Nutanix Certified Professional - Network and Security (NCP-NS) 7.5 (NCP-NS-7.5) Free Practice Test

Question 1

An enterprise has deployed a VPC called FinanceVPC using Nutanix Flow Virtual Networking. The Finance team needs the following connectivity: Internal servers in the VPC must reach an on-premises corporate data- center via a point-to-point encrypted link. Some servers in the VPC must also access the public internet with source NAT and receive inbound access via floating IPs. The corporate network uses overlapping IP space with other VPCs in the environment, so address translation is necessary for those workloads. The networking design must support routing via BGP for future site expansions and provide low-latency north-south connectivity. Which actions should the administrator take to satisfy this requirement?

A. Use a No-NAT External Network for the on-premises link and a NAT External Network for Internet access. Configure a VPN tunnel to the on-premises location and enable BGP on the VPC router for the on-premises link.

B. Use two No-NAT External Networks-one for the on-prem link and one for Internet access; configure static routes for both without NAT.

C. Use a single No-NAT External Network for both on-prem and Internet access; configure BGP and direct routing out to the internet without NAT.

D. Use a single NAT External Network for both the on-prem link and Internet access; configure a default route to the external network and enable SNAT and floating IPs for all traffic.

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 2

Users have recently reported intermittent connectivity issues and slower-than-usual application performance for a Nutanix cluster to an administrator. The administrator needs to identify the root cause of these issues by analyzing the health of the infrastructure components. What action should the administrator take first to diagnose the root cause of the problem?

A. Review cluster health status, checking for any warnings or alerts relevant to the performance issues.

B. Enable network QoS to prioritize the performance of critical applications.

C. Reboot the Nutanix cluster nodes to clear any potential performance-related cache or memory issues.

D. Rebalance virtual machines across the cluster to balance resource load and improve performance.

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 3

An administrator is building a new VPC in Prism Central to isolate a test environment. The administrator plans to connect it to an external network later, but they want to complete the initial creation first. Which configuration items are the minimum required to successfully create the VPC?

A. VPC name and one Overlay Subnet

B. VPC name and cluster selection

C. VPC name and one External Access VLAN

D. VPC name and Transit VPC toggle switch

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 4

An administrator plans to upgrade the Network Controller in a Flow Virtual Networking deployment. The environment includes multiple AHV clusters managed by Prism Central. Which prerequisite must be verified before upgrading the Network Controller?

A. Each cluster must be running the Flow Network Security version specified as compatible with the target Network Controller release.

B. Each cluster must be running AHV versions compatible with the target Network Controller release.

C. Flow Network Security must be upgraded to the target release before upgrading the Network Controller.

D. Network Controller Prism Element upgrades must be applied before before Network Controller Prism Central upgrades can be applied.

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 5

An administrator creates an Isolation Policy in Prism Central to prevent communication between the Prod and Staging environments. The policy is in Enforce mode... but VMs in the two environments can still communicate. Which configuration issue most likely explains why the Isolation Policy is not blocking the traffic?

A. Isolation Policies restrict north-south communication when associated with a VPC gateway, not east- west traffic between categories.

B. The Prod and Staging categories have not been assigned to the VMs, so the policy does not apply.

C. The Isolation Policy does not specify any services/ports, so no traffic is matched for enforcement.

D. An Application Policy allows traffic between the same categories, overriding this policy.

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 6

What happens when a monitored policy is enforced?

A. Removes all discovered flows

B. Stops logging traffic

C. Blocks all traffic that is not allowed

D. Deletes the policy hitlogs

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 7

An administrator has observed the following message: Which two statements most accurately describe the security hitlog captured above? (Choose two.)

A. 10.38.174.57 is sending a packet destined to UDP 123.

B. 86.108.190.23 is sending a packet on UDP 123.

C. The source ip address is 10.38.174.5 and source port is TCP/123.

D. This is a security hit log on the rule name "Production-External-WebTier".

Correct Answer: A,C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 8

While configuring a new security policy in a Nutanix microsegmentation environment, an administrator wants the policy to remain flexible even if virtual machines change subnets or obtain new IP addresses. Which configuration approach should the administrator use when defining the policy scope?

A. Apply the policy after setting static routes for each VM.

B. Configure the policy only on specific VLAN IDs.

C. Use VM categories to define the secured and allowed entities.

D. Assign IP addresses manually to all VMs included in the policy.

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 9

Which statement accurately describes the behavior of a Flow Network Security policy operating in Monitor mode?

A. All matching traffic is discovered and denied, but not allowed.

B. All matching traffic is discovered and allowed, but not blocked.

C. Only East-West traffic is discovered, but North-South traffic is not.

D. Traffic is blocked unless it matches an "allow" rule in Enforce mode.

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Welcome to TestSimulate

Nutanix Certified Professional - Network and Security (NCP-NS) 7.5 (NCP-NS-7.5) Free Practice Test