Pass NCP-CI-Azure Exam in First Attempt Guaranteed 2026 Dumps!
NCP-CI-Azure Dumps Full Questions - Exam Study Guide
Nutanix NCP-CI-Azure Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 4 |
|
NEW QUESTION # 43
An administrator is trying to determine which type of DNS server to deploy for a networking infrastructure in Azure.
Which DNS server option would require either VPN or ExpressRoute connectivity?
- A. Azure
- B. On-premises
- C. Google
- D. Cloudflare
Answer: B
Explanation:
* DNS Server Options:
* Cloudflare: A public DNS service that operates over the internet.
* Azure: Azure DNS operates within the Azure cloud and does not require VPN or ExpressRoute for connectivity within Azure.
* On-premises: Requires a secure connection, such as VPN or ExpressRoute, to be accessible from Azure, as it resides outside the Azure cloud.
* Google: Another public DNS service accessible over the internet.
* Connectivity Requirements:
* On-premises DNS: To integrate on-premises DNS with Azure, secure connectivity (VPN or ExpressRoute) is necessary to ensure seamless and secure communication between the on-premises infrastructure and Azure resources.
* Conclusion: An on-premises DNS server would require VPN or ExpressRoute connectivity to be accessible and integrated with the Azure environment.
References:
* Azure DNS Overview
* VPN Gateway Configuration
* ExpressRoute Overview
NEW QUESTION # 44
An administrator has been tasked with scoping an NC2 on Azure deployment. One of the requirements is to ensure that the bare metal instance will support up to 20 TB of storage capacity.
Which bare metal instance should the administrator choose?
- A. AN36
- B. ND96asr
- C. AN36P
- D. HB176rs
Answer: C
Explanation:
Storage Capacity Requirement: The requirement specifies that the bare metal instance must support up to 20 TB of storage capacity.
Instance Selection: Among the provided options, the AN36P instance is designed to support higher storage capacities and performance needs.
AN36P Capabilities: The AN36P instance is optimized for storage-intensive applications and provides the necessary hardware specifications to handle up to 20 TB of storage.
Comparison with Other Instances:
ND96asr: Typically optimized for GPU workloads rather than storage.
AN36: May not meet the 20 TB storage requirement.
HB176rs: Geared towards high-performance computing rather than large storage capacities.
Conclusion: Based on the requirements and instance specifications, AN36P is the most suitable choice for supporting up to 20 TB of storage.
Reference:
Nutanix NC2 Instance Types
Azure Virtual Machine Sizes
NEW QUESTION # 45
After creating a new Nutanix User VPC, what is needed to allow traffic to flow out of the Flow gateway VM when using the NATed Path?
- A. Edit the Internal Flow Gateway Security Group on the internal NIC to allow outbound taffic
- B. Add a default route on the Nutanix User VPC of 0.0.0.0/0 to the External Overlay network.
- C. Add a default route on the Transit VPC of 0.0.0.0/0 to the Flow Gateway.
- D. Edit the External Flow Gateway Security Group on the External NIC to allow outbound traffic.
- E. Add a default route on the Transit VPC of 0.0.0.0/0 to the Flow Gateway.
Answer: B
NEW QUESTION # 46
An administrator needs to open the following ports in the firewall between an on-premises cluster and azure for disaster recovery:
* 22
* 2009
* 2020
* 2049
* 3260
* 9440
Which rile-type should be created on the firewall for communication to be appropriately established?
- A. Bi-directional (TCP)
- B. Outbound (ICMP)
- C. Outbound (TCP)
- D. Bi-directional (ICMP)
Answer: A
Explanation:
Port Requirements: The specified ports (22, 2009, 2020, 2049, 3260, 9440) are commonly used for various services and require TCP communication.
Port 22: SSH
Port 2009: Used for Nutanix internal communication
Port 2020: Nutanix services
Port 2049: NFS
Port 3260: iSCSI
Port 9440: Nutanix Prism management
Communication Type: To ensure proper disaster recovery setup, bi-directional communication is needed to allow traffic to flow both from on-premises to Azure and vice versa.
TCP Protocol: These ports use the TCP protocol, which provides reliable communication between devices.
Conclusion: Creating a bi-directional (TCP) rule on the firewall allows the necessary communication for disaster recovery processes.
Reference:
Nutanix Networking and Security Documentation
Azure Networking Documentation
NEW QUESTION # 47
An NC2 on Azure environment requires that outside networks are allowed to be routed to a Nutanix User VPC from outside the cluster when using a No-Nat path.
Which configuration will satisfy this requirement?
- A. Externally routable IP address which shares the same address space of the Nutanix User VPC
- B. Internally routable network address which shares the sameaddress space of the Nutanix setVPC
- C. Internally routable network address which shares the same address space of the Native Azure Subnet
- D. Externally routable IP address which shares the same address space of the Native Azure Subnet
Answer: A
Explanation:
* No-NAT Path Requirement:For a No-NAT path to function, the external networks must be able to route traffic directly to the Nutanix User VPC without translation.
* Externally Routable IP Address:The externally routable IP address ensures that traffic from outside networks can reach the Nutanix User VPC.
* Address Space Compatibility:Sharing the same address space as the Nutanix User VPC allows for seamless integration and communication between the external network and the User VPC.
References:
* Azure Virtual Network Documentation on IP Addressing
* Nutanix NC2 Configuration Guide on No-NAT Networking
NEW QUESTION # 48
An administrator has recently deployed an NC2 on azure cluster, but does not have connectivity back to the on-premises environment. The administrator would like to start working on configuring the new cluster.
What is the best way to get access to Prism Central?
- A. Deploy a Jump Host in an external VNet and peer the VNets for communication between Prism Central VNet and the Jump Host VNet.
- B. Deploy a Jump Host Instance In the Prism Central VNet inside a delegated subnet
- C. Deploy a Jump Host instance in the same subnet as the bare-metal.
- D. Deploy a Jump Host in an external VNet and peer the VNets for communication between bare-metal VNet and the Jump Host VNet.
Answer: A
Explanation:
Jump Host Deployment: A Jump Host provides a secure method to access the NC2 environment when direct connectivity is unavailable. Deploying it in an external VNet allows flexibility in managing network access and security.
VNet Peering: By peering the external VNet (where the Jump Host is deployed) with the VNet containing Prism Central, the administrator can establish a communication pathway. This setup enables secure and controlled access to Prism Central from the Jump Host.
Reference:
Azure VNet Peering Documentation
Nutanix NC2 Configuration and Access Guide
NEW QUESTION # 49
When configuring permissions for an Azure subscription, which role is required to delegate minimum permissions for the Azure AD App registration?
- A. Azure user Access Administrator role
- B. Azure Contributor role
- C. Azure Reader role
- D. Azure Custom role defined by Nutanix
Answer: A
Explanation:
Azure AD App Registration: When setting up an application registration in Azure AD, specific permissions are required to delegate access.
User Access Administrator Role: This role has the necessary permissions to manage user access to Azure resources, including delegating permissions for app registrations.
Comparison of Roles:
Azure Reader Role: Grants read-only access, insufficient for managing app registrations.
Azure Contributor Role: Allows creation and management of resources but does not include permissions to manage access.
Azure Custom Role: While it can be defined to meet specific needs, the User Access Administrator role is predefined to handle access delegation.
Conclusion: The Azure User Access Administrator role is required to delegate minimum permissions for Azure AD App registration.
Reference:
Azure Role-Based Access Control Documentation
Azure AD App Registration Guide
NEW QUESTION # 50
A company wants to start using Nutanix Cloud Clusters (NC2) in Azure. The company has large spend commitments as part of a Microsoft Azure Consumption Commitment (MACC) totaling $15 million.
What approach should the administrator take to ensure the Nutanix licensing costs apply to the MACC?
- A. Purchase Nutanix licenses directly from Nutanix and contact Microsoft support.
- B. Request a trial directly from Nutanix.
- C. Leverage existing Nutanix licenses
- D. Purchase Nutanix licenses through the Azure Marketplace.
Answer: D
Explanation:
* Microsoft Azure Consumption Commitment (MACC):To ensure that the Nutanix licensing costs apply to the MACC, the company needs to make purchases that are recognized by Azure's billing system.
* Azure Marketplace Purchases:By purchasing Nutanix licenses through the Azure Marketplace, the costs will be included in the Azure billing and count towards the MACC, thereby leveraging the committed spend.
References:
* Azure Marketplace Documentation
* Nutanix Licensing Guide
NEW QUESTION # 51
A company has just adopted Nutanix as their technology of choice and is preparing to deploy Nutanix Cloud Clusters (NC@) Which step must be taken first to gain access to the NC2 console?
- A. Open a support case with Nutanix.
- B. Create a My Nutanix account.
- C. Start a free trial via Billing Portal.
- D. Navigate to doud.nutanix.com.
Answer: B
Explanation:
* Initial Access: To gain access to the NC2 console, users need to create an account on the Nutanix platform.
* My Nutanix Account: Creating a My Nutanix account provides access to the Nutanix console, support, and other resources.
* Free Trial and Billing Portal: Starting a free trial or accessing the billing portal can be subsequent steps but require an initial account.
* Support Case: Opening a support case is not necessary for initial access but might be needed for specific issues later.
* Conclusion: Creating a My Nutanix account is the first step to accessing the NC2 console and other Nutanix services.
References:
* Nutanix Account Creation Guide
* Getting Started with Nutanix NC2
NEW QUESTION # 52
An administrator deploys an NC2 cluster in Azure and uses 10.100.0.0/16 for one of the VNets.
The cluster is configured as follows:
* 8 nodes
* Prism Central Deployed
* Files Deployed
Following the deployment, the administrator experiences network connectivity issues.
Which reason explains the connectivity issues?
- A. 10.100.0.0/16 range is reserved for internal cluster usage.
- B. The W.100.0.0/16 range contains too many IP addresses for an NC2 cluster.
- C. The 10.100.0.0/16 range is reserved by IANA.
- D. The 10.100.0.0/16 range is not a valid CIDR range.
Answer: A
Explanation:
* Network Configuration: Using a specific IP range for a VNet can cause conflicts if that range is reserved or already in use by the cluster's internal operations.
* Internal Usage: In NC2, certain IP ranges are reserved for internal cluster functions and should not be used for VNets to avoid IP conflicts and connectivity issues.
* Impact: If the 10.100.0.0/16 range is reserved for internal usage, using it for a VNet would lead to IP conflicts, causing network connectivity issues.
* Verification: It's important to verify the reserved IP ranges in the NC2 documentation before assigning them to VNets.
* Conclusion: The connectivity issues are likely due to using the 10.100.0.0/16 range, which is reserved for internal cluster usage.
References:
* Nutanix Networking Guidelines
* Azure Virtual Network Documentation
NEW QUESTION # 53
A new subnet needs to be created within Flow Virtual Networking to accommodate a new type of workload in the company's NC2 Azure instance.
Which type of network will satisfy this task?
- A. VPC
- B. Underlay
- C. Overlay
- D. VNET
Answer: C
Explanation:
* Flow Virtual Networking: Nutanix Flow Virtual Networking allows for the creation of overlay networks to segment and manage network traffic.
* Network Types:
* Underlay: Refers to the physical network infrastructure.
* Overlay: Logical network built on top of the physical infrastructure, providing flexibility for creating isolated subnets and accommodating different workloads.
* VPC: Virtual Private Cloud, a network within a public cloud provider.
* VNET: Azure-specific virtual network.
* Requirement: Creating a subnet for new workloads within Flow Virtual Networking suggests using an overlay network for logical separation and management.
* Conclusion: An overlay network within Flow Virtual Networking will satisfy the task of accommodating a new type of workload in the NC2 Azure instance.
References:
* Nutanix Flow Networking Guide
* Azure Virtual Network Documentation
NEW QUESTION # 54
An administrator needs to ensure API calls are executing successfully from NC2 to manage Azure resources.
Which cluster outbound to Azure connections are required to satisfy this task?
- A. azure-support.nutan/x.com
- B. apikeys.nutanix.com
- C. portal.azure.com
- D. managementazure.com
Answer: B
Explanation:
API Key Management: For NC2 to manage Azure resources successfully, it needs to authenticate and authorize API calls. This is typically handled through API keys, which are managed via specific endpoints.
Required Connection: The endpoint apikeys.nutanix.com is crucial for managing these API keys. Ensuring connectivity to this endpoint allows NC2 to verify and utilize the API keys needed for interacting with Azure services.
Reference:
Nutanix NC2 API Configuration Guide
Azure API Management Documentation
NEW QUESTION # 55
Which wen interface should be used to most efficiently terminate a Nutanix cloud cluster?
- A. Prism Element Console
- B. NC2 Console
- C. AWS Console
- D. Prism Central Console
Answer: B
Explanation:
To efficiently terminate a Nutanix cloud cluster, the NC2 (Nutanix Cloud Clusters) Console should be used.
The NC2 Console provides the necessary tools and interface specifically designed for managing and terminating Nutanix clusters within cloud environments, ensuring a seamless and efficient process.References
* Nutanix Cloud Clusters Documentation
NEW QUESTION # 56
Which statement best describes south bound traffic to a Nutanix User VPC originating outside the BC2 cluster when using a no-NAT (routed path) having two or more Flow Gateways (FGW)?
- A. A BGP gateway is deployed as Azure native VMs in the Prism Central VNet. The BGP gateway advertises externally routable IP addresses to the Prism Central, with each active FGW external IP address as the next hop.
- B. A BGP gateway runs on the CVM of the bare-metal hosts. The BGP gateway advertises externally routable IP addresses to the Azure Route Server, with each active FGW external IP address the next hop.
- C. A BGP gateway runs inside of Prism Central. The BGP gateway advertises externally mutable IP addresses to the Azure Route Server, with each active FGW external IP address as the next hop.
- D. A BGP gateway is deployed as Azure native VMs in the Prism Central VNet. The BGP gateway advertises externally routable IP addresses to the Azure Route Server, with each active FGW external IP address as the next hop.
Answer: D
Explanation:
BGP Gateway Deployment: The BGP gateway is deployed as Azure native VMs within the Prism Central VNet. This deployment ensures seamless integration with Azure's networking infrastructure.
Route Advertisement: The BGP gateway advertises the externally routable IP addresses to the Azure Route Server. This setup allows for dynamic routing and efficient traffic management.
Flow Gateways (FGW) as Next Hops: Each active Flow Gateway's external IP address is used as the next hop. This configuration ensures that southbound traffic is correctly routed to the appropriate Flow Gateway, providing efficient and reliable connectivity.
Reference:
Nutanix NC2 Networking Guide
Azure Route Server and BGP Documentation
NEW QUESTION # 57
After creating a new Nutanix User VPC, what is needed to allow traffic to flow out of the Flow gateway VM when using the NATed Path?
- A. Add a default route on the Nutanix User VPC of 0.0.0.0/0 to the External Overlay network.
- B. Add a default route on the Transit VPC of 0.0.0.0/0 to the Flow Gateway.
- C. Edit the External Flow Gateway Security Group on the External NIC to allow outbound traffic.
- D. Add a default route on the Transit VPC of 0.0.0.0/0 to the Flow Gateway.
Answer: A
NEW QUESTION # 58
An administrator is tasked with creating a new subnet for a group of VMs that require inbound internet access. Internal private addresses must be obscured to servers on the public internet.
Which network is best suited for satisfying this requirement?
- A. Layer 2 Stretch network
- B. NAT based network
- C. Bastion based network
- D. No-NAT based network
Answer: B
Explanation:
NAT Based Network: A NAT-based network is designed to provide inbound and outbound internet access while obscuring the internal private addresses. This setup uses Network Address Translation (NAT) to map internal IP addresses to a public IP address, ensuring that internal addresses are not exposed to the public internet.
Security and Connectivity: NAT provides a layer of security by hiding internal IP addresses and allowing controlled access to external resources. This configuration is well-suited for VMs that need to communicate with servers on the public internet while maintaining the privacy of their internal network addresses.
Reference:
Azure Virtual Network NAT Documentation
Nutanix Networking and Security Configuration Guide
NEW QUESTION # 59
What is the purpose of an organization in the NC2 console?
- A. To Link with a Public Cloud account
- B. To link with NC2 subscription plans
- C. To map the on-premises Prism Central environment
- D. To segregate clusters based on specific requirements
Answer: D
NEW QUESTION # 60
Which entity should be contacted for cloud hardware support (EC2 instances, VPC, etc) related to NC2?
- A. Internal IT Operations team
- B. Public Cloud Vendor
- C. Nutanix
- D. Partner
Answer: B
Explanation:
* Cloud Hardware Support: For issues related to cloud hardware, such as EC2 instances or VPC configurations, the responsible entity is typically the public cloud vendor.
* Nutanix Responsibility: Nutanix manages the software layer and integration aspects of the NC2 service, but the underlying hardware support is managed by the cloud provider (e.g., AWS, Azure).
* Support Process:
* Public Cloud Vendor: Contact the public cloud vendor for issues directly related to the hardware, as they own and manage the physical infrastructure.
* Nutanix: For software and configuration issues specific to the NC2 service, contact Nutanix support.
* Conclusion: For cloud hardware-related support, the appropriate contact is the public cloud vendor.
References:
* Nutanix Support Guide
* Azure Support Documentation
NEW QUESTION # 61
An on-premises network has been extended to azure with a VPN/ExpressRoute. The routing and peering of VNets is setup and has been confirmed to be correct.
Which statement best describes the state of the traffic flow between the on-prem CVMs and the NC2 CVMs in Azure?
- A. The Network Security Group of the Flow Gateway VM on the Internal NICs will need to be edited to enable the traffic flow.
- B. A ticket will need to be put in with Microsoft support to open the subnet ranges from on-premises.
- C. The Network Security Group of the Flow Gateway VM on the Externa! NICs will need to be edited to enable the traffic flow.
- D. Traffic will flow directly to the NC2 CVMs. Nothing will block the path by default.
Answer: A
Explanation:
* Network Security Groups (NSGs):NSGs control the inbound and outbound traffic to and from Azure resources. For traffic between on-premises CVMs and NC2 CVMs in Azure, the NSGs associated with the Flow Gateway VM's Internal NICs must be configured to allow the required traffic.
* Editing NSGs:To enable traffic flow, specific rules must be added to the NSGs to permit traffic from the on-premises network to the NC2 environment. Thisincludes specifying the appropriate source and destination IP ranges and the necessary ports and protocols.
References:
* Azure Network Security Groups Documentation
* Nutanix NC2 Networking Configuration Guide
NEW QUESTION # 62
An administrator is deploying an NC2 cluster in Azure and observes on NC2 console that nodes will not progress and continue in a Booting state.
What is the most likely cause for the node not continuing to deploy?
- A. A private DNS server is being used that is not reachable.
- B. The Azure account does not have an active subscription.
- C. The subscription has not been validated to be allowlisted by Microsoft.
- D. An Azure Support case must first be submitted for allowlisting the Azure subscription.
Answer: C
Explanation:
Azure Subscription Validation: When deploying an NC2 cluster, the Azure subscription must be validated and allowlisted by Microsoft. This is a crucial step to ensure that the necessary permissions and configurations are set up for the deployment.
Booting State Issue: If the nodes are stuck in the Booting state, it often indicates that the subscription has not been properly validated and allowlisted. This prevents the deployment from progressing as required resources and permissions are not fully accessible.
Checking Allowlisting Status: Administrators should verify that their subscription has been allowlisted by contacting Azure support or checking the status through the Azure portal.
Resolution: Once the subscription is validated and allowlisted by Microsoft, the deployment should proceed without the nodes getting stuck in the Booting state.
Reference:
Nutanix NC2 on Azure Documentation
Azure Subscription Management
NEW QUESTION # 63
......
Nutanix Certified Professional (NCP) Free Certification Exam Material from PracticeMaterial with 83 Questions: https://testking.practicematerial.com/NCP-CI-Azure-questions-answers.html
