Ultimate Guide to Prepare NCP-CI-Azure Certification Exam for Nutanix Certified Professional (NCP) in 2025 [Q29-Q43]

NEW QUESTION 29
An administrator is planning to expand an NC2 on Azure cluster.
Which statement is true regarding prerequisites for expanding the cluster?

Cluster must be in a Cluster Stopped state.

Cluster must have at least three nodes.

Cluster must be in a Cluster Connected state.

Cluster must have at least five nodes.

NEW QUESTION 30
Which resource is capable of being connected to a private endpoint as it is not displayed on delegated subnets?

User VMs

Prism Central

Hosts

CVMs

NEW QUESTION 31
When configuring an alert email in Prism Central deployment within an NC2 environment, what is required in order for the emails to be sent properly?

SMTP server configured in Prism Central Settings

A whitelisted public cloud console endpoint

Cluster Super Admin permissions

Name servers configure in Prism Central

NEW QUESTION 32
An administrator is trying to determine which type of DNS server to deploy for a networking infrastructure in Azure.
Which DNS server option would require either VPN or ExpressRoute connectivity?

Cloudflare

Azure

On-premises

Google

NEW QUESTION 33
A new subnet needs to be created within Flow Virtual Networking to accommodate a new type of workload in the company’s NC2 Azure instance.
Which type of network will satisfy this task?

Underlay

Overlay

VPC

VNET

NEW QUESTION 34
An organization wants to use a Jump Host to access Prism Element and Prism Central within an NC2 cluster on Azure.
Which statement is true?

Jump Host instance must be deployed in the cluster VNet.

Jump Host instance can be deployed in the Prism Central VNet or an external VNet.

Jump Host must not be used. Only VPN or ExpressRoute should be use.

Jump Host instance can only be deployed in the Prism Central VNet.

NEW QUESTION 35
An administrator seeks to ensure that the newly-created NC2 organization named Finance can only deploy clusters into certain cloud regions.
Which action should the administrator take to do this?

Configure permissions in cloud accounts to restrict access to certain regions.

Open a support ticket with Nutanix to whitelist the allowed regions for the Finance N

Configure RBAC roles on the Finance NC2 organization to allow access to regions.

Specify allowed regions when configuring a cloud account for the Finance NC2 organization.

NEW QUESTION 36
An administrator is tasked with creating a new subnet for a group of VMs that require inbound internet access.
Internal private addresses must be obscured to servers on the public internet.
Which network is best suited for satisfying this requirement?

Bastion based network

No-NAT based network

Layer 2 Stretch network

NAT based network

NEW QUESTION 37
What will be observed in the NC2 cluster when terminating a node from the Azure portal?

NC2 will shutdown the node.

NC2 will continue re-provisioning the node.

NC2 will terminate the node from the cluster.

NC2 will mark the node as degraded.

NEW QUESTION 38
After creating a new Nutanix User VPC, what is needed to allow traffic to flow out of the Flow gateway VM when using the NATed Path?

Add a default route on the Transit VPC of 0.0.0.0/0 to the Flow Gateway.

Add a default route on the Nutanix User VPC of 0.0.0.0/0 to the External Overlay network.

Edit the External Flow Gateway Security Group on the External NIC to allow outbound traffic.

Edit the Internal Flow Gateway Security Group on the internal NIC to allow outbound taffic

NEW QUESTION 39
An administrator is tasked with adding an Azure account to the NC2 console. A requirement is to configure an Azure user that can open, close or extend a support tunnel for the Nutanix Support team.
Which permission must be assigned to the user?

Customer Auditor

Account Administrator

Cluster Administrator

Cluster Auditor

NEW QUESTION 40
A nutanix User VPC named Servers has a subnet named Tier1:
Servers: 10.0.0.0/20
Tier1: 10.0.0.0/25
Tier is using floating IPS to allow inbound traffic to the web servers that are hosted for a payroll system.
The company requires that the Network Security Group allow other Native Azure instances running in subnet AD (10.20.0.0/24) in the Prism Central VNet to be able to contact the web servers.
Which statement is true regarding this company requirement?

Native Azure instances n the Prism Central vNet will be allowed access by default.

The internal NIC of the Flow Gateway Network Security Group needs to allow to traffic from 1
10.20.0.0/24.

The external NIC of the Flow Gateway Network Security Group needs to allow traffic from
10.20.0,0/24.

Policy based routing in the Servers VPC must be edited to allow traffic from 10.20.0.0/24.

NEW QUESTION 41
Which statement best describes south bound traffic to a Nutanix User VPC originating outside the BC2 cluster when using a no-NAT (routed path) having two or more Flow Gateways (FGW)?

A BGP gateway runs on the CVM of the bare-metal hosts. The BGP gateway advertises externally routable IP addresses to the Azure Route Server, with each active FGW external IP address the next hop.

A BGP gateway runs inside of Prism Central. The BGP gateway advertises externally mutable IP addresses to the Azure Route Server, with each active FGW external IP address as the next hop.

A BGP gateway is deployed as Azure native VMs in the Prism Central VNet. The BGP gateway advertises externally routable IP addresses to the Prism Central, with each active FGW external IP address as the next hop.

A BGP gateway is deployed as Azure native VMs in the Prism Central VNet. The BGP gateway advertises externally routable IP addresses to the Azure Route Server, with each active FGW external IP address as the next hop.

NEW QUESTION 42
Native Azure VMs exist in a subnet (10.20.80.0/20) in the Prism Central VNet that need access to the workload running on the Nutanix User.
What needs to be modified to allow access from the native Azure VMs to the workloads running in the Nutanix User VPC?

Remove the ERP value on the transit VPC and Nutanix User VPC.

Change the ERP value to the the subnet range of the native Azure VMs (10.20.80.0/20) on the Transit VPC and the Nutanix User VPC.

Adjust the Inbound Network Security Group on the Flow Gateway VM External NIC to allow traffic
102030.0/20.

Adjust the Inbound Network Security Group on the Flow Gateway VM Internal NIC to allow traffic
102030,0/20.

NEW QUESTION 43
An administrator has setup a routed external network (No NAT) to use for workload running in NC2 clusters on Azure.
The applications are network intensive, so four gateways VMs have been deployed to meet the high demands.
One application server on the NC2 clusters is sending traffic to an outside Azure service.
How many flow gateway VMs will be used to distribute the traffic?

All four Flow Gateway instances will be used based on the ECMP default route that points 3 the external subnets in the Nutanix Transit VPC, but only for sending traffic. Return traffic by use one Flow Gateway VM.

two flow gateway instances will be used based on limitations from using MAC addresses to redistribute traffic.

Only one Flow Gateway instance will be used per source application running on NC2.

All four Flow Gateway instances will be used based on the ECMP default route that points to the external subnets in the Nutanix Transit VPC for sending and receiving traffic.