NCP-BC-7.5 Nutanix Certified Professional - Business Continuity (NCP-BC) 7.5 Free Practice Exam Questions (2026 Updated)

Disaster recovery success depends on the stability of the network link and the health of the services responsible for data replication. Nutanix Cluster Check (NCC) is the primary native health-monitoring tool for the Nutanix environment. NCC includes a comprehensive suite of checks specifically designed for Data Protection and BCDR.

During disaster recovery setup or testing, an administrator can run NCC to verify that the clusters are correctly paired, that remote site connectivity is functional, and that the required ports (such as 2009 and 2020) are open and reachable. Specific NCC checks like remote_site_connectivity_check or replication_health_check provide granular insights into whether the " handshake " between the primary and recovery sites is succeeding. While acli (Acropolis CLI) or ecli (Erasure Coding CLI) are used for managing VMs or storage disks, they do not provide the high-level diagnostic capabilities of NCC. By regularly running NCC, an administrator can proactively identify connectivity issues—such as firewall changes or routing failures—that could otherwise lead to replication failures and compromise the organization ' s recovery objectives.

When designing disaster recovery to a cloud environment (such as NC2 on AWS or Azure), organizations must choose a compute model that aligns with their Recovery Time Objective (RTO). The " Zero Compute " model is the most cost-efficient because it stores only the data (snapshots) in low-cost Object Storage (S3 or Blob) and does not maintain a running cluster. However, the RTO for Zero Compute is high because, in a disaster, the organization must first deploy a new Nutanix cluster, configure it, and then begin the process of hydrating data from the Object Storage.

In contrast, the " Pilot Light " model involves keeping a minimal, active Nutanix cluster (e.g., 3 nodes) running at the recovery site. While this carries a moderate ongoing cost, it significantly reduces the RTO. Because the cluster already exists, the management plane (Prism Central), the storage containers, and all metadata are already active. When a failover is triggered, the system only needs to power on the VMs or perform a small amount of data hydration. This allows the organization to meet aggressive RTO targets of under 15 minutes, which is generally impossible with the Zero Compute model. Pilot Light provides the " ready-to-go " infrastructure needed for mission-critical applications that cannot afford the multiple hours required to provision a fresh cluster from scratch during an emergency.

When a replication job is marked as " ongoing " but the progress (bytes completed) is stagnant, it typically indicates a mismatch in the configuration or a failure in the orchestration logic rather than a total network blackout, especially when virtual IPs are confirmed reachable. In a " new setup, " a very common root cause is an incorrectly configured Protection Policy.

This can include issues such as mismatched category assignments, incorrect target site selection, or an invalid replication schedule that the system is unable to initialize properly. If the policy itself is misconfigured—for instance, if it is attempting to replicate to a storage container that hasn ' t been mapped or lacks permissions—the Cerebro service may initiate the task but then fail to progress the data transfer. While blocked ports (Options C and D) are common culprits in replication failures, they usually result in immediate " unreachable " alerts or job failures rather than a " stuck " status where connectivity is otherwise reported as healthy. If the Acropolis service were down at the remote site (Option A), the cluster would likely report the site as disconnected or show a critical service alert in Prism. Therefore, the most logical first area to investigate in a new, non-progressing setup is the logic and settings defined within the Protection Policy itself.

An " Unplanned Failover " is triggered when the primary site is completely offline or unreachable due to a disaster. Because the primary site cannot be contacted to perform one last synchronization of data, the recovery must rely on the recovery points that were successfully replicated to the destination cluster before the outage occurred.

In this scenario, the worst-case data loss is equivalent to the Recovery Point Objective (RPO) defined in the Protection Policy. For example, if the RPO is set to 1 hour, and the disaster occurs 59 minutes after the last successful replication, the business will lose 59 minutes of data. By default, the Nutanix orchestration engine will automatically select and use the most recent recovery point available at the recovery site to restore the virtual machines. While an administrator can manually choose an older recovery point if needed (e.g., in the case of a ransomware attack), the default behavior is to minimize data loss by using the newest available point. This highlights why setting an appropriate RPO is the most important design decision for managing potential data loss in an unplanned failure event.

In modern Nutanix Disaster Recovery (using Prism Central-based Protection Policies), storage placement is often governed by Storage Policies rather than simple container-to-container mapping. Storage Policies use Nutanix Categories to determine where a VM should be placed to meet performance or compliance requirements. In this scenario, the VMs were successfully replicated and recovered, but they were placed in " all the storage containers " rather than the intended FIN-PROD container at the Marseille site. This indicates that while the data arrived, the " destination placement rules " were missing. If a storage policy was created on the Paris cluster to keep these VMs in FIN-PROD but that policy was not mirrored or assigned at the Marseille cluster, the system defaults to the Acropolis Dynamic Scheduler (ADS) placement. ADS will distribute the VMs across all available containers to balance load and capacity, leading to the " scattered " result observed. To resolve this and ensure consistent failover behavior, the administrator must ensure that both the categories and the corresponding storage policies are identical and active at both availability zones. While a missing container (Option C) would typically cause a replication failure rather than scattered recovery, a missing storage policy specifically explains the lack of orchestrated placement during the failover event.

In a Nutanix Disaster Recovery context, choosing the right failover type is critical during a ransomware event. A " Planned Failover " is designed for maintenance scenarios. Its first step is to synchronize the current data state to the recovery site to ensure zero data loss. In a ransomware attack, the " current state " is encrypted or corrupted data. If an administrator performs a Planned Failover at 2:45 AM, the system will capture and replicate the encrypted files, effectively " backing up " the ransomware to the recovery site.

To successfully recover from ransomware, the administrator must perform an " Unplanned Failover. " Despite the name, this failover type is the correct choice for this scenario because it allows the administrator to manually select a historical recovery point from the destination cluster ' s storage. By choosing a recovery point from 1:00 AM (before the attack began), the administrator can restore the virtual machines to a known-good, unencrypted state. This is a primary use case for maintaining a multi-day or multi-week snapshot retention policy. While a " Test Failover " (Option A) could be used to verify the 1:00 AM snapshot in an isolated network first, the ultimate production recovery is achieved via an Unplanned Failover that specifically targets a point-in-time snapshot that predates the infection.

Cross-Cluster Live Migration (CCLM) is an advanced feature that allows a running VM to move between two clusters without downtime, provided they are linked by synchronous replication. However, CCLM has specific technical prerequisites and limitations regarding the VM ' s hardware configuration. One of the primary constraints in many Nutanix versions is the support for specific disk controllers.

In many CCLM implementations, the migration engine requires the VM to use modern VirtIO controllers for its disks to ensure that the memory-state transfer and storage-handoff can occur seamlessly across clusters. If MarketVM was configured with legacy SCSI controllers (or certain types of shared disks), the migration task might fail during the validation phase. While storage capacity (Option B) and bandwidth (Option C) are essential for general replication, they would typically prevent the " Synchronous " status from being achieved in the first place, rather than failing a CCLM task specifically. Memory overcommit (Option D) is generally handled by the hypervisor and would not inherently block the migration unless the destination host had zero available physical memory. Troubleshooting CCLM requires an administrator to audit the VM ' s virtual hardware against the supported Nutanix compatibility matrix to ensure all components are eligible for live cross-site movement.

Security hardening for BCDR is focused on protecting the integrity of recovery points against accidental deletion, administrative errors, or malicious intent such as ransomware. While infrastructure-level hardening like SSH keys (Option C) or host-level security (Option A) is important, they do not prevent a user with valid administrative credentials in Prism from deleting a snapshot. To address the specific requirement of ensuring only " authorized " and verified actions can modify or delete snapshots, the administrator should implement an " Approval Policy " .

An Approval Policy introduces a " four-eyes " principle for critical management tasks. When this policy is active, any attempt to delete or modify a recovery point does not execute immediately. Instead, it triggers a request in the Prism Central " Task " console and enters a " Pending Approval " state. A separate authorized user—an " Approver " —must then review the request and explicitly grant permission before the deletion can occur. This creates a vital procedural safeguard, ensuring that no single individual has the unilateral power to destroy the organization ' s backup data. By configuring this policy, the administrator hardens the DR environment against both internal threats and external actors who might gain access to a single set of admin credentials, providing a robust layer of defense for critical data assets.

Network segmentation in a Nutanix cluster allows for the physical or logical isolation of different types of traffic (management, storage, and backplane). When applied to Disaster Recovery, it allows an administrator to dedicate a specific network interface (typically ntnx0) and a dedicated subnet for replication traffic, ensuring it does not contend with VM or management traffic for bandwidth.

However, Disaster Recovery is a site-to-site operation that requires a symmetric network configuration. If an administrator enables segmentation on the primary cluster, the Cerebro service at that site will now attempt to originate and receive all replication traffic on the newly defined segmented IP addresses. If the recovery cluster is still in its original " brownfield " state without segmentation, it will be looking for traffic on its management IP addresses (on eth0). This creates a mismatch where the two sites are effectively " speaking different languages " or looking for each other on the wrong networks. Nutanix does not automatically propagate segmentation settings between clusters because each site may have different physical network topologies or VLAN requirements. Therefore, the administrator must manually enable and configure network segmentation on the recovery cluster to match the primary. Only when both sites have consistent segmented interfaces and the routing/firewall rules are updated to allow communication between these new subnets will the replication link be restored and functional.

Nutanix Disaster Recovery offers several replication tiers to meet varying business Recovery Point Objectives (RPOs). NearSync replication is a specific technology designed to fill the gap between traditional Asynchronous replication and zero-RPO Synchronous replication.

NearSync replication supports a minimum RPO of 1 minute. It achieves this by using Lightweight Snapshots (LWS), which are highly efficient and can be taken much more frequently than standard full snapshots without causing significant I/O overhead on the system. While some versions of Nutanix software allow NearSync to reach RPOs as low as 20 seconds, the standard minimum RPO recognized in the context of the NCP-BC 7.5 evaluation for minutes-based intervals is 1 minute. Option A (0 RPO) is only achievable through Synchronous replication. Option C (15 minutes) is the typical maximum RPO for NearSync before it transitions to Async, and Option D (60 minutes) is the standard interval for Asynchronous replication. Understanding these thresholds is essential for administrators when designing protection policies for mission-critical workloads.

Synchronous replication is designed for zero data loss by requiring that every write be acknowledged at both the primary and recovery sites before the application can proceed. This creates a " hard " dependency on the network link between the two clusters . If the network connectivity is interrupted (e.g., during scheduled maintenance), the primary cluster will be unable to receive acknowledgments from the remote site.

By default, if the synchronous link is broken, the primary cluster may pause I/O to the protected VMs to prevent data inconsistency, which would cause the VMs to become unresponsive to users. To prevent this during planned maintenance while ensuring that the VMs stay online at the primary site, the administrator should temporarily transition the protection mode. Changing the Protection Policy from " Synchronous " to " Asynchronous " (Option C) removes the real-time write-mirroring requirement. This allows the VMs to continue serving local I/O independently of the remote site ' s status. While this technically increases the RPO during the maintenance window, it ensures application availability. Once the maintenance is complete and network connectivity is restored, the administrator can change the policy back to Synchronous. The system will then perform a catch-up sync and return to the Zero-RPO state once the data at both sites is identical again. This operational maneuver is a standard best practice for managing " stretched " cluster environments during infrastructure updates.