Discuss Nutanix NCP-CI-AWS Exam Topic 4 Question 14

An administrator has deployed an NC2 on AWS cluster that is running mixed workloads. Multiple SQL database are running on the NC2 cluster using a native subnet of 10.78.1.0/24.

The administrator wants to ensure only application servers from source subnet 10.79.1.0/24 that reside outside of the NC2 cluster can access the databases.

Which two actions will help the administrator most securely achieve this? (Choose two.)

AOption A

BOption B

COption C

DOption D

Suggested Answer: A, D

To ensure that only application servers from the source subnet 10.79.1.0/24 can access the SQL databases running on the NC2 cluster in the subnet 10.78.1.0/24, the administrator can take the following actions:

Option A: Create a custom Security Group with the following rules:

Key = tag:nutanix:clusters

Key = tag:nutanix:clusters:external

and value = the clusters' UUID

Key = tag:nutanix:clusters:external

and value = 10.78.1.0/24

Option D: Create a custom Security Group with the following:

Key = nutanix:clusters

Key = nutanix:clusters:external

and value = the clusters' UUID

Key = nutanix:clusters:external

and value = 10.79.1.0/24

These actions help create security rules that restrict access to the databases only from the specified source subnet, ensuring secure and controlled access.

Nutanix Cloud Clusters on AWS Administration

AWS Security Groups Documentation

Get Premium NCP-CI-AWS Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

29 comments · newest first

Berry 10 months ago

I’m surprised there’s no mention of IAM roles here!

Stephanie 11 months ago

Wait, why not just use a security group for this?

Adelle 11 months ago

Definitely A! It’s the most secure option.

Callie 11 months ago

I think B might work too, but not sure.

Shawnda 11 months ago

Option A and C seem like the best choices.

Cordelia 11 months ago

I’m leaning towards options that involve security groups, but I’m not completely confident. I hope I can remember the details from our practice tests!

Janine 12 months ago

I think we need to ensure that only the right subnet can access the databases, so maybe one of the options involves setting up a specific rule for that subnet?

Vicki 12 months ago

I’m a bit unsure about which options to pick. I feel like we had a similar question about subnet access control last week, but I can’t recall the specifics.

Beata 1 year ago

I remember we discussed security groups and network ACLs in class. I think one of the options might involve modifying those to restrict access.

Lili 1 year ago

Hmm, I'm not entirely sure about this one. I think I'll need to sketch out the network diagram and think through the requirements step-by-step to come up with the best solution. Careful planning will be key here.

Quentin 1 year ago

This seems straightforward enough. I'd start by creating a security group for the application servers and another for the databases, then configure the appropriate inbound and outbound rules to allow the necessary access.

Queenie 1 year ago

I'm a bit confused by the different subnets and network components involved. I'll need to review the details carefully and make sure I understand the relationships between them before deciding on the right solution.

Jolene 1 year ago

Okay, let's see here. We need to restrict access to the databases from the application servers in the 10.79.1.0/24 subnet, while allowing the NC2 cluster to access them. I think a combination of network ACLs and security groups might be the way to go.

Luis 1 year ago

Hmm, this looks like a tricky one. I'll need to carefully analyze the network topology and security requirements to determine the best approach.

Man 1 year ago

This looks like a straightforward regex question. I'm pretty sure the answer is B, [A-Z], since that represents a single uppercase letter.

Brock 2 years ago

Hmm, this question is a piece of cake. All these security-conscious candidates are making me wish I had brought my snacks to the exam. *chuckles*

Paris 2 years ago

Option D is just plain wrong. Allowing all traffic to the database is a security nightmare! I hope none of my fellow candidates choose that one.

Arthur 2 years ago

↳ replying to Paris

Yeah, Option D is a disaster waiting to happen. Option A and Option C are the way to go for sure.

Fletcher 2 years ago

↳ replying to Paris

I'm leaning towards Option B and Option C. They seem like the most secure options for this scenario.

Ilona 2 years ago

↳ replying to Paris

I think Option A and Option C would be the best choices to securely achieve the goal.

Alise 2 years ago

↳ replying to Paris

I agree, Option D is definitely not the way to go. It's a huge security risk.

Bernardo 2 years ago

I disagree. I think option B and D would be better to ensure secure access to the databases.

Kenneth 2 years ago

Haha, good one! I'll make sure to stock up on energy bars next time. Can't let the security questions distract me from the real task at hand - acing this exam!

Veda 2 years ago

↳ replying to Kenneth

Definitely, focusing on security measures is crucial for acing the exam. Good luck with your preparation!

Melvin 2 years ago

↳ replying to Kenneth

I agree, those options look like they would help restrict access to the application servers from the specified subnet.

Terrilyn 2 years ago

↳ replying to Kenneth

Option A and Option C seem like the best choices to secure the access to the databases.

Felton 2 years ago

I agree with Margurite. Option A and C seem like the most secure choices.

Margurite 2 years ago

I think the administrator should choose option A and option C.

Pamella 2 years ago

Option B and C seem like the most secure choices here. Limiting access to the database from only the application servers in the 10.79.1.0/24 subnet is a good idea.

Nutanix NCP-CI-AWS Exam - Topic 4 Question 14 Discussion