NCP-NS Revolutionary Guide To Exam Nutanix Dumps [Q49-Q71]

NEW QUESTION 49
An administrator notices that several VMs in a Nutanix AHV cluster are intermittently losing network connectivity. In Prism Central, a critical alert appears:
“Network Function VM (NFVM) packet processing delays”
What is the next step that the administrator should take for this issue?

NEW QUESTION 50
Which action allows an administrator to reuse a single existing policy in a different scope?

NEW QUESTION 51
An administrator needs to delegate the management of security policies to a dedicated SecOps team. To enforce the principle of least privilege, the administrator assigns the predefined Flow Policy Author role to a user on the team.
The user confirms they can create, monitor, and enforce security policies. However, when attempting to build a new application security policy for a set of newly deployed VMs, the user reports they are unable to create a new category to group these VMs. The option is not available in the Prism Central UI.
Which statement explains this behavior?

NEW QUESTION 52
Refer to the exhibit.

How should an Application Policy be created whose rules apply only to vNIC1 of VM1?

NEW QUESTION 53
An administrator must delegate management of a single tenant VPC to a junior engineer. The engineer should be able to modify that VPC but must not see or change any other VPCs or networking configurations in Prism Central.
The administrator wants to meet this requirement using RBAC.
Which action should the administrator take to meet this requirement?

NEW QUESTION 54
Which statement accurately describes the behavior of a Flow Network Security policy operating in Monitor mode?

NEW QUESTION 55
An administrator is designing a VPC for a three-tier application. The workloads must communicate with the Internet using source NAT and also communicate with on-premises networks 10.50.0.0/16 and 172.20.32.0/20 with no address translation. In the Create VPC dialog, the administrator can associate external subnets and specify destination prefixes.
Which configuration satisfies the requirements?

NEW QUESTION 56
What is the role of the Network Controller in Flow Virtual Networking?

NEW QUESTION 57
An administrator creates a new VPC in No NAT mode to allow VMs in a web tier to reach an external firewall.
After deployment… none of the VMs can reach external IP addresses…
Which action should the administrator take to restore routed north-south connectivity from the VPC?

NEW QUESTION 58
An administrator needs to allow communication between several VPCs without requiring to configure routes in the physical network or using a dynamic routing protocol like BGP.
How should the administrator satisfy this requirement?

NEW QUESTION 59
An administrator finds that App tier VMs cannot connect to the Database tier on port 3306, and Flow logs show the traffic is being denied by a security policy. The Web tier communicates normally.
What should the administrator do to allow the App tier to access the Database tier?

NEW QUESTION 60
A new multi-tier application is being deployed across several subnets in a Nutanix environment. The security team wants to create a Flow Network Security Policy to restrict traffic between the tiers, but the complete matrix of required network ports and protocols is not fully documented.
Which strategy should the team employ first to accurately capture the necessary communication patterns without risking application outage?

NEW QUESTION 61
An administrator has been tasked with upgrading the Nutanix cluster to a newer version of AOS.
The cluster is running a mix of different versions across nodes…
What is the recommended first step when upgrading a Nutanix cluster with different AOS versions across nodes?

NEW QUESTION 62
An administrator has configured a VPC and associated a NAT external network. A virtual machine connected to a subnet within this VPC is required to be accessible externally.
What action must the administrator take to accomplish this?

NEW QUESTION 63
A VM with IP address 172.20.10.5 on a Subnet with CIDR 172.20.10.0/24 is unable to be routed externally from the VPC.
The VPC is successfully peered via BGP… However, when checking the BGP Session, no routes are being advertised by the VPC.
What is the most likely configuration issue?

NEW QUESTION 64
Which policy is used to isolate a compromised VM in the most efficient way possible?

NEW QUESTION 65
An administrator has been tasked with creating a security policy to protect specific virtual network interfaces (vNICs) within a VM in a Flow Virtual Networking setup.
How can the administrator ensure that only a specific vNIC is protected by the policy?

NEW QUESTION 66
An administrator is designing a Transit VPC to provide shared corporate services (e.g., DNS) for two tenant VPCs:
VPC-A requires WAN access using NAT.
VPC-B requires WAN access without NAT.
Both VPCs connect to the Transit VPC for shared services hosted on the corporate network.
Shared services residing in the Transit VPC use routed IP addressing for WAN connectivity.
Which two configuration elements should the administrator implement on the Transit VPC? (Choose two.)

NEW QUESTION 67
An administrator uses Nutanix Flow to secure a three-tier application (Web, App, and Database tiers).
After observing the traffic, they find that:
The Web tier communicates with the App tier over HTTP (port 80)
The App tier communicates with the Database tier over TCP port 1433
The Database tier does not initiate connections
The Web tier receives inbound HTTP traffic from the corporate DMZ on port 8080 No other traffic should be allowed What should the administrator do to document and then securely apply these flows in Nutanix Flow?

NEW QUESTION 68
A VDI policy in Flow Network Security allows access to specific resources only when users from the Admins Active Directory group log into a VM.
Some administrators report that when they log in to certain VMs, access is blocked (default deny applies), while the same user accounts work correctly when logged on to other VMs.
When checking the VM details in Prism Central, operations observes that the expected dynamic category based on the logged-in AD user is not assigned on the affected VMs.
What is the most likely reason for this behavior?

NEW QUESTION 69
An administrator has a VPC with multiple overlay subnets and a VPN gateway configured for site-to-site connectivity. During testing, the administrator noticed fragmented packets and poor performance.
Which configuration change resolves this issue without disabling VPN?

NEW QUESTION 70
An administrator has configured two VPCs with overlapping externally routable prefixes (ERPs). The two VPCs are associated to separate external networks that are part of the same physical routing domain.
What outcome should the administrator expect?

NEW QUESTION 71
An administrator has deployed a microsegmentation policy in Nutanix Flow that allows certain VM traffic based on Active Directory (AD) user group membership.
Users in a specific AD group report they are unable to access the VMs, while other users can connect without issues. The administrator suspects the problem is related to identity-based policy mapping.
What should the administrator do to troubleshoot and resolve the access issue related to the identity-based policy?