Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Nutanix NCP-US Exam - Topic 10 Question 68 Discussion

[Deploy and Upgrade Nutanix Unified Storage]An administrator has been asked to upgrade an S3-compatible bucket on-premise using Prism Central. Prior to running the LCM upgrade, the administrator validated the following configurations for this task:Inbound traffic allowlist:Controller Virtual Machine (CVM) IP addresses (including secondary/segmented)Prism Central IP addressPod network range, usually 10.100.0.0/16All IP addresses, such as 0.0.0.0/0 for ports TCP 80 and 443Outbound traffic allowlist:CVM IP addresses (including secondary/segmented)Prism Central IP addressPod network range, usually 10.100.0.0/16All IP addresses such as 0.0.0.0/0 for ports TCP 53, 7100, 5553 and UDP 53, 123After the validation, the LCM upgrade is launched but did not complete. After reaching the security team, the administrator is informed that security has been enforced on the outbound traffic to the Internet as well. The administrator has been asked to provide a list of components that require Internet access. What should the administrator provide to the security team for a successful upgrade?
D) CVM IP address/port
A) Pod network
B) Prism Central IP address/port
C) LCM

Nutanix NCP-US Exam - Topic 10 Question 68 Discussion

Actual exam question for Nutanix's NCP-US exam
Question #: 68
Topic #: 10
[All NCP-US Questions]

[Deploy and Upgrade Nutanix Unified Storage]

An administrator has been asked to upgrade an S3-compatible bucket on-premise using Prism Central. Prior to running the LCM upgrade, the administrator validated the following configurations for this task:

Inbound traffic allowlist:

Controller Virtual Machine (CVM) IP addresses (including secondary/segmented)

Prism Central IP address

Pod network range, usually 10.100.0.0/16

All IP addresses, such as 0.0.0.0/0 for ports TCP 80 and 443

Outbound traffic allowlist:

CVM IP addresses (including secondary/segmented)

Prism Central IP address

Pod network range, usually 10.100.0.0/16

All IP addresses such as 0.0.0.0/0 for ports TCP 53, 7100, 5553 and UDP 53, 123

After the validation, the LCM upgrade is launched but did not complete. After reaching the security team, the administrator is informed that security has been enforced on the outbound traffic to the Internet as well. The administrator has been asked to provide a list of components that require Internet access. What should the administrator provide to the security team for a successful upgrade?

Show Suggested Answer Hide Answer
Suggested Answer: D

Contribute your Thoughts:

0/2000 characters
Avery
2 days ago
Yeah, I agree with the others, all those components are crucial!
upvoted 0 times
...
Ligia
7 days ago
I thought the pod network was enough for upgrades?
upvoted 0 times
...
Leonie
12 days ago
Wait, does CVM really need outbound access?
upvoted 0 times
...
Lynna
17 days ago
Definitely need the Prism Central IP too.
upvoted 0 times
...
Edna
22 days ago
Gotta allow LCM for sure!
upvoted 0 times
...
Fletcher
27 days ago
I recall that Prism Central also plays a role in upgrades, but I can't remember if it needs specific ports opened for outbound traffic.
upvoted 0 times
...
Rashad
1 month ago
I’m a bit confused about whether the CVM IP addresses need to be included in the list. I thought they were mostly for internal communication.
upvoted 0 times
...
Maynard
1 month ago
I think we practiced a similar question where we had to identify which components needed internet access. I feel like LCM was definitely one of them.
upvoted 0 times
...
Dick
1 month ago
I remember something about needing to allow outbound traffic for LCM, but I'm not sure if it includes all components or just specific ones.
upvoted 0 times
...

Save Cancel