Try Nutanix : NCP-NS-7.5 valid & accurate questions and answers

Nutanix NCP-NS-7.5 Exam Overview:

Nutanix NCP-NS-7.5 Exam Syllabus Topics:

Nutanix Certified Professional - Network and Security (NCP-NS) 7.5 Sample Questions:

1. An enterprise has deployed a VPC called FinanceVPC using Nutanix Flow Virtual Networking. The Finance team needs the following connectivity: Internal servers in the VPC must reach an on-premises corporate data- center via a point-to-point encrypted link. Some servers in the VPC must also access the public internet with source NAT and receive inbound access via floating IPs. The corporate network uses overlapping IP space with other VPCs in the environment, so address translation is necessary for those workloads. The networking design must support routing via BGP for future site expansions and provide low-latency north-south connectivity. Which actions should the administrator take to satisfy this requirement?

A) Use a No-NAT External Network for the on-premises link and a NAT External Network for Internet access. Configure a VPN tunnel to the on-premises location and enable BGP on the VPC router for the on-premises link.
B) Use a single No-NAT External Network for both on-prem and Internet access; configure BGP and direct routing out to the internet without NAT.
C) Use two No-NAT External Networks-one for the on-prem link and one for Internet access; configure static routes for both without NAT.
D) Use a single NAT External Network for both the on-prem link and Internet access; configure a default route to the external network and enable SNAT and floating IPs for all traffic.

2. An administrator recently deployed a new set of virtual machines... 3-tier web application... restricted as follows: Only application VMs can talk to database VMs on port 3306 Frontend VMs should only communicate with application VMs on port 8080 Which action will correctly create and configure the Security Policies in Nutanix Flow to satisfy this task?

A) Create VLANs for each tier and configure ACLs to restrict communication.
B) Create categories for each tier then define an Application Policy allowing specific ports between them.
C) Create IP-based rules for each VM category within a Security Policy.
D) Configure a global "Allow All" Security Policy and rely on guest OS firewalls for tier-based restrictions.

3. While configuring a new security policy in a Nutanix microsegmentation environment, an administrator wants the policy to remain flexible even if virtual machines change subnets or obtain new IP addresses. Which configuration approach should the administrator use when defining the policy scope?

A) Configure the policy only on specific VLAN IDs.
B) Use VM categories to define the secured and allowed entities.
C) Apply the policy after setting static routes for each VM.
D) Assign IP addresses manually to all VMs included in the policy.

4. Which statement accurately describes the behavior of a Flow Network Security policy operating in Monitor mode?

A) Traffic is blocked unless it matches an "allow" rule in Enforce mode.
B) Only East-West traffic is discovered, but North-South traffic is not.
C) All matching traffic is discovered and denied, but not allowed.
D) All matching traffic is discovered and allowed, but not blocked.

5. How can the administrator discover the root cause of the issue?

A) Confirm that Inter-VM connectivity is enabled within the VM networking settings and that VMs in the Database tier are configured correctly to accept inbound traffic.
B) Verify that the port 3306 is open on the external gateway and that SNAT is not being applied for internal communication.
C) Check if traffic isolation has been configured on the Database tier and ensure that there is no policy preventing App tier communication with the Database tier.
D) Check the security policies again to ensure that the rule allowing port 3306 from Web - > Database is applied and active, then check the policy enforcement mode to ensure it is in Enforcement Mode.

Solutions: