Discuss Nutanix NCP-CI-AWS Exam Topic 4 Question 37

An administrator needs to allow wide open access to one particular NC2 AWS cluster from an on-premises subnet of 10.19.160.0/24.

What is the proper Custom Security Group formatting to satisfy this task?

AOption A

BOption B

COption C

DOption D

Suggested Answer: B

To allow wide open access to a particular NC2 AWS cluster from an on-premises subnet (10.19.160.0/24), the proper Custom Security Group formatting needs to include the necessary tags that specify the external cluster UUID and the networks allowed.

Custom Security Group Configuration:

The configuration should include tags to identify the cluster and the networks that should be granted access.

Key: nutanix:clusters

Key: nutanix:clusters:external

Value: <cluster-uuid>

Explanation of Choice:

Option B includes the necessary tags and values, ensuring that the specific cluster UUID is recognized and the on-premises subnet (10.19.160.0/24) can communicate with the NC2 cluster.

Security Group Tags:

nutanix:clusters:external - Identifies the cluster as external.

nutanix:clusters:external:cluster-uuid - Specifies the unique identifier for the cluster, enabling proper traffic routing and access.

Nutanix Cloud Clusters on AWS Administration Guide

AWS Security Group Documentation

Nutanix Best Practices for Custom Security Group Configuration

Get Premium NCP-CI-AWS Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

15 comments · newest first

Verda 2 months ago

I feel like Option A is the best choice for this scenario.

Romana 2 months ago

Option D doesn't match the subnet. It's not right.

Lorean 2 months ago

I agree with Ronny. Option A is straightforward.

Rozella 3 months ago

Option C is too restrictive. We need wide access.

Thad 3 months ago

I prefer Option B. It seems more secure with specific rules.

Ronny 3 months ago

I think Option A looks good. It allows the subnet access.

Elke 3 months ago

Definitely going with Option D, it covers all bases!

Belen 3 months ago

Wait, why would you allow that much access?

Carman 4 months ago

Not sure about Option C, seems too restrictive.

Kirk 5 months ago

I think Option B is the right choice here.

Ronnie 5 months ago

Option A looks good for wide open access.

Melynda 6 months ago

I feel like option C might be the right choice since it looks familiar, but I can't shake the feeling that I need to double-check the rules for inbound and outbound traffic.

Gilberto 6 months ago

If I remember correctly, the security group should allow inbound traffic from 10.19.160.0/24, but I’m a bit confused about whether it should specify the protocol as well.

Man 6 months ago

I think we practiced a similar question where we had to allow access from a specific IP range, but I can't recall the exact formatting for the security group rules.

Malinda 6 months ago

I remember we discussed security groups allowing specific CIDR blocks, but I'm not sure if it should be set to allow all traffic or just specific protocols.

Nutanix NCP-CI-AWS Exam - Topic 4 Question 37 Discussion