Question 1

A customer wants to migrate VMs from a VLAN Basic Subnet to an Overlay Subnet with the same IP prefix.

Which migration approach ensures minimal disruption?

APerform cold migration, acknowledging that ingress/egress connections will not be preserved.

BEnable trunk mode on VLAN to allow multiple subnets on the same interface.

CChange IPAM mode to unmanaged to allow manual IP assignment.

DCreate a Layer 2 connectivity between the subnets and perform live migration.

Answer : D

Question 2

When cloning a Flow Network Security policy, what should be verified before enabling Enforce mode?

AThe cloned policy's secured entities reference the intended categories.

BThe cloned policy is configured to a different scope than the source policy.

CThe cloned policy must first be saved before it can be enforced.

DThe cloned policy must be renamed before it can be enforced.

Answer : A

Question 3

An administrator is building a VPC...

VPC CIDR: 10.10.0.0/16

Subnet CIDR: 10.10.10.0/24

"Ext_Net_Ext" (NAT): 192.168.1.0/24

"Ext_Net_Internal" (Routed): 172.16.1.0/24

The on-premises application server has an IP address of 172.16.2.50/24. A VM (10.10.10.100) in the VPC Subnet can reach the internet but cannot reach the on-premises server.

Which static route needs to be added to the VPC route table to resolve this?

ADestination prefix: 172.16.2.0/24, Next-Hop: Ext_Net_Ext

BDestination Prefix: 10.10.0.0/16, Next-Hop: Ext_Net_Internal

CDestination prefix: 192.168.1.0/24 Next-Hop: Ext_Net_Ext

DDestination prefix: 172.16.2.0/24, Next-Hop: Ext_Net_Internal

Answer : D

Question 4

An administrator is setting up a transit VPC to connect two VPCs and enable both internal (on-prem) and Internet connectivity.

Which is the best configuration to meet the requirement?

AConfigure the transit VPC with two NAT External Subnets to support redundancy for internet connectivity.

BConfigure the transit VPC with one NAT External Subnet and one No-NAT External Subnet, each serving different traffic types.

CConfigure the transit VPC with two No-NAT Overlay External Subnets for both Internet and on-prem traffic.

DConfigure the transit VPC with a single No-NAT External Subnet to handle both internal and internet traffic.

Answer : B

Question 5

An administrator needs to isolate communication between VMs in Production and Development environments. Each VM is categorized by Environment and Site category values. The administrator wants this isolation to apply only to VMs located at Site: Branch-001.

Which configuration best meets the requirement?

ACreate a Quarantine Policy between Environment:Production and Environment:Development. Scope the policy to Site: Branch-001.

BCreate a Quarantine Policy blocking traffic between (Environment: Production + Site: Branch-001) and (Environment: Development + Site: Branch-001).

CCreate an Isolation Policy between Environment:Production and Environment:Development. Scope the policy to Site: Branch-001.

DCreate an Isolation Policy blocking traffic between (Environment: Production + Site: Branch-001) and (Environment: Development + Site: Branch-001).

Answer : D

Free Nutanix Certified Professional Network & Security v7.5 (NCP-NS) Practice Questions

Nutanix NCP-NS Sample Exam Questions

Question 1

Question 2

Question 3

Question 4

Question 5