Nutanix NCS-CORE Online Practice Questions and Exam Preparation

Nutanix NCS-CORE Online Questions & Answers

• Question 211:

  Refer to the exhibit.

  

  An administrator creates a security policy that isolates their financial application from accessing the Internet When viewing the policy in Prism Central, several connections from the application are outbound to the Internet. What is causing this issue with the policy?

  A. The 0.0.0.0 address was not specified in the outbound rule.
  B. The blocked connections are illustrated for information only.
  C. The Activate box was not checked in the rule, so it is not enforcing.
  D. The policy has been left in monitor mode instead of enforcing mode.
  D. The policy has been left in monitor mode instead of enforcing mode.

  ---

  Explanation/Reference:

  https://portal.nutanix.com/page/documents/details?targetId=Prism-Central-Guide-Prism-v510:mul-security-policy-management-pc-c.html

• Question 212:

  A consultant and customer agree on a scope of services regarding the deployment of a new Nutanix cluster.

  Which two products does this scope apply to? (Choose two.)

  A. Foundation
  B. Flow
  C. X-Ray
  D. Prism Central
  A. Foundation
  D. Prism Central

  ---

  Explanation/Reference:

  The scope of services for the deployment of a new Nutanix cluster would apply to both Foundation and Prism Central. Foundation is the initial software used for deploying Nutanix nodes and creating clusters, essential for setting up the environment. Prism Central is used for managing multiple clusters and is integral to the operational scope of the service, providing centralized management capabilities.References: Nutanix Bible, Nutanix University NCS-Core 6.8 learning materials

• Question 213:

  A consultant has finished imaging all assigned clusters and is ready to close out the engagement Which action is part of the Closeout Checklist?

  A. Provide an overview of Nutanix NDB.
  B. Provide an overview of Nutanix NC2.
  C. Provide an overview of Nutanix Prism Central.
  D. Provide an overview of Nutanix Self-Service.
  C. Provide an overview of Nutanix Prism Central.

  ---

  Explanation/Reference:

  During the closeout of a cluster imaging engagement, a key action to include in the Closeout Checklist is:

  Provide an overview of Nutanix Prism Central: This is crucial as Prism Central is the management and operations platform for Nutanix environments, providing visibility and control over clusters and workloads. Giving an overview of this tool is

  essential for the customer to manage their newly imaged clusters effectively.

  References:

  Nutanix Bible (https://www.nutanixbible.com), where management tools like Prism Central are discussed.

  Nutanix University: NCS-Core 6.8 Training (https://university.nutanix.com), which includes training on using Prism Central for cluster management.

• Question 214:

  An administrator is planning to deploy a Nutanix cluster to support a few high-performance VMs. This deployment will have the following considerations:

  1.

  Individual VMs will likely generate network throughputs in the range of 90-100Mbps

  2.

  Due to the configuration of the VMs, it is unlikely that a node will host more than one or two of them at a time

  3.

  Individual VMs will communicate with only a few (one or two) remote hosts at a time

  4.

  Multicast will not be used in the environment

  5.

  The hosts are connected via two 1GbE network connections

  How should the administrator configure the network bonds to meet this requirement while maintaining the simplest switch configuration?

  A. Configure bond0 as balance-sib
  B. Configure bond0 as active-backup
  C. Configure bond0 as balance-tcp
  D. Configure bond0 as balance-lacp
  A. Configure bond0 as balance-sib

  ---

  Explanation/Reference:

  https://portal.nutanix.com/page/documents/solutions/details?targetId=BP-2071-AHV-Networking:top_ahv_networking_best_practices.html

• Question 215:

  After uploading a hypervisor ISO during the Foundation process, a consultant sees a message that the MD5 sum for the hypervisor is not found in the Whitelist file. Which step should the consultant take next to resolve this issue?

  A. Download the hypervisor ISO again from the vendor website.
  B. Restart the Foundation process and upload the hypervisor again.
  C. Download the latest hypervisor ISO whitelist file from Nutanix portal.
  D. Check the hypervisor version in the Nutanix Compatibility Matrix.
  C. Download the latest hypervisor ISO whitelist file from Nutanix portal.

  ---

  Explanation/Reference:

  When a consultant sees a message indicating that the MD5 sum for the hypervisor is not found in the Whitelist file after uploading it during the Foundation process, the appropriate step is to download the latest hypervisor ISO whitelist file from

  the Nutanix portal (Option C). This file contains the approved checksums for various ISO images, ensuring that the hypervisor ISO being used is verified for compatibility and integrity.

  References:

  Nutanix Foundation Guide, Nutanix Support Portal.

• Question 216:

  An organization is running a Nutanix Cluster based on AOS 5.10.x and VMware vSphere 6.7. Currently, the CVM network is segmented and Storage only nodes not present. A new security project based on NSX is coming. VMware Distributed Virtual Switches are required. The administrator needs to prepare the environment for the new project. Which step should the administrator use to initiate the project?

  A. Enable Nutanix Flow at the Prism Central Level
  B. Manually disable CVM network Segmentation
  C. Convert storage only nodes into vSphere nodes
  D. Enable Jumbo Frames to accommodate network frames
  B. Manually disable CVM network Segmentation

  ---

  Explanation/Reference:

  In preparing for the VMware NSX security project, the administrator should consider the network infrastructure and how the NSX will interact with the existing Nutanix environment. VMware NSX requires the use of VMware Distributed Virtual Switches. In the given scenario, where the CVM (Controller Virtual Machine) network is segmented and storage-only nodes are not present, the key step is to ensure that the network settings are compatible with NSX. Disabling the CVM network segmentation allows for a unified network that supports the requirements of NSX for network virtualization and security, making it the crucial first step before any further NSX-specific configurations are applied.References: Nutanix Bible, Nutanix Community discussions, VMware NSX documentation.

• Question 217:

  The installation process stops before imaging any of the nodes and an error message is displayed notifying the IPMI IP address is unreachable.

  What should consultant do to fix the issue?

  A. Ensure the Foundation VM is not in the same broadcast domain as the Controller VMs.
  B. Re-try Foundation using a non-flat switch.
  C. Check the service. log and the individual node log files for more detailed information.
  D. if the nodes are in the same subnet go to the Cluster page and configure multi-homing.
  C. Check the service. log and the individual node log files for more detailed information.

  ---

  Explanation/Reference:

  When facing an error during the installation process that the IPMI IP address is unreachable:

  Check the service.log and the individual node log files for more detailed information: Reviewing these log files will provide insights into what might be causing the IPMI connectivity issue, offering specific error messages or network

  configuration problems that need resolution.

  References:

  Nutanix Bible (https://www.nutanixbible.com), where troubleshooting and log analysis are discussed.

  Nutanix University: NCS-Core 6.8 Training (https://university.nutanix.com), focusing on Foundation troubleshooting and the use of log files to diagnose installation issues.

• Question 218:

  For a new AHV cluster installation, a customer has 20 NX-8155-G6 nodes with quad port SFP NICs.

  The customer wants to meet the following guidelines:

  1.

  Take advantage of all available 10GbE links

  2.

  Achieve maximum throughput per VM

  3.

  Use of redundant ToR switches

  4.

  Fastest reconvergence during link failure

  How should the load balancing be configured on the host?

  A. ovs-vsctl set port br0-up bond_mode=balance-slb ovs-vsctl set port br0-up other_config:bond-rebalance-interval=30000 ovs-vsctl set port br0 tag=10
  B. ovs-vsctl set port br0-up bond_mode=active-backup ovs-vsctl set port br0-up other_config:bond-rebalance-interval=30000
  C. ovs-vsctl set port br0-up bond_mode=balance-slb
  D. ovs-vsctl set port br0-up other_config:lacp-fallback-ab=true ovs-vsctl set port br0-up lacp=active ovs-vsctl set port br0-up bond_mode=balance-tcp
  D. ovs-vsctl set port br0-up other_config:lacp-fallback-ab=true ovs-vsctl set port br0-up lacp=active ovs-vsctl set port br0-up bond_mode=balance-tcp

  ---

  Explanation/Reference:

  In a Nutanix AHV cluster configuration with multiple NICs and ToR switches, achieving high throughput and maintaining link redundancy are critical. The configuration provided in Option D utilizes LACP (Link Aggregation Control Protocol) with active mode, which allows for aggregating multiple network connections in parallel to increase throughput and provide redundancy. The balance-tcp mode of the bonding ensures optimal traffic distribution based on the TCP session, ensuring each session can utilize maximum available bandwidth across multiple links. This setting is crucial for environments requiring high network performance and reliability.

  References: Nutanix Bible Nutanix University NCS-Core Materials

• Question 219:

  How should a consultant verify that a Nutanix cluster can tolerate a single-node failure?

  A. [root@cvm~]# ncli cluster get-domain-fault-tolerance-status type=node
  B. nutanix@cvm~$ ncli cluster get-domain-fault-tolerance-status type=node
  C. [root@avh~]# ncli cluster fault-tolerance-status type=node
  D. nutanix@cvm~$ ncli cluster status type=node
  B. nutanix@cvm~$ ncli cluster get-domain-fault-tolerance-status type=node

  ---

  Explanation/Reference:

  To verify that a Nutanix cluster can tolerate a single-node failure, the consultant should use the command nutanix@cvm~$ ncli cluster get-domain-fault-tolerance-status type=node . This command is executed from the Controller Virtual Machine (CVM) and checks the cluster's fault tolerance status specifically for node failures, providing insights into how the cluster's data resiliency and redundancy configurations are holding up against potential single-node failures.References: Nutanix CLI Guide, Nutanix Fault Tolerance Documentation.

• Question 220:

  A consultant is showing the Prism Element Web Console to a customer and wants to check that cluster health is OK. During validation, the Health menu raises critical alerts about components using default passwords.

  The cluster is based on ESXi as hypervisor, where Prism Central and Nutanix Files are deployed. Passwords have already been changed for a few components, but some of them have been left by default.

  How can the consultant check and handle that situation?

  A. Activate Cluster lockdown in Prism Element.
  B. Check accounts and passwords in Local User Management in the vCenter.
  C. Check NCC results and review the associated KB.
  D. Deploy and connect the cluster to Prism Security Central.
  C. Check NCC results and review the associated KB.

  ---

  Explanation/Reference:

  To address critical alerts about components using default passwords in the Prism Element Web Console:

  Check NCC results and review the associated KB: The Nutanix Cluster Check (NCC) tool can identify security vulnerabilities, including default password usage. Reviewing the results and associated knowledge base articles provides specific

  guidance on changing these passwords to secure the environment.

  References:

  Nutanix Bible (https://www.nutanixbible.com), specifically sections on cluster health checks and security practices.

  Nutanix University: NCS-Core 6.8 Training (https://university.nutanix.com), which includes instruction on using NCC for cluster validation and security enhancements.