Try and practice the latest Nutanix : NCP-NS-7.5 real questions & answers

Nutanix NCP-NS-7.5 Exam Overview:

Nutanix NCP-NS-7.5 Exam Syllabus Topics:

Nutanix Certified Professional - Network and Security (NCP-NS) 7.5 Sample Questions:

1. An administrator plans to upgrade a Nutanix cluster running AHV and Prism Central. The current cluster is on AOS 6.10, and the administrator wants to move to AOS 7.3 while ensuring all components remain compatible. What is the correct upgrade order to minimize downtime and maintain cluster functionality?

A) Upgrade CVMs - > Upgrade cluster AOS - > Upgrade Prism Central - > Upgrade AHV hosts
B) Upgrade AHV hosts - > Upgrade cluster AOS - > Upgrade Prism Central - > Upgrade CVMs
C) Upgrade cluster AOS - > Upgrade AHV hosts - > Upgrade Prism Central - > Upgrade CVMs
D) Upgrade Prism Central - > Upgrade AHV hosts - > Upgrade CVMs - > Upgrade cluster AOS

2. What must an administrator do before disabling the Network Controller?

A) Delete all external subnets and VPCs which are in-use.
B) Convert external subnets into VLAN Basic networks.
C) Delete VLAN Basic Subnets.
D) Once enabled, the Network controller cannot be disabled.

3. An administrator uses Nutanix Flow to secure a three-tier application (Web, App, and Database tiers). After observing the traffic, they find that: The Web tier communicates with the App tier over HTTP (port 80) The App tier communicates with the Database tier over TCP port 1433 The Database tier does not initiate connections The Web tier receives inbound HTTP traffic from the corporate DMZ on port 8080 No other traffic should be allowed What should the administrator do to document and then securely apply these flows in Nutanix Flow?

A) Add all VMs to a single security policy to simplify communication.
B) Disable traffic-flow discovery and configure all policies manually.
C) Manually create isolation policies between all VMs in the environment.
D) Use Flow Network Visualization to capture observed flows and convert them into microsegmentation security policies.

4. Refer to Exhibit:

An organization uses an FNS-NG Service Chain to steer application traffic through a pair of third-party firewall Network Function VMs operating in Active/Standby mode. Users suddenly report that all application access is blocked. The administrator reviews Prism Central - > Network & Security - > Network Functions, where the summary shown in the exhibit is displayed. Additional information: Alert: "Network Function
'PANW Service Insertion' virtual NIC pair(s) are unhealthy." Both firewall VMs are powered on and reachable. The security policy using the service chain has not been changed. Based on the exhibit and findings, what is the most likely cause of the traffic outage?

A) The service-chain health check failed to reroute sessions to the healthy firewall.
B) One of the Network Function vNIC pairs lost dataplane connectivity, interrupting traffic until health is stabilized.
C) The inbound vNIC on SE-PA-VM Firewall-2 failed, preventing redirected packets from reaching the firewall.
D) Firewall policy synchronization was not configured when the standby firewall became active.

5. An administrator is designing a Transit VPC to provide shared corporate services (e.g., DNS) for two tenant VPCs: VPC-A requires WAN access using NAT. VPC-B requires WAN access without NAT. Both VPCs connect to the Transit VPC for shared services hosted on the corporate network. Shared services residing in the Transit VPC use routed IP addressing for WAN connectivity. Which two configuration elements should the administrator implement on the Transit VPC? (Choose two.)

A) Associate one No-NAT external VLAN to the Transit VPC router for underlay connectivity.
B) Associate both a NAT and a No-NAT external VLAN to the Transit VPC to support separate egress paths.
C) Create two Overlay external subnets in the Transit VPC: one for VPC-A and one for VPC-B.
D) Use one Overlay external subnet in the Transit VPC to which both VPCs will connect.

Solutions: