Free Nutanix NCP-NS-7.5 Exam Questions

Question 1

How can the administrator discover the root cause of the issue?

A : Confirm that Inter-VM connectivity is enabled within the VM networking settings and that VMs in the Database tier are configured correctly to accept inbound traffic.

B : Check if traffic isolation has been configured on the Database tier and ensure that there is no policy preventing App tier communication with the Database tier.

C : Check the security policies again to ensure that the rule allowing port 3306 from Web -> Database is applied and active, then check the policy enforcement mode to ensure it is in Enforcement Mode.

D : Verify that the port 3306 is open on the external gateway and that SNAT is not being applied for internal communication.

Answer: C

Question 2

How can the administrator discover the root cause of the issue?

A : Confirm that Inter-VM connectivity is enabled within the VM networking settings and that VMs in the Database tier are configured correctly to accept inbound traffic.

B : Check if traffic isolation has been configured on the Database tier and ensure that there is no policy preventing App tier communication with the Database tier.

C : Check the security policies again to ensure that the rule allowing port 3306 from Web -> Database is applied and active, then check the policy enforcement mode to ensure it is in Enforcement Mode.

D : Verify that the port 3306 is open on the external gateway and that SNAT is not being applied for internal communication.

Answer: C

Question 3

An administrator receives a ticket reporting unwanted traffic between production and development servers. The administrator reviews the Flow Network Security logs and finds the following:How can the administrator resolve the issue?

A : Update the policy to disallow the unwanted traffic.

B : Move the servers to separate IP subnets.

C : Enable the Network Controller for the policy

D : Change the enforcement mode for the policy

Answer: A

Question 4

In the AD-VDI Departmental SecPol policy shown in the exhibit, ADGroup: Engineering is configured as a secured entity in a VDI Security Policy. Prism Central shows 2 / 2 active sessions under this group, but the administrator confirms that three Engineering users are currently logged in to persistent VDI desktops. The third user's VM shows no ADGroup assignment in its VM details in Prism Central, even after the user has successfully logged in. All three users are members of the same AD group, and the Domain Controller event logs confirm a successful interactive login for the third user. Which condition explains why the third user's VM is not being assigned the ADGroup: Engineering category?

A : The Active Directory Service account used by Prism Central is locked.

B : The third user's VM has been assigned an AppType category, preventing ID-Based categorization.

C : The Flow Identity Service has been disabled in Prism Central for the VM the third user is logging in to.

D : The Flow Network Security policy scope does not include the VLAN where the third user's VM resides.

Answer: B

Question 5

Which statement is correct about cloning Application Security Policies?

A : The system prevents saving the cloned policy if it has the same secured entities as the original.

B : The policy type can be changed while cloning a policy.

C : Only one policy can be cloned at a time.

D : The default name of the cloned policy must be manually entered; the system does not provide a default.

Answer: B