Trusted Nutanix NCP-NS Exam Dumps – Avoid Costly Exam Retakes

Question No: 1

MultipleChoice

An administrator recently deployed a new set of virtual machines... 3-tier web application... restricted as follows:

Only application VMs can talk to database VMs on port 3306

Frontend VMs should only communicate with application VMs on port 8080

Which action will correctly create and configure the Security Policies in Nutanix Flow to satisfy this task?

Options

ACreate VLANs for each tier and configure ACLs to restrict communication.

BCreate IP-based rules for each VM category within a Security Policy.

CConfigure a global 'Allow All' Security Policy and rely on guest OS firewalls for tier-based restrictions.

DCreate categories for each tier then define an Application Policy allowing specific ports between them.

Question No: 2

MultipleChoice

Refer to the exhibit.

An administrator is reviewing an enforced security policy "Secure 3-VM Inventory App", as shown in the exhibit. The policy's inbound rules are configured to allow traffic from specific sources to each tier of the application. The visualization shows one blocked traffic flow.

Based on the information presented in the exhibit, which statement best describes this behavior?

Options

AThe AppTier: FrontEnd and AppTier: AppLogic entities are on different subnets.

BThe Inventory App VM is being blocked from initiating a connection to the AppTier: Database category.

CThe AppTier: Database category is being blocked from initiating a connection to the Inventory App VM.

DThe security policy is blocking traffic because the Inventory App VM is using a port not allowed by the policy.

Question No: 3

MultipleChoice

An enterprise has deployed a VPC called FinanceVPC using Nutanix Flow Virtual Networking. The Finance team needs the following connectivity:

Internal servers in the VPC must reach an on-premises corporate data-center via a point-to-point encrypted link.

Some servers in the VPC must also access the public internet with source NAT and receive inbound access via floating IPs.

The corporate network uses overlapping IP space with other VPCs in the environment, so address translation is necessary for those workloads.

The networking design must support routing via BGP for future site expansions and provide low-latency north-south connectivity.

Which actions should the administrator take to satisfy this requirement?

Options

AUse two No-NAT External Networks---one for the on-prem link and one for Internet access; configure static routes for both without NAT.

BUse a single No-NAT External Network for both on-prem and Internet access; configure BGP and direct routing out to the internet without NAT.

CUse a No-NAT External Network for the on-premises link and a NAT External Network for Internet access. Configure a VPN tunnel to the on-premises location and enable BGP on the VPC router for the on-premises link.

DUse a single NAT External Network for both the on-prem link and Internet access; configure a default route to the external network and enable SNAT and floating IPs for all traffic.

Question No: 4

MultipleChoice

Which step is required before placing the Flow Network Security software bundle on a local web server?

Options

APerform an inventory on the Nutanix cluster before transferring any bundle files to the web server.

BExtract the downloaded bundle using 7zip and upload it directly to Prism Central.

CEnable Direct Upload in Life Cycle Manager so the bundles can be transferred automatically to the Nutanix cluster.

DSet up a local web server and download both the required software LCM bundle and compatibility bundle.

Question No: 5

MultipleChoice

How can the administrator discover the root cause of the issue?

Options

AConfirm that Inter-VM connectivity is enabled within the VM networking settings and that VMs in the Database tier are configured correctly to accept inbound traffic.

BCheck if traffic isolation has been configured on the Database tier and ensure that there is no policy preventing App tier communication with the Database tier.

CCheck the security policies again to ensure that the rule allowing port 3306 from Web -> Database is applied and active, then check the policy enforcement mode to ensure it is in Enforcement Mode.

DVerify that the port 3306 is open on the external gateway and that SNAT is not being applied for internal communication.

Free Nutanix NCP-NS Exam Dumps August 2026