Nutanix Certified Professional - Network and Security (NCP-NS) 7.5: NCP-NS-7.5 Exam Premium File as PDF & Test Engine

A new multi-tier application is being deployed across several subnets in a Nutanix environment. The security team wants to create a Flow Network Security Policy to restrict traffic between the tiers, but the complete matrix of required network ports and protocols is not fully documented. Which strategy should the team employ first to accurately capture the necessary communication patterns without risking application outage?

• A. Apply a Security Policy in Enforce mode adding the required flows as they appear in the flow logs.
• B. Create an IPFIX export of all the application traffic and monitor all traffic for 48 hours.
• C. Apply a Security policy in Monitor mode to discover all traffic between the application tiers.
• D. Create broad Security Policy to permit all TCP traffic between the tiers to ensure connectivity.

A service-insertion firewall VM protects user VMs access to the internet. The virtual and physical switches, as well as all user VMs, currently use the default MTU size of 1500. Everything functions normally until a user VM is migrated to another host. After the migration, the user reports that some websites fail to load while ping to those same sites still succeeds. Routing and security policies appear normal. Which two configuration changes could resolve the issue? (Choose two.)

• A. Increase the MTU across all vSwitch and physical uplinks on the relevant network path to 1558 or greater.
• B. Increase the MTU on the user VM's vNIC to 1558 or greater.
• C. Decrease the MTU on the user VM's vNIC to 1442 or lower.
• D. Lower the MTU across all vSwitch and physical uplinks on the relevant network path to 1442 or lower.

An administrator is deploying a multi-tier (web, app, database) application on a Nutanix cluster using AHV.
The administrator needs to allow internal communication between tiers and provide external access to the web tier. How should the administrator satisfy this requirement?

• A. Create a VPC with subnets for each tier and configure the Externally Routable Prefix to include only web subnets.
• B. Create separate VPCs for each tier and connect them to the same external NAT network and configure routing policies for inter-tier traffic.
• C. Create a VPC with a single subnet and assign workloads of each tier to this subnet.
• D. Create separate VLAN networks for each tier and configure routing on the physical network.

Which statement best describes the function of an External Network in Flow Virtual Networking?

• A. It enables communication between VPCs.
• B. It enables communication between subnets within a VPC.
• C. Each VPC requires a dedicated External Network that cannot be shared.
• D. It acts as the entry and exit point for traffic to and from a VPC.