最新のNCP-CI-AWS合格保証付き試験問題集の認定サンプル問題
最新NCP-CI-AWSテスト材料には有効なNCP-CI-AWSテストエンジン
Nutanix NCP-CI-AWS 認定試験の出題範囲：
| トピック | 出題範囲 |
|---|---|
| トピック 1 |
|
| トピック 2 |
|
| トピック 3 |
|
| トピック 4 |
|
質問 # 62
Exhibit.
What does the exhibit indicate?
- A. Replication in paused state
- B. No ongoing replication
- C. Replication in error state
- D. Ongoing replication
正解：B
解説：
The exhibit indicates a replication operation with specific details about the protection domain, remote site, and snapshot. Key points to note are:
Bytes Completed: 0 bytes completed.
Complete Percent: 0.0%
Paused: false
Aborted: false
Given these details:
No ongoing replication: The operation has started, but there is no progress in terms of bytes completed or percentage completed. Since the status shows 0 bytes and 0 percent completed, it indicates that no data has been replicated yet.
Reference:
Nutanix Protection Domain and Replication Documentation
Nutanix Best Practices for Monitoring Replication
質問 # 63
What happens if there are not enough AWS bare-metal nodes available in the selected region during an NC2 cluster expansion?
- A. Cluster enters maintenance mode until nodes are available.
- B. NC2 retries provisioning and may fail, so the administrator must verify node availability with AWS.
- C. The NC2 console will retry the deployment until suitable nodes are available.
- D. Expansion continues with fewer nodes than requested.
正解：B
解説：
Bare-metal EC2 instances are a specialized resource in AWS, and their availability can sometimes be limited within a specific region or Availability Zone. If an administrator attempts to expand an NC2 cluster and the requested instance types are out of stock at the AWS level, the NC2 console will attempt to provision the nodes but will eventually reach aretry limit and fail. The portal does not indefinitely hold the cluster in maintenance mode. Instead, the administrator is responsible for verifying node availability through the AWS Service Health Dashboard or AWS support. If the desired instance type (e.g., i3.metal) is unavailable, the administrator may need to consider expanding into a different Availability Zone or choosing a different supported instance type to satisfy the expansion requirement.
質問 # 64
An administrator is tasked with deploying a VM in an NC2 cluster on AWS that needs to by accessed by resources within the on-premises datacenter.
The cluster has the following characteristics:
* 8 nodes
* Resides in the us-east-1a Availability Zone
* Contains 13 Subnets
* Has access to a Direct Connect connection
* Subnet that the User VM (UVM) is being deployed to:UserVM_subnet
There are multiple VMs within the cluster and the UserVM_subnet has access to the on-premises resources.
The administrator deploys the machine, but communication is not possible.
What is the most likely resolution for this situation?
- A. The AWS UVM Security Group requires the new application ' s ports adding to inbound traffic.
- B. The AWS User Management Security Group requires the new application ' s ports adding to and traffic
- C. The AWS IGW requires the new application ' s ports adding to inbound traffic.
- D. The AWS Internal Management Security Group requires the new application ' s ports adding to outbound traffic.
正解：A
解説：
* For a VM deployed in an NC2 cluster on AWS to be accessed by resources within the on-premises datacenter, the security group associated with the User VM (UVM) subnet must allow inbound traffic on the specific ports required by the application.
* If the security group rules do not permit inbound traffic on these ports, the communication will fail, even if other network configurations are correct.
* The administrator should ensure that the UVM Security Group includes rules to allow inbound traffic for the application ' s required ports, facilitating proper communication between the VM and on- premises resources.
Refer to the AWS documentation on security group configurations and Nutanix NC2 documentation for details on configuring network access and security group rules.
質問 # 65
An administrator is planning an NC2 deployment and wants to connect to AWS Services privately from the corporate VPC without going through the public internet.
Which connectivity solution should the administrator use?
- A. VTEP Gateways
- B. Gateway Endpoint
- C. Point-to-Site VPN
- D. Site-to-Site VPN
正解：B
解説：
* Gateway Endpoint:
* A Gateway Endpoint in AWS allows you to connect to supported AWS services privately without going through the public internet. This setup provides secure and efficient connectivity directly from the corporate VPC to the required AWS services.
* Gateway Endpoints support services such as Amazon S3 and DynamoDB and are ideal for scenarios where private connectivity to these services is needed.
Refer to the AWS documentation on VPC endpoints, specifically Gateway Endpoints, and the Nutanix documentation on configuring private connectivity for NC2 deployments.
質問 # 66
An administrator has deployed an NC2 cluster on AWS to an existing environment for VDI.
Afterwards, the corporate security teams direct the administrator to reuse an existing AWS subnet, 10.79.4.0/24 that has two EC2 instances: EC2-1 (10.79.4.200) and EC2-2 (10.79.4.201). The security team indicates that this directive is to avoid overlap with the AHV IPAM.
Which two configuration actions should the administrator take to ensure there are no configuration issues? (Choose two.)
- A. Deploy two VMs on the NC2 cluster and assign 10.79.4.200 and 10.79.4.201 as the assigned IPs in Prism Element
- B. Configure the AHV JPAM to use DHCP range 10.79.4.2 -10.79.4.253.
- C. aCLI > net.add_to_ip_bfacklist 10.79.4.200 aCLI > net.add_to_ip_blacklist 10.79.4.201
- D. aCLI > net.de/ete_from_ip_blacklist 10.79.4.200 aCLI > net.defete_fromjp_blacklist 10.79.4.201
正解：B、C
解説：
To avoid IP address conflicts and ensure there are no configuration issues when reusing an existing AWS subnet, the administrator should take the following actions:
aCLI > net.add_to_ip_blacklist 10.79.4.200 aCLI > net.add_to_ip_blacklist 10.79.4.201 (Answer A):
This command adds the specified IP addresses to the blacklist, preventing AHV IPAM from assigning these addresses to any VMs. This ensures that the existing EC2 instances with IPs 10.79.4.200 and 10.79.4.201 are not allocated to other VMs in the NC2 cluster.
Configure the AHV IPAM to use DHCP range 10.79.4.2 -10.79.4.253 (Answer D):
By configuring the AHV IPAM to use a specific DHCP range, you ensure that the IP addresses assigned to the EC2 instances (10.79.4.200 and 10.79.4.201) are not included in the DHCP pool. This prevents IP address conflicts within the subnet.
Reference:
Nutanix aCLI Reference
Nutanix NC2 on AWS Documentation
AWS VPC and Subnet Basics
質問 # 67
An administrator needs to backup Prism Central configuration data to an Amazon S3 bucket.
Which pcdr-cli command parameters is needed to satisfy this task?
- A. recover
- B. list-protection-targets
- C. protect
- D. deployment-info
正解：C
解説：
To backup Prism Central configuration data to an Amazon S3 bucket, thepcdr-clicommand with theprotectparameter is used. This parameter is specifically designed for creating protection policies and backing up Prism Central data.
Nutanix Prism Central Documentation
Nutanix pcdr-cli Command Reference
質問 # 68
An administrator is planning to leverage NC2 on AWS for an elastic DR scenario where the initial cluster is using 13en.metal.
Which two additional node types are supported for cluster expansion? (Choose two.)
- A. i4i.metal
- B. I3.metal
- C. Z1d.metal
- D. m5d.metal
正解：A、B
解説：
When planning to leverage NC2 on AWS for an elastic DR scenario where the initial cluster is using 13en.metal, the following additional node types are supported for cluster expansion:
I3.metal: These instances provide high IOPS and low latency with NVMe SSDs, making them suitable for storage-intensive applications.
i4i.metal: These instances offer higher performance with AWS Nitro SSDs, improved network bandwidth, and better compute performance compared to the I3.metal instances.
Reference:
Nutanix Cloud Clusters on AWS Documentation
Amazon EC2 I4i Instances - AWS
Amazon EC2 I3 Instances - AWS
質問 # 69
To deploy NC2 in AWS using an existing VPC, which two AWS resources should be configured beforehand? (Choose two.)
- A. Public and Private Subnets
- B. Placement Group
- C. NAT Gateway
- D. Bare-metal EC2 Instance
正解：C
解説：
To deploy NC2 in AWS using an existing VPC, the following AWS resources should be configured beforehand:
NAT Gateway: This allows instances in the private subnet to connect to the internet or other AWS services, while preventing the internet from initiating connections with those instances.
Public and Private Subnets: These are necessary to segregate the network traffic. Public subnets provide a direct route to the internet gateway, while private subnets are used for internal resources that do not need direct access to the internet.
Reference:
Nutanix Cloud Clusters on AWS Deployment Guide
Nutanix Support & Insights
質問 # 70
An administrator is attempting to deploy an NC2 cluster.
The cluster configuration is as follows:
* Name - Cluster-1
* Nodes of type i4i.metal
* Replication Factor 2
* Existing VPC resources
* VPC - 10.0.0.0/16
* Subnets:
* Bare metal hosts: 10.0.1.0/24
* User VMs:10.0.2.0/24
* Public: 10.0.3.0/24
During the deployment process, the administrator notices the following alert:
What should the administrator do to ensure the cluster deployment does not fail?
- A. Check AWS VPC and subnet quotas for the cloud account.
- B. Modify the administrator's RBAC permissions in the NC2 console.
- C. Ensure an outbound Internet connection exists from 10.0.1.0/24.
- D. Create a new VPC and modify the cluster configuration to use the new VPC.
正解：C
解説：
The alert indicates a potential issue with the VPC/Subnet settings, preventing the cluster nodes from contacting Nutanix services.
To resolve this, the administrator needs to ensure that the subnet 10.0.1.0/24, which is assigned for Bare metal hosts, has an outbound Internet connection.
This connection is necessary for the cluster nodes to communicate with external Nutanix services for updates, license validation, and other essential operations.
Verify that there are appropriate route tables and security group rules allowing outbound traffic to the Internet from the 10.0.1.0/24 subnet.
Ensure that there is either an Internet Gateway (IGW) attached to the VPC or a NAT Gateway configured if using private subnets.
Reference:
Refer to the Nutanix documentation and AWS VPC configuration guides to ensure proper Internet connectivity and routing setups.
質問 # 71
An administrator is considering the deployment of NC2 on AWS with Flow Virtual Networking. How many minimum subnets will the administrator need?
- A. 2 Private Management Subnet, 2 Public Subnet, 1 Flow Virtual Networking Subnet
- B. 1 Private Management Subnet, 2 Public Subnet, 2 Flow Virtual Networking Subnet
- C. 2 Private Management Subnet, 1 Public Subnet, 2 Flow Virtual Networking Subnet
- D. 1 Private Management Subnet, 1 Public Subnet, 1 Flow Virtual Networking Subnet
正解：D
解説：
Deploying NC2 on AWS using Flow Virtual Networking (FVN) requires a specific landing zone architecture to isolate management and user traffic. The minimum configuration requires three distinct subnets. First, one Private Management Subnet is needed for the bare-metal hosts and Controller VMs (CVMs). Second, one Public Subnet is required to host the NAT Gateway, providing the private management nodes with outbound internet access for Nutanix portal communication and updates. Third, one Flow Virtual Networking Subnet (often referred to as the Transit VPC subnet) is required to handle the encapsulation and routing of User VM traffic. This baseline setup ensures that the management plane is secure, the internet-bound traffic is correctly routed, and the FVN overlay has the necessary transit path for workload communication.
質問 # 72
An administrator needs to create user VM subnets for multiple NC2 clusters in AWS.
What would be the best approach to take?
- A. Create guest-VM subnets for each cluster.
- B. Create guest-VM subnets to be shared by all clusters.
- C. Use the cluster management subnet dedicated to each cluster.
- D. Create guest-VM VNets for each cluster.
正解：A
解説：
When creating user VM subnets for multiple NC2 clusters in AWS, the best approach is to create guest-VM subnets for each cluster. This ensures that each cluster has its own dedicated subnets, which simplifies network management and avoids potential IP conflicts.
* Advantages of Dedicated Subnets:
* Isolation: Each cluster operates in its own subnet, providing better isolation and security.
* Management: Easier to manage and troubleshoot network issues when each cluster has its own subnets.
* Scalability: More scalable as each subnet can be managed and expanded independently.
* Steps to Create Guest-VM Subnets:
* Identify the IP range for each subnet.
* In the AWS VPC console, create a new subnet for each cluster using the identified IP ranges.
* Associate the new subnets with the respective clusters during or after the cluster deployment process.
* Why Not Shared Subnets:
* Shared subnetscould lead to IP conflicts and make network management more complex, especially as the number of clusters grows.
Nutanix Cloud Clusters on AWS Administration Guide
AWS VPC Subnet Creation Documentation
質問 # 73
How many Amazon Elastic Block Store(EBS) volumes are attached to each node within an AWS NC2 cluster upon creation.
- A. 0
- B. 1
- C. 2
- D. 3
正解：B
解説：
* Upon creation, each node within an AWS NC2 cluster has3 Amazon Elastic Block Store (EBS)volumes attached.
* These volumes are used for different purposes, such as operating system storage, Nutanix services, and user data storage.
* The number of EBS volumes is designed to ensure adequate storage performance and capacity for the NC2 cluster ' s operations and workload demands.
Refer to the Nutanix documentation on NC2 cluster setup and AWS EBS volume configurations to confirm the details on the number and purpose of EBS volumes attached to each node.
質問 # 74
preparing the landing zone networking resources for a Nutanix cluster on AWS. The administrator has created a VPC with two private subnets: one for cluster management and one for user VMs.
What additional subnet must the administrator create?
- A. Public subnet for S3 access
- B. Private subnet for Prism Central
- C. Public subnet for Internet access
- D. Private subnet for VPN gateway
正解：C
解説：
When setting up a landing zone for Nutanix clusters on AWS, having only private subnets for cluster management and user VMs is not sufficient for full cluster functionality. Nutanix clusters often need to communicate with the internet for updates, patches, and other cloud services.
* VPC Configuration:
* The VPC already has two private subnets (one for cluster management and one for user VMs).
* Additional Requirements:
* To access public services like S3 or for the cluster nodes to reach Nutanix services for updates, a public subnet is essential.
Why Public Subnet for Internet Access?:
* A public subnet allows resources within it to communicate directly with the internet, which is necessary for accessing Nutanix ' s update servers, applying patches, and other maintenance tasks.
* This subnet typically includes an internet gateway, enabling instances in the public subnet to receive and send traffic directly to the internet.
Nutanix Cloud Clusters on AWS Administration Guide
AWS Networking Best Practices
Nutanix Networking and Subnet Configuration Guidelines
質問 # 75
An organization plans to use the Cluster Protect feature to protect the cluster data.
Which license will satisfy this requirement?
- A. AOS Ultimate or NCI Ultimate
- B. AOS Pro or AOS Ultimate
- C. NCI Pro or AOS Ultimate
- D. AOS Pro or NCI Pro
正解：A
質問 # 76
What role is needed to create a cluster?
- A. Customer Administrator
- B. Cluster Super Admin
- C. Customer Security Administrator
- D. Cluster Administrator
正解：B
解説：
To create a cluster in Nutanix Cloud Integration with AWS, the role needed is Cluster Super Admin.
The Cluster Super Admin role provides the highest level of privileges required to perform critical operations such as creating, managing, and deleting clusters.
This role is essential for overseeing the cluster setup and configuration processes, ensuring the user has full control over the cluster lifecycle.
Reference:
Refer to the Nutanix documentation on roles and permissions for NC2 on AWS for further details on the capabilities and required permissions for cluster creation.
質問 # 77
Regarding a cloud cluster, which two upgrades can be performed using LCM? (Choose two.)
- A. BIOS
- B. NBA
- C. AHV
- D. NCC
正解：A、C
解説：
* AHV (Answer A):
* AHV (Acropolis Hypervisor) can be upgraded using Lifecycle Manager (LCM). LCM simplifies the upgrade process and ensures that all components are updated in a coordinated manner.
* BIOS (Answer C):
* BIOS upgrades can also be performed using LCM. This helps in maintaining hardware compatibility and performance by ensuring that the latest firmware is installed.
Nutanix Lifecycle Manager (LCM) Documentation
Nutanix AHV Upgrade Guide
Nutanix BIOS Upgrade Documentation
質問 # 78
Administrator has recently deployed an NC2 cluster on AWS in the North Virginia region in availability zone us-east-id. The consuming IPS from a 10.78.2.0/24 range.
The AWS VPC has two available CIDR ranges:
10.78.0.0/16
10.19.101.0/24
The following subnet have been configured in the NC2 AWS VPC:
Which two subnet will show up in the Network configuration of the Prism Element Settings page? (Choose two.)
- A. L2stretch
- B. DR01
- C. VDI
- D. DR02
正解：A、B
解説：
* For the NC2 cluster deployed in the North Virginia region (us-east-id), consuming IPs from the
10.78.2.0/24 range, the subnets configured within the same CIDR range of 10.78.0.0/16 will be recognized.
* The subnetDR01 (10.78.2.0/24)is directly within the range of the deployed cluster.
* The subnetL2stretch (10.19.101.0/24)is also configured in the NC2 AWS VPC, although not in the immediate range of the cluster, it may show up due to broader network configurations for stretched L2 operations.
* SubnetsVDI (10.78.130.0/22)andDR02 (10.79.120.0/24), although part of the same VPC, are not directly within the immediate CIDR range or may not be recognized in this specific configuration scenario.
Refer to the Nutanix documentation on NC2 AWS VPC subnet configurations and Prism Element settings for detailed guidelines on network visibility and configuration.
質問 # 79
An administrator is experiencing problems with several operations, including VM IP address assignment validations, VM power-on and VM power-off operations.
Whenever a related operation is performed, an alert is generated in the NC2 console indicating that the Cloud API endpoints are unavailable.
The issue was further investigated and it was determined that NC2 is unable to make API calls to the underlying cloud infrastructure due to network connectivity misconfigurations.
Which two connectivity misconfigurations could be causing this issue? (Choose two.)
- A. AWS VPC endpoints are used for connectivity to AWS services.
- B. IAM roles and policies are incorrectly configured.
- C. Subnets are connected to the Internet via NAT gateways.
- D. Route tables for cloud subnets contain incorrect route entries.
正解：B、D
解説：
* Route tables for cloud subnets contain incorrect route entries:
* If the route tables associated with the cloud subnets contain incorrect route entries, the NC2 cluster might not be able to reach the necessary AWS services or endpoints. Correct route entries are crucial for ensuring proper communication between the NC2 cluster and the underlying AWS infrastructure.
* IAM roles and policies are incorrectly configured:
* Incorrectly configured IAM roles and policies can prevent NC2 from making API calls to AWS services. These roles and policies must be properly set up to allow the necessary permissions for NC2 to interact with AWS resources and perform required operations.
Refer to the AWS documentation on route table configuration and IAM roles and policies, and Nutanix documentation on NC2 cloud connectivity and permissions.
質問 # 80
An administrator is attempting to deploy an NC2 cluster.
The cluster configuration is as follows:
* Name - Cluster-1
* Nodes of type i4i.metal
* Replication Factor 2
* Existing VPC resources
* VPC - 10.0.0.0/16
* Subnets:
* Bare metal hosts: 10.0.1.0/24
* User VMs:10.0.2.0/24
* Public: 10.0.3.0/24
During the deployment process, the administrator notices the following alert:
What should the administrator do to ensure the cluster deployment does not fail?
- A. Check AWS VPC and subnet quotas for the cloud account.
- B. Ensure an outbound Internet connection exists from 10.0.1.0/24.
- C. Create a new VPC and modify the cluster configuration to use the new VPC.
- D. Modify the administrator ' s RBAC permissions in the NC2 console.
正解：B
解説：
* The alert indicates a potential issue with the VPC/Subnet settings, preventing the cluster nodes from contacting Nutanix services.
* To resolve this, the administrator needs to ensure that the subnet 10.0.1.0/24, which is assigned for Bare metal hosts, has an outbound Internet connection.
* This connection is necessary for the cluster nodes to communicate with external Nutanix services for updates, license validation, and other essential operations.
* Verify that there are appropriate route tables and security group rules allowing outbound traffic to the Internet from the 10.0.1.0/24 subnet.
* Ensure that there is either an Internet Gateway (IGW) attached to the VPC or a NAT Gateway configured if using private subnets.
Refer to the Nutanix documentation and AWS VPC configuration guides to ensure proper Internet connectivity and routing setups.
質問 # 81
An administrator planned to create a new NC2 cluster and chose the existing AWS VPC infrastructure in the workflow. The administrator needs two private subnets to complete the configuration.
- A. For private NAT and Elastic IP management
- B. For Prism Element and Prism Central management
- C. For user VMs and cluster management
- D. For DNS and NJP management
正解：C
解説：
When creating a new NC2 cluster using an existing AWS VPC infrastructure, two private subnets are needed.
These subnets are used as follows:
* One private subnet for user VMs, which houses the virtual machines that users interact with.
* Another private subnet for cluster management, which is used for internal cluster operations and management tasks, ensuring that management traffic is isolated from user traffic for security and performance reasons.
Nutanix Support and Insights
Nutanix Cloud Clusters on AWS Administration
質問 # 82
An administrator is experiencing problems with several operations, including VM IP address assignment validations, VM power-on and VM power-off operations.
Whenever a related operation is performed, an alert is generated in the NC2 console indicating that the Cloud API endpoints are unavailable.
The issue was further investigated and it was determined that NC2 is unable to make API calls to the underlying cloud infrastructure due to network connectivity misconfigurations.
Which two connectivity misconfigurations could be causing this issue? (Choose two.)
- A. AWS VPC endpoints are used for connectivity to AWS services.
- B. IAM roles and policies are incorrectly configured.
- C. Subnets are connected to the Internet via NAT gateways.
- D. Route tables for cloud subnets contain incorrect route entries.
正解：B、D
解説：
Route tables for cloud subnets contain incorrect route entries:
If the route tables associated with the cloud subnets contain incorrect route entries, the NC2 cluster might not be able to reach the necessary AWS services or endpoints. Correct route entries are crucial for ensuring proper communication between the NC2 cluster and the underlying AWS infrastructure.
IAM roles and policies are incorrectly configured:
Incorrectly configured IAM roles and policies can prevent NC2 from making API calls to AWS services. These roles and policies must be properly set up to allow the necessary permissions for NC2 to interact with AWS resources and perform required operations.
Reference:
Refer to the AWS documentation on route table configuration and IAM roles and policies, and Nutanix documentation on NC2 cloud connectivity and permissions.
質問 # 83
An administrator is deploying an NC2 cluster into an existing AWS VPC.
The cluster deployment fails, with the following error message:
Why has the deployment failed?
- A. Outbound Internet access is not configured on the VPC.
- B. The administrator has not configured the Security Group to manage the shared subnet.
- C. The administrator has not created the necessary Security Group.
- D. Shared subnets are not supported for Nutanix clusters.
正解：C
解説：
* The administrator has not created the necessary Security Group:
* The error message indicates that the creation of network interfaces in a shared subnet requires specifying a security group. This means that the necessary security group has not been created or assigned to the network interfaces.
* Creating the appropriate security group and ensuring it is associated with the network interfaces during cluster deployment should resolve this issue.
Refer to AWS documentation on security groups and network interface configuration and Nutanix documentation on prerequisites for deploying NC2 clusters in an existing AWS VPC.
質問 # 84
An administrator is seeking help with an ongoing NC2 issue. After reaching out to Nutanix support, the administrator is introduced to NC2 specialist who can help troubleshoot the problem.
- A. Provide the specialist with the administrator's login credentials.
- B. Ensure the specialist is assigned the RBAC role with proper permissions.
- C. Confirm the Support Authorization on the organization is set to Full Access.
- D. Add the specialist as an admin user to the organizations.
正解：B、C
解説：
Ensure the specialist is assigned the RBAC role with proper permissions (Answer A):
Role-Based Access Control (RBAC) ensures that the specialist has the necessary permissions to troubleshoot and manage the NC2 environment. This avoids unnecessary privilege escalations and maintains security.
Confirm the Support Authorization on the organization is set to Full Access (Answer C):
Setting the Support Authorization to Full Access allows the Nutanix support specialist to have the required access to investigate and resolve issues in the environment. This is essential for effective troubleshooting.
Reference:
Nutanix RBAC Documentation
Nutanix Support Access Guide
質問 # 85
Which two statements are the most accurate regarding Cluster Protect? (Choose two.)
- A. Nutanix Guest Tools (NGT) is not required to be installed on User VMs.
- B. The dusters that are to be protected must be registered with the same instance of Prism Central.
- C. An AWS subnet can be shared by VMs, Prism Central, and Multicloud Snapshort Technology (MST).
- D. The Cluster Protect feature requires AOS version 6.7 or higher.
正解：B、D
解説：
The clusters that are to be protected must be registered with the same instance of Prism Central (Answer C):
For Cluster Protect to function correctly, all clusters intended for protection must be registered under the same Prism Central instance. This ensures consistent management and coordination of protection policies and operations across clusters.
The Cluster Protect feature requires AOS version 6.7 or higher (Answer D):
Cluster Protect is a feature that is available starting from AOS version 6.7. To utilize this feature, ensure that the Nutanix clusters are running this version or a newer one.
Reference:
Nutanix Cluster Protection Documentation
Nutanix AOS Release Notes
質問 # 86
An administrator has deployed NC2 on AWS. The cluster deployment completed successfully.
After deployment, the administrator created a subnet in AWS, added it as a network in Prism Element, deployed Prism Central using the newly-configured network, and registered the cloud cluster with it.
The on-premises network and AWS are connected via a Site-to-Site VPN. Cluster nodes, CVM, and Prism Central can communicate with each other, but cannot be accessed from the on-premises network.
What two issues might be the cause of this problem? (Choose two.)
- A. Traffic from the on-premises network is not permitted by VM and Management security groups.
- B. AWS Direct Connect must be used to establish connection between AWS and on-premises
- C. The AHV firewall is blocking traffic from the on-premises network.
- D. The AWS VPC traffic is blocked by a firewall in the on-premises network.
正解：A、D
解説：
Traffic from the on-premises network is not permitted by VM and Management security groups:
Ensure that the security groups assigned to the VMs and management interfaces in AWS allow inbound traffic from the on-premises network. Without appropriate security group rules, the traffic will be blocked.
The AWS VPC traffic is blocked by a firewall in the on-premises network:
Check if the firewall on the on-premises network is configured to allow traffic from the AWS VPC. Firewalls may have restrictive rules that block incoming traffic, preventing communication.
Reference:
Refer to AWS documentation on security groups and firewalls and Nutanix documentation on configuring networking for NC2 clusters.
質問 # 87
......
NCP-CI-AWSサンプルには正確な更新された問題がこちら：https://www.jpntest.com/shiken/NCP-CI-AWS-mondaishu
NCP-CI-AWS更新された試験問題集で[2026年最新] 練習には有効な試験問題集：https://drive.google.com/open?id=1zH9zJCNSQYbC4ve4zfQQws7FVA2Z6oUZ