Nutanix NCP-CI-Azure Practice Test - Questions Answers

To allow access from the native Azure VMs to the workloads running in the Nutanix User VPC, the administrator needs to:

Adjust the Inbound Network Security Group (NSG) on the Flow Gateway VM's Internal NIC.

Specifically, allow traffic from the subnet range of the native Azure VMs (10.20.80.0/20) in the Inbound rules of the NSG associated with the Internal NIC of the Flow Gateway VM.

This configuration change permits the desired network traffic, ensuring that the native Azure VMs can communicate with the workloads in the Nutanix User VPC. Reference

Azure Network Security Groups Overview

Nutanix Networking and Security Best Practices

In the scenario presented, the NC2 cluster was initially deployed with two Flow Gateways (FGW1 and FGW2) in HA. After adding four bare-metal nodes and additional workloads, two more Flow Gateways (FGW3 and FGW4) were added to handle the increased bandwidth for north/south traffic. Given the configuration, the existing workloads can utilize all available Flow Gateways (FGW1, FGW2, FGW3, and FGW4) for No-NAT (routed) traffic paths. This setup allows for Equal Cost Multipath (ECMP) routing, distributing traffic load across all Flow Gateways.

Reference

Nutanix Flow Networking

When the administrator notices that the VMs cannot reach resources outside the network, even by IP address, it is likely that a default route was not configured for the external subnet. The default route is essential for directing traffic from the VMs to external networks. Without it, the VMs will not know how to route traffic to external destinations, which leads to connectivity issues.

Reference

Azure Virtual Network Documentation

Nutanix Flow Networking Best Practices

To connect the company's on-premises datacenter to the Azure cloud environment while avoiding traffic over the public internet, the administrator should use Azure ExpressRoute. ExpressRoute provides a private connection to Azure, offering more reliability, faster speeds, and lower latencies compared to typical internet connections. This service ensures that data traffic does not traverse the public internet, enhancing security and performance. Reference

Azure ExpressRoute Overview

For configuring connectivity between an on-premises datacenter and Azure, the two supported options are:

VPN (Virtual Private Network): Site-to-Site VPN allows you to create a secure connection from your on-premises network to Azure over the public internet using IPsec/IKE protocols.

ExpressRoute: Provides a private connection between your on-premises infrastructure and Azure, ensuring traffic does not traverse the public internet.

Both options provide secure and reliable connectivity, with ExpressRoute offering enhanced performance and security due to its private connection. Reference

Azure VPN Gateway

Azure ExpressRoute Overview

To efficiently terminate a Nutanix cloud cluster, the NC2 (Nutanix Cloud Clusters) Console should be used. The NC2 Console provides the necessary tools and interface specifically designed for managing and terminating Nutanix clusters within cloud environments, ensuring a seamless and efficient process. Reference

Nutanix Cloud Clusters Documentation

When selecting the NC2 subscription plan from the Nutanix billing portal, the available options are:

Pay-as-you-Go (PayG): Allows you to pay for the services as you use them, providing flexibility and avoiding upfront costs.

Bring your own License (BYOL): Enables you to use your existing Nutanix licenses within the cloud environment, offering cost savings if you already have licenses.

These options provide flexibility in how you can manage and pay for your Nutanix cloud clusters. Reference

Nutanix Cloud Clusters Pricing and Plans

Azure Subscription Validation: When deploying an NC2 cluster, the Azure subscription must be validated and allowlisted by Microsoft. This is a crucial step to ensure that the necessary permissions and configurations are set up for the deployment.

Booting State Issue: If the nodes are stuck in the Booting state, it often indicates that the subscription has not been properly validated and allowlisted. This prevents the deployment from progressing as required resources and permissions are not fully accessible.

Checking Allowlisting Status: Administrators should verify that their subscription has been allowlisted by contacting Azure support or checking the status through the Azure portal.

Resolution: Once the subscription is validated and allowlisted by Microsoft, the deployment should proceed without the nodes getting stuck in the Booting state.

Nutanix NC2 on Azure Documentation

Azure Subscription Management

Storage Capacity Requirement: The requirement specifies that the bare metal instance must support up to 20 TB of storage capacity.

Instance Selection: Among the provided options, the AN36P instance is designed to support higher storage capacities and performance needs.

AN36P Capabilities: The AN36P instance is optimized for storage-intensive applications and provides the necessary hardware specifications to handle up to 20 TB of storage.

Comparison with Other Instances:

ND96asr: Typically optimized for GPU workloads rather than storage.

AN36: May not meet the 20 TB storage requirement.

HB176rs: Geared towards high-performance computing rather than large storage capacities.

Conclusion: Based on the requirements and instance specifications, AN36P is the most suitable choice for supporting up to 20 TB of storage.

Nutanix NC2 Instance Types

Azure Virtual Machine Sizes