Halloween Sale Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: merry71

Free Nutanix Certified Professional - Network and Security (NCP-NS) 7.5 Practice Questions

Question # 1

An administrator is designing a new Transit VPC to service multiple Tenant VPCs. While adding subnets, the administrator must choose the correct network type supported by Flow Virtual Networking for this VP

C.  

Which network type is supported for subnets inside a Transit VPC in Flow Virtual Networking?

Options:

A.  

Overlay subnets

B.  

VLAN Basic subnets

C.  

VLAN subnets

D.  

VXLAN subnets

Discussion 0
Question # 2

Which policy is used to isolate a compromised VM in the most efficient way possible?

Options:

A.  

Isolation Policy

B.  

Quarantine Policy

C.  

Shared Service Policy

D.  

Application Policy

Discussion 0
Question # 3

Which statement accurately describes the behavior of a Flow Network Security policy operating in Monitor mode?

Options:

A.  

All matching traffic is discovered and denied, but not allowed.

B.  

Traffic is blocked unless it matches an "allow" rule in Enforce mode.

C.  

Only East-West traffic is discovered, but North-South traffic is not.

D.  

All matching traffic is discovered and allowed, but not blocked.

Discussion 0
Question # 4

Refer to Exhibit:

Question # 4

An administrator is tasked with configuring an application policy for a two-tier public website with Web and DB components. The database servers need to communicate with each other for replication, but the web servers should not be able to communicate with each other. The administrator configures the policy... and sets it to Enforce mode. Later testing reveals that the web servers are able to communicate with each other. What should the administrator do to resolve this?

Options:

A.  

Create an isolation policy for the PubSite-Prod-Web entity group.

B.  

Edit the PubSite-Prod-Web entity group's intra-tier rule.

C.  

Configure a VPC Network Policy to deny the traffic.

D.  

Ensure the PubSite-Prod-Web servers are in different Subnets.

Discussion 0
Question # 5

An administrator has a requirement to capture application flow data for a policy in Monitor mode and export those events to an external SIEM for correlation with other logs. Which two actions are required to achieve this? (Choose two.)

Options:

A.  

Enable IPFIX export on the monitored policy.

B.  

Enable Policy Hit Logging on the monitored policy.

C.  

Create a Flow Audit Policy on the monitored policy.

D.  

Configure a remote syslog destination in Prism Central.

Discussion 0
Question # 6

An administrator observes a Network Controller Unreachable alert in Prism Central for a specific AHV cluster. All other management tasks for the cluster from Prism Central are succeeding and the cluster itself reports a healthy status. Which step is the most appropriate to investigate the cause of this specific alert?

Options:

A.  

On the affected Prism Element cluster, verify that the Network Controller service is enabled and healthy on all CVMs.

B.  

Verify physical network connectivity and MTU settings between Prism Central and the affected AHV hosts.

C.  

Check for and restart any unhealthy Flow Virtual Networking microservices within the Prism Central scale-out architecture.

D.  

Unregister and then re-register the affected cluster in Prism Central to force a full synchronization of the network controller state.

Discussion 0
Question # 7

An administrator needs to isolate communication between VMs in Production and Development environments. Each VM is categorized by Environment and Site category values. The administrator wants this isolation to apply only to VMs located at Site: Branch-001. Which configuration best meets the requirement?

Options:

A.  

Create a Quarantine Policy between Environment:Production and Environment:Development. Scope the policy to Site: Branch-001.

B.  

Create a Quarantine Policy blocking traffic between (Environment: Production + Site: Branch-001) and (Environment: Development + Site: Branch-001).

C.  

Create an Isolation Policy between Environment:Production and Environment:Development. Scope the policy to Site: Branch-001.

D.  

Create an Isolation Policy blocking traffic between (Environment: Production + Site: Branch-001) and (Environment: Development + Site: Branch-001).

Discussion 0
Question # 8

When cloning a Flow Network Security policy, what should be verified before enabling Enforce mode?

Options:

A.  

The cloned policy's secured entities reference the intended categories.

B.  

The cloned policy is configured to a different scope than the source policy.

C.  

The cloned policy must first be saved before it can be enforced.

D.  

The cloned policy must be renamed before it can be enforced.

Discussion 0
Question # 9

Which two options are supported as a Secured Entity in Flow Network Security Application Policies? (Choose two.)

Options:

A.  

Subnet Category

B.  

vNIC Category

C.  

VPC Category

D.  

VG Category

Discussion 0
Question # 10

An administrator needs to delegate the management of security policies to a dedicated SecOps team. To enforce the principle of least privilege, the administrator assigns the predefined Flow Policy Author role to a user on the team. The user confirms they can create, monitor, and enforce security policies. However, when attempting to build a new application security policy for a set of newly deployed VMs, the user reports they are unable to create a new category to group these VMs. The option is not available in the Prism Central UI. Which statement explains this behavior?

Options:

A.  

The Flow Policy Author role must be cloned into a custom role before it can be used.

B.  

The user's role must be assigned with a scope for the specific projects they manage.

C.  

The user is missing the Flow Admin role, which is required for category management.

D.  

The Flow Policy Author role can only apply policies to existing categories by design.

Discussion 0

NCP-NS-7.5 PDF

NCP-NS-7.5 PDF (Printable)
$46.5
$154.99

NCP-NS-7.5 Testing Engine

NCP-NS-7.5 PDF (Printable)
$51
$169.99

NCP-NS-7.5 PDF + Testing Engine

NCP-NS-7.5 PDF (Printable)
$63.9
$212.99
Exams4sure Dumps

Exam style questions across every NCP-NS-7.5 domain

Last Update 3 days ago
Total Questions : 106

Start with our free NCP-NS-7.5 practice questions, carefully crafted to mirror the domains, phrasing, and difficulty of the real NCP-NS exam. Each NCP-NS-7.5 exam question comes with a detailed rationale that explains not just which answer is correct but why the others fall short. That's how concepts stick. Use the free set to benchmark yourself: identify your Nutanix weak domains, see where you're losing marks, and build a focused study plan in minutes.

Free Exams Sample Questions