Nutanix NCP-CI-Azure Exam - Topic 4 Question 2 Discussion

Actual exam question for Nutanix's NCP-CI-Azure exam

Question #: 2
Topic #: 4

An administrator is tasked with creating a new subnet for a group of VMs that require inbound internet access. Internal private addresses must be obscured to servers on the public internet.

Which network is best suited for satisfying this requirement?

ABastion based network

BNo-NAT based network

CLayer 2 Stretch network

DNAT based network

Show Suggested Answer

Suggested Answer: D

NAT Based Network: A NAT-based network is designed to provide inbound and outbound internet access while obscuring the internal private addresses. This setup uses Network Address Translation (NAT) to map internal IP addresses to a public IP address, ensuring that internal addresses are not exposed to the public internet.

Security and Connectivity: NAT provides a layer of security by hiding internal IP addresses and allowing controlled access to external resources. This configuration is well-suited for VMs that need to communicate with servers on the public internet while maintaining the privacy of their internal network addresses.

Azure Virtual Network NAT Documentation

Nutanix Networking and Security Configuration Guide

by Martina at Jan 26, 2025, 09:53 AM

Limited Time Offer

25%

Off

Get Premium NCP-CI-Azure Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Krissy

3 months ago

Surprised NAT is the best option, thought there were better alternatives.

upvoted 0 times

...

Malcom

3 months ago

Definitely not No-NAT, that exposes everything!

upvoted 0 times

...

Nobuko

3 months ago

Wait, why not a Bastion based network? Seems like a solid choice too.

upvoted 0 times

...

Jamal

4 months ago

I agree, NAT helps keep internal IPs hidden.

upvoted 0 times

...

Aja

4 months ago

NAT based network is the way to go for this!

upvoted 0 times

...

Isadora

4 months ago

I feel like No-NAT based networks could expose internal addresses, which doesn't fit the requirement. NAT based sounds safer.

upvoted 0 times

...

Mila

4 months ago

Layer 2 Stretch networks seem more about extending networks rather than providing internet access, so I doubt that's the answer.

upvoted 0 times

...

Timothy

4 months ago

I remember practicing a question similar to this, and I think Bastion networks were mentioned as a way to secure access, but I don't recall the details.

upvoted 0 times

...

Bea

5 months ago

I think the NAT based network might be the right choice since it hides internal IPs from the public internet, but I'm not completely sure.

upvoted 0 times

...

Dominque

5 months ago

Layer 2 stretch network? I don't think that's the right approach here. I'm pretty confident a NAT-based network is the way to go.

upvoted 0 times

...

Royal

5 months ago

The no-NAT based network doesn't seem to fit the requirement of obscuring the internal addresses, so I'm going to rule that one out.

upvoted 0 times

...

Ivette

5 months ago

A bastion-based network could work, but that might be overkill for just obscuring the internal addresses. I'm leaning more towards a NAT-based solution.

upvoted 0 times

...

Alex

5 months ago

Hmm, I'm a bit unsure about this one. I'll need to think through the requirements carefully to determine the best network type.

upvoted 0 times

...

Yen

5 months ago

This one seems pretty straightforward. I think a NAT-based network would be the best option to obscure the internal private addresses from the public internet.

upvoted 0 times

...

Marleen

12 months ago

C) Layer 2 Stretch network, because why not? Let's just stretch that network all the way to the moon and back!

upvoted 0 times

Beatriz

12 months ago

D) NAT based network

upvoted 0 times

...

Roxane

12 months ago

A) Bastion based network

upvoted 0 times

...

Amber

1 year ago

Hmm, I'm torn between A) Bastion based network and D) NAT based network. Decisions, decisions... At least I won't have to worry about pesky bastion hosts on the toilet.

upvoted 0 times