When creating an NC2 cluster in AWS, what are the required permissions for the account used to run the CloudFormation script?

lAMFullAccess, AmazonEC2FullAccess, AWSCIoudFormationFullAccess

IAMAccess, AmazonCloudDirectoryFullAccess, AWSCIoudFormationFullAccess

lAMAccess, AWS_ConfigRole, AWSCIoudFormationFullAccess

lAMFullAccess, AmazonEC2FullAccess, AWSCIoudFormationFullAccess

lAMUserSSHKeys, AWS_ConfigRole, AWSCIoudFormationFullAccess

Which NC2 user role will allow full access to clusters created within an organization?

Organization Security Administrator

Which statement is true regarding AWS account requirements?

AWSCloudFormationFullAccess role is required to create a CloudFormation stack.

IAMFullAccess permission gets configuration details for supported AWS resources.

AWSCloudFormationFullAccess role is required to create a CloudFormation stack.

An AWS root user can be used for any deployment or operations related to NC2.

NC2 on AWS uses AWS Secrets Manager for maintaining any stored secrets.

The cluster is configured as follows:* 8 nodes* Prism Central Deployed* Files DeployedFollowing the deployment, the administrator experiences network connectivity issues.Which reason explains the connectivity issues?

The 192.168.5.0/24 range is reserved for internal cluster usage.

The 192.168.5.0/24 range is not a valid CIDR range.

The 192.168.5.0/24 range is reserved for internal cluster usage.

The 192.168.5.0/24 range does not have enough IP addresses available.

The 192.168.5.0/24 range is reserved by IANA,

An administrator is attempting to deploy an NC2 cluster.The cluster configuration is as follows:* Name - Cluster-1* Nodes of type i4i.metal* Replication Factor 2* Existing VPC resources* VPC - 10.0.0.0/16* Subnets:* Bare metal hosts: 10.0.1.0/24* User VMs:10.0.2.0/24* Public: 10.0.3.0/24During the deployment process, the administrator notices the following alert: What should the administrator do to ensure the cluster deployment does not fail?

Ensure an outbound Internet connection exists from 10.0.1.0/24.

Create a new VPC and modify the cluster configuration to use the new VPC.

Check AWS VPC and subnet quotas for the cloud account.

Ensure an outbound Internet connection exists from 10.0.1.0/24.

Modify the administrator's RBAC permissions in the NC2 console.

What role is needed to create a cluster?

Customer Security Administrator

An administrator is tasked with enabling inbound internet access to two Virtual Servers in an NC2 cluster on AWS for the HTTPs protocol.The cluster is configured with:* 8 nodes* Prism Central* 3 x User VM subnetsAll subnets have been configured and can communicate with Internet-based resources as well as on-premises servers. The company d to allow Internet access, so the administrator must implement an AWS solution.Which approach will enable the necessary communication?

Create a AWS Network Load Balancer, configure the listener TCP port as 443, create a target group and register an HP as the endpoint.

Create a WS Network Load Balancer, configure the listener TCP port as 80, create a target groud and register the servers as the endpoint

Create a AWS Network Load Balancer, configure the listener TCP port as 443, create a target group and register an HP as the endpoint.

Create a AWS Network Load Balancer, configure the lister TCP port as 433, create a target group and register an EIP as the Endpoint.

Create a AWS Network Load Balancer, configure the listener TCP port as 80, create a target group and register the servers as targets.

preparing the landing zone networking resources for a Nutanix cluster on AWS. The administrator has created a VPC with two private subnets: one for cluster management and one for user VMs.What additional subnet must the administrator create?

Public subnet for Internet access

Private subnet for Prism Central

An organization wants to control network traffic at the individual User VM (UVM) subnet level.Which action will help achieve this goal?

Create a custom security group.

Modify the default UVM security group.

Modify the user management security group.

Modify the internal management security group.

When configuring an alert email in Prism Central deployed within an NC2 environment, what is required in order for the emails to be sent properly?

SMTP server configured in Prism Central settings

Cluster Super Admin permissions

Name servers configured in Prism Central

A whitelisted public cloud console endpoint

An administrator has deployed an NC2 on AWS cluster and doesn't have connectivity back to the on-premises environment yet. The administrator wants to SSH into a CVM to edit a security setting and has deployed a Jump Host into an existing public subnet.What action must the administrator still take to gain access to the CVM?

Edit the User Management Network Security Group to allow SSH from the Jump Host IP.

Edit the CVM iptables to allow SSH.

Edit the User Management Network Security Group to allow SSH from the Jump Host IP.

Edit the UVM security group to allow SSH from the Jump Host IP and remove Cluster Lockdown.

Create Custom Network Security Group at the subnet level and add the IP address of the Jump Host

An administrator needs the permissions to create and manage multiple organizations and clusters in NC2, as well as manage user access for the entire company.What role should be assigned to meet the minimum requirements of this task?

Customer Security Administrator

An administrator needs to create user VM subnets for multiple NC2 clusters in AWS.What would be the best approach to take?

Create guest-VM subnets for each cluster.

Create guest-VM VNets for each cluster.

Use the cluster management subnet dedicated to each cluster.

Create guest-VM subnets to be shared by all clusters.

Create guest-VM subnets for each cluster.

An administrator has been tasked with deploying an NC2 cluster on AWS with the requirement to protect workloads. Which two options are valid to protect the workloads on this cluster? (Choose two.)

Create a second NCZ cluster in a different availability zone.

Deploy one-node cluster in another availability zone.

Create a second NCZ cluster in a different availability zone.

Use an existing on-prem Nutanix cluster as a disaster recovery target.

Deploy a cluster across two availability zones.

Exhibit. An administrator is attempting, but failing to create an NC2 cluster in AWS. The administrator checks the configuration in the NC and notices the configuration shown in the exhibit.What action should the administrator take to resolve the issue?

Create a new cloud account in the organization.

Recreate the AWS CloudFormation stack.

Create a new cloud account in the organization.

Restart Genesis on a Prism Central instance.

Grant the administrator's account access to the NC2 organization.

An administrator has created an NC2 cluster on AWS, but the NC2 console has issued this alert: Which two scenarios could have resulted in the cluster creation failure? (Choose two.)

AWS Quota exceeded/instance limit exceeded

Bad Terraform (TF) state in provisioning

AWS Quota exceeded/instance limit exceeded

An administrator has deployed an NC2 cluster in AWS.The following configuration decisions were made:Created a new VPC from the NC2 console as part of the deploymentSelected the Public option for prism access policyHost type selected was i13en,metalThe administrator now has a goal of provision public internet access to a user VM (UVM),web-1, on the Nutanix cluster. The admin can access Prism Element via the public DNS of the Auto-created load balancer.The administrator tries to create another network load balancer for the web server access. After creating the load balancer and registering web-1's IP address as a target, the administrator finds that the health check for the VM target is failing and the DNS returns as NOT Found message in the browser.Why is the issue happening?

The administrator has not assigned a public IP to web-1.

The load balancer is still in a Provisioning state.

The administrator has not modified the inbound rules under the UVM security group to a/low the network load balancer to access the UVM subnet.

The administrator has not assigned a public IP to web-1.

The administrator needs to provision an application load balancer instead of a network load balancer to allow Internet traffic to access the UVM subnet.

Which two options are prerequisites for deploying an NC2 on AWS cluster? (Choose two.)

An on-premises Prism Central environment

Which address must AWS Directory Service be able to resolve when deploying a new NC2 cluster?

gateway-external-api. cloud, nutanix.com

gateway-internal-api.cloud.nutanix.com

gateway-external-api. cloud, nutanix.com

An administrator has noticed the company's NC2 free trial expired 60 days ago.What should the administrator do to continue using all of the NC2 features on existing clusters?

Switch to a paid subscription plan.

Nothing. The clusters will have full feature support.

Contact Nutanix support to redeploy the cluster.

An administrator has deployed NC2 on AWS. The cluster deployment completed successfully.After deployment, the administrator created a subnet in AWS, added it as a network in Prism Element, deployed Prism Central using the newly-configured network, and registered the cloud cluster with it.The on-premises network and AWS are connected via a Site-to-Site VPN. Cluster nodes, CVM, and Prism Central can communicate with each other, but cannot be accessed from the on-premises network.What two issues might be the cause of this problem? (Choose two.)

Traffic from the on-premises network is not permitted by VM and Management security groups.

The AWS VPC traffic is blocked by a firewall in the on-premises network.

AWS Direct Connect must be used to establish connection between AWS and on-premises

Traffic from the on-premises network is not permitted by VM and Management security groups.

The AHV firewall is blocking traffic from the on-premises network.

The AWS VPC traffic is blocked by a firewall in the on-premises network.

An administrator is investigating reports of network congestion on their NC2 deployment.As part of the investigation, a packet capture is taken from a group of user VMs. During the analysis of the packet capture, it is observed that user VMs are receiving multicast traffic unexpectedly.What action should the administrator take to resolve the issue?

Enable IGMP snooping on the AHV hosts

Disable DHCP snooping on the upstream network

Enable IGMP snooping on the AHV hosts

Enable DHCP snooping on the upstream network

Disable IGMP snooping on the AHV hosts

An administrator is deploying an NC2 cluster into an existing AWS VPC.The cluster deployment fails, with the following error message: Why has the deployment failed?

The administrator has not created the necessary Security Group.

The administrator has not configured the Security Group to manage the shared subnet.

Shared subnets are not supported for Nutanix clusters.

Outbound Internet access is not configured on the VPC.

An administrator is experiencing problems with several operations, including VM IP address assignment validations, VM power-on and VM power-off operations.Whenever a related operation is performed, an alert is generated in the NC2 console indicating that the Cloud API endpoints are unavailable.The issue was further investigated and it was determined that NC2 is unable to make API calls to the underlying cloud infrastructure due to network connectivity misconfigurations.Which two connectivity misconfigurations could be causing this issue? (Choose two.)

Route tables for cloud subnets contain incorrect route entries.

IAM roles and policies are incorrectly configured.

AWS VPC endpoints are used for connectivity to AWS services.

Subnets are connected to the Internet via NAT gateways.

Route tables for cloud subnets contain incorrect route entries.

IAM roles and policies are incorrectly configured.

Nutanix NCP-CI-AWS Practice Test 1 - Free Online Exam Questions 1-40

An administrator has been asked to create a cluster to support new workloads.

What are the maximum number of nodes supported in AWS?

14 nodes

18 nodes

24 nodes

28 nodes

Comment (0)

Nutanix NCP-CI-AWS Practice Test 1

Question

Nutanix NCP-CI-AWS Practice Tests

Practice Tests