NCP-CN無料問題集「Nutanix Certified Professional

質問 1

A company uses an Artifactory private registry for development. The NKP deployment must use this private registry since the Security Administrator has the firewall configured to reject connections to public container registries. The first task is to push the NKP bundle to this private registry.
What options should be used to push the NKP bundle to this private registry?

（A）--registry-mirror-url, --registry-mirror-username and --registry-mirror-password

（B）--mirror-url, --mirror-username and --mirror-password

（C）--to-registry, --to-registry-username and --to-registry-password

（D）--registry-url, --registry-username and --registry-password

正解：C 解答を投票する

質問 2

The Platform Engineer needs to expand an NKP Pro demo cluster due to workload capacity constraints. The demo cluster has 150 vCPUs available to it from a licensing standpoint. Each worker node has 8 vCPUs and each control plane node has 4 vCPUs.
Which two options are valid for expanding the demo cluster and remaining compliant with licensing? (Choose two.)

（A）Expand the original worker nodepool by up to 4 nodes and create a new worker nodepool consisting of 6 nodes with 4 vCPUs/node.

（B）Expand the original worker nodepool by up to 8 nodes.

（C）Add 6 additional control planes.

（D）Create a new worker nodepool consisting of 10 nodes with 8 vCPUs per node.

正解：A、B 解答を投票する

質問 3

A Platform Engineer is deploying NKP into a highly secure vSphere environment. The NKP cluster will be air-gapped, and must also be FIPS compliant. The OS platform to be used for NKP cluster nodes is RHEL.
What must the engineer do to properly prep an OS image and have it be deployed as a FIPS compliant NKP cluster node?

（A）Verify the OS itself has been placed in fips mode.When performing the NKP image build operation, be sure to include the offline fips override.When performing the NKP cluster deploy operation, be sure to include the FIPS version references for kubernetes and etcd.

（B）Verify the OS itself has been placed in fips mode.When performing the NKP image build operation, be sure to include the offline fips and fips overrides.When performing the NKP cluster deploy operation, be sure to include the FIPS version references for kubernetes and etcd.

（C）Verify the OS itself has been placed in fips mode.When performing the NKP cluster deploy operation, be sure to include the FIPS version references for kubernetes, kubectl and etcd.

（D）Verify the OS itself has been placed in fips mode.When performing the NKP image build operation, be sure to include the offline fips and fips overrides.When performing the NKP cluster deploy operation, be sure to include the FIPS version references for kubernetes, kubectl and etcd.

正解：B 解答を投票する

質問 4

A company has different Kubernetes clusters for different business units. Every business unit has separate Kubernetes clusters for production and development because the software deployed in production is different than development. Now, all production clusters for all business units are standardized and all clusters for development are standardized as well.
The company recently acquired NKP Ultimate licenses for all Kubernetes clusters.
How can the company control the standard configuration for both environments in all clusters (production and development)?

（A）Install Flux in every Kubernetes cluster with the appropriate kustomize.yaml, with nkp install flux --kustomize=kustomize.yaml --kubeconfig=<cluster>.conf

（B）Create new Kubernetes clusters for production and development with NKP for every business unit.

（C）Configure a production workspace and a development workspace and attach each Kubernetes cluster to the corresponding workspace.

（D）Install Flux in every Kubernetes cluster and configure the appropriate kustomize.yaml in every Kubernetes cluster.

正解：C 解答を投票する

質問 5

A Platform Engineer has been tasked with building a custom image for the deployment of NKP management and worker nodes. The engineer needs to ensure that the proper package versions are used when creating these images. The security team has only authorized version 1.30.5 of Kubernetes and version 1.7.22 of containerd. Where should the engineer go to verify that this is the version being used when building the custom image?

（A）The custom image's .env file

（B）config/pulumi/vars/pulumi.kib.config

（C）ansible/group_vars/all/defaults.yaml

（D）terraform/vars/default/terraform.tfvars

正解：C 解答を投票する

質問 6

An administrator has been trying to deploy an initial AHV-based NKP cluster in a dark site (no Internet connectivity) environment using the command shown in the question.
nkp create cluster nutanix \
--cluster-name=$CLUSTER_NAME \
--control-plane-prism-element-cluster=$PE_NAME \
--worker-prism-element-cluster=$PE_NAME \
--control-plane-subnets=$SUBNET_ASSOCIATED_WITH_PE \
--worker-subnets=$SUBNET_ASSOCIATED_WITH_PE \
--control-plane-endpoint-ip=$AVAILABLE_IP_FROM_SAME_SUBNET \
--csi-storage-container=$NAME_OF_YOUR_STORAGE_CONTAINER \
--endpoint=$PC_ENDPOINT_URL \
--control-plane-vm-image=$NAME_OF_OS_IMAGE_CREATED_BY_NKP_CLI \
--worker-vm-image=$NAME_OF_OS_IMAGE_CREATED_BY_NKP_CLI \
--registry-url=${REGISTRY_URL} \
--registry-mirror-username=${REGISTRY_USERNAME} \
--registry-mirror-password=${REGISTRY_PASSWORD} \
--kubernetes-service-load-balancer-ip-range $START_IP-$END_IP \
--self-managed
Which missing attribute needs to be added in order for the deployment?

（A）--airgapped

（B）--insecure

（C）--registry-url

（D）--registry-username

正解：A 解答を投票する

質問 7

An administrator has been tasked with deploying NKP as the Kubernetes platform and needs to deploy their first cluster with the following requirements:
Dark site (no Internet connectivity)
Nutanix-provided Rocky Linux VM image
AHV-based clusterWhat are two prerequisites to accomplish the deployment? (Choose two)

（A）Existing local container registry

（B）Air-Gapped Bundle

（C）Konvoy Image Builder

（D）Self-managed AWS cluster

正解：A、B 解答を投票する

質問 8

A Cloud Engineer is deploying an NKP cluster into an AWS environment. By default, when deploying NKP on AWS infrastructure, it generates the supporting infrastructure necessary for the cluster (VPC, subnets, ELBs). However, the AWS team has insisted that the NKP cluster be deployed on existing AWS infrastructure. How can the engineer meet this requirement?

（A）When using the nkp adopt infrastructure aws command set, include the valid parameters with the pre-existing VPC, subnets, and ELB to use. Deploy the NKP cluster using the nkp create cluster aws command set.

（B）When using the nkp create cluster aws command set, include the valid parameters with the pre-existing VPC, subnets, and ELB to use.

（C）Create an NKP infrastructure provider for AWS in the NKP UI. When deploying the NKP cluster through the UI, specify the pre-existing VPC, subnets, and ELB to use in the appropriate fields of the 'Infrastructure' section of the Create Cluster page.

（D）Create an overrides file with the pre-existing VPC, subnets, and ELB to use. When using the nkp create cluster aws command set, include the overrides parameter with the overrides file that was created.

正解：D 解答を投票する

質問 9

A Platform Engineer is a member of an IT team that provides Kubernetes clusters for three groups within a company named Fin Group, Inc.:
Fin VD
Fin Insurance
Fin TravelThe engineer created workspaces for each group. Fin Group Inc. has its own Active Directory implementation, while each group uses their own Identity Provider. Now, the engineer needs to assign the Tenant Administrators role for each workspace. How will the engineer complete this task?

（A）Create a role binding and assign it to manage the corresponding workspace.

（B）Create a role named admin-tenant-X, where X is the name of the group, and assign that role to manage the corresponding workspace.

（C）Configure a dedicated identity provider for each group to access their own workspace.

（D）Configure the global Active Directory and assign a workspace admin user to each group.

正解：C 解答を投票する

質問 10

A Platform Engineer is deploying a new NKP cluster that has internet connectivity. Now, a Cloud Administrator and Security Administrator are discussing the security of communications between the NKP Kubernetes cluster and the container registry. The engineer proposes to have an on-prem private registry.
What is the most significant reason that the engineer should create a private registry instead of configuring a secure connection between the NKP cluster and Github (SaaS)?

（A）NKP cannot connect to public clouds.

（B）Private registry license is included with NKP.

（C）NKP requires specific registry versions.

（D）Private registry provides security and privacy.

正解：D 解答を投票する

NCP-CN 無料問題集「Nutanix Certified Professional - Cloud Native v6.10」

弊社を連絡する

関連リンク

トップ試験