NCP-NS-7.5 試験問題と解答 - 模擬練習 - 練習問題・模擬試験

Question No : 1
Refer to the exhibit.

How should an Application Policy be created whose rules apply only to vNIC1 of VM1?

A.Create an Entity Group with Cat:SubnetA and Cat:VM1 and then add the Entity Group as Secured Entity to the Application Policy.
B.Add Cat:SubnetA as secured entity in the Application Policy.
C.Create an Entity Group with Cat:SubnetA, Cat:SubnetB and Cat:VM1 and then add the Entity Group as Secured Entity to the Application Policy.
D.Add Cat:SubnetA and Cat:VM1 as secured entity in the Application Policy.

正解:

Question No : 2
The alert details mention a specific external network. Attempts to assign new Floating IPs to VMs fail, but existing Floating IPs continue to work.
What is the cause of this alert?

A.A firewall is blocking communication between Prism Central and the VPC's virtual router.
B.The VPC's connection to the external network is down.
C.A firewall is blocking communication between Prism Central and the VPC's virtual router.
D.There are no more available IP addresses in the address pool configured for Floating IPs in that external network.

正解:

Question No : 3
An administrator is building a new VPC in Prism Central to isolate a test environment. The administrator plans to connect it to an external network later, but they want to complete the initial creation first.
Which configuration items are the minimum required to successfully create the VPC?

A.VPC name and one External Access VLAN
B.VPC name and Transit VPC toggle switch
C.VPC name and one Overlay Subnet
D.VPC name and cluster selection

正解:

Question No : 4
An administrator has a requirement to capture application flow data for a policy in Monitor mode and export those events to an external SIEM for correlation with other logs.
Which two actions are required to achieve this? (Choose two.)

A.Enable IPFIX export on the monitored policy.
B.Enable Policy Hit Logging on the monitored policy.
C.Create a Flow Audit Policy on the monitored policy.
D.Configure a remote syslog destination in Prism Central.

正解:

Question No : 5
An administrator needs to use Prism Central to identify a subnet belonging to a VPC.
How can the administrator identify networks associated with a VPC within Prism Central?

A.There will be a valid IP Prefix for the subnet.
B.The subnet will reference multiple clusters.
C.The subnet will have a non-zero VLAN I
D.The subnet will be identified as type Overlay.

正解:

Question No : 6
What entity is automatically created on the cluster hosting Prism Central when Microsegmentation is enabled?

A.A storage container named flow_data is created.
B.A Bucket named flow_data is created.
C.A File Share named flow_data is created.
D.A virtual machine named flow_data is created.

正解:

Question No : 7
An administrator has configured a VPC and associated a NAT external network. A virtual machine connected to a subnet within this VPC is required to be accessible externally.
What action must the administrator take to accomplish this?

A.Configure a static route on the VPC's routing table.
B.Create a Network Security Group allowing inbound traffic.
C.Assign a Floating IP address to the virtual machine.
D.Attach a second interface to the virtual machine.

正解:

Question No : 8
Which policy type takes highest precedence in Enforce mode?

A.Application
B.Isolation
C.Quarantine
D.Shared Service

正解:

Question No : 9
An organization plans to apply security controls based on user group membership in Active Directory.
What configuration is required in Prism Central before VDI policies can be used?

A.Map category assignments to roles using RBAC settings.
B.Create the list of users and assign categories to them.
C.Assign categories to identities in the Admin Center.
D.Configure category values mapped to AD groups.

正解:

Question No : 10
Refer to the exhibit.

A VM with IP address 172.20.9.5 resides on a subnet with CIDR 172.20.9.0/24. The VPC is successfully peered via BGP with an external router... External networks outside the VPC are unable to reach the VM.
What configuration change should be made to enable reachability for the VM?

A.Modify the ERP values within the VPC to advertise a CIDR of 172.20.8.0/22
B.Apply a PBR rule for the VM's address forwarding traffic to the IP of the No-NAT external Gateway address
C.Apply a default route to the VPC sending all traffic to the NAT External Network
D.Associate a NAT external network to the VPC and apply a floating IP address to the VM

正解:

Question No : 11
An administrator is configuring a Nutanix environment for Flow Network Security Next-Gen.
Where should the MTU be set to ensure that Geneve encapsulation overhead is properly accounted for?

A.On the CVM's virtual network interfaces
B.On the AHV host's physical network interfaces
C.On the virtual switch within Prism Central
D.On the upstream virtual router

正解:

Question No : 12
An administrator creates an Isolation Policy in Prism Central to prevent communication between the Prod and Staging environments.
The policy is in Enforce mode... but VMs in the two environments can still communicate.
Which configuration issue most likely explains why the Isolation Policy is not blocking the traffic?

A.The Isolation Policy does not specify any services/ports, so no traffic is matched for enforcement.
B.Isolation Policies restrict north-south communication when associated with a VPC gateway, not east-west traffic between categories.
C.An Application Policy allows traffic between the same categories, overriding this policy.
D.The Prod and Staging categories have not been assigned to the VMs, so the policy does not apply.

正解:

Question No : 13
Which statement accurately describes the behavior of a Flow Network Security policy operating in Monitor mode?

A.All matching traffic is discovered and denied, but not allowed.
B.Traffic is blocked unless it matches an "allow" rule in Enforce mode.
C.Only East-West traffic is discovered, but North-South traffic is not.
D.All matching traffic is discovered and allowed, but not blocked.

正解:

Question No : 14
In a Nutanix deployment, when is the Network Controller automatically enabled?

A.When the Small Prism Central deployment is scaled out to three PCVM's
B.When the Network Controller is manually configured from the Prism Central settings page
C.When the Network Controller is enabled on a Hyper-V cluster
D.When the X-Large Prism Central deployment is installed or upgraded

正解:

Question No : 15
An administrator is deploying a multi-tier (web, app, database) application on a Nutanix cluster using AHV. The administrator needs to allow internal communication between tiers and provide external access to the web tier.
How should the administrator satisfy this requirement?

A.Create separate VLAN networks for each tier and configure routing on the physical network.
B.Create a VPC with a single subnet and assign workloads of each tier to this subnet.
C.Create separate VPCs for each tier and connect them to the same external NAT network and configure routing policies for inter-tier traffic.
D.Create a VPC with subnets for each tier and configure the Externally Routable Prefix to include only web subnets.

正解:

Nutanix NCP-NS-7.5 問題練習