administrator is responsible for managing user access to a Nutanix cluster... configure custom user roles...

What is the first step in configuring and managing user roles for a Nutanix cluster?

Correct Answer: A. Create the requisite Authorization Polices from custom or built-in roles.

Question 10

Users have recently reported intermittent connectivity issues and slower-than-usual application performance for a Nutanix cluster to an administrator. The administrator needs to identify the root cause of these issues by analyzing the health of the infrastructure components.

What action should the administrator take first to diagnose the root cause of the problem?

Correct Answer: A. Review cluster health status, checking for any warnings or alerts relevant to the performance issues.