NCP-NS Exam Training Practice Tests (Nutanix Certified Professional Network & Security v6.10)]

Question 1

What does placing a policy in Monitor mode accomplish?

A. Blocks traffic that does not match the policy. B. Redirects discovered traffic to a monitoring device. C. Visualizes discovered traffic that matches the policy. D. Enables hitlogs for traffic that matches the policy.

Correct Answer: C

Question 2

Flow Network Security Next-Gen is supported in which two environments? (Choose two.)

A. On-Premises Overlay Networks B. On-Premises VLAN Basic Networks C. NC2 VLAN Networks D. NC2 Overlay Networks

Correct Answer: A,D

Question 3

Which statement best describes the function of an External Network in Flow Virtual Networking?

A. It acts as the entry and exit point for traffic to and from a VPC. B. Each VPC requires a dedicated External Network that cannot be shared. C. It enables communication between subnets within a VPC. D. It enables communication between VPCs.

Correct Answer: A

Question 4

An administrator is designing a Transit VPC to provide shared corporate services (e.g., DNS) for two tenant VPCs:
VPC-A requires WAN access using NAT.
VPC-B requires WAN access without NAT.
Both VPCs connect to the Transit VPC for shared services hosted on the corporate network.
Shared services residing in the Transit VPC use routed IP addressing for WAN connectivity.
Which two configuration elements should the administrator implement on the Transit VPC? (Choose two.)

A. Use one Overlay external subnet in the Transit VPC to which both VPCs will connect. B. Associate both a NAT and a No-NAT external VLAN to the Transit VPC to support separate egress paths. C. Create two Overlay external subnets in the Transit VPC: one for VPC-A and one for VPC- D. Associate one No-NAT external VLAN to the Transit VPC router for underlay connectivity.

Correct Answer: A,D

Question 5

While configuring a new security policy in a Nutanix microsegmentation environment, an administrator wants the policy to remain flexible even if virtual machines change subnets or obtain new IP addresses.
Which configuration approach should the administrator use when defining the policy scope?

A. Assign IP addresses manually to all VMs included in the policy. B. Apply the policy after setting static routes for each VM. C. Configure the policy only on specific VLAN IDs. D. Use VM categories to define the secured and allowed entities.

Correct Answer: D

Question 6

Which prerequisite is required before enabling Flow Network Security Next-Gen micro segmentation?

A. The environment must use ESXi as the hypervisor. B. A Flow license is optional and cannot be installed later. C. All workloads should be on VLAN networks. D. Network Controller must be enabled in Prism Central.

Correct Answer: D

Question 7

During a security review, the administrator confirms that the existing security policy does not explicitly allow traffic from Environment: Development to Environment: Production. A VM in the Development category was still able to reach a Production VM over IPv6.
What is the most likely cause of this behavior?

A. An isolation policy was incorrectly applied instead of an application policy. B. The Allow All IPv6 option in the policy was selected. C. The VM was using a static IPv6 address. D. The policy was misconfigured and allowed all Layer 2 broadcast traffic.

Correct Answer: B

Nutanix Certified Professional Network & Security v6.10 - NCP-NS Exam Practice Test