NCP-BC-7.5 Nutanix Certified Professional - Business Continuity (NCP-BC) 7.5 Free Practice Exam Questions (2026 Updated)

Nutanix 2-node clusters are often used in small remote office (ROBO) environments to provide high availability with a smaller hardware footprint. However, the reduced node count introduces specific limitations on advanced data protection features compared to standard 3-node or larger clusters.

One of the key limitations of a 2-node cluster is the support for high-frequency replication. Technologies like NearSync (which provides RPOs from 1 to 15 minutes) and Synchronous replication (0 RPO) require a minimum of three nodes to manage the necessary metadata overhead, storage consistency, and lightweight snapshot (LWS) engine requirements. In a 2-node cluster, the system is restricted to using standard Asynchronous replication. The minimum RPO supported for standard Asynchronous replication in these small cluster configurations is typically 1 hour (60 minutes). An administrator attempting to set a more aggressive RPO will find that the system does not support the necessary lightweight snapshot infrastructure. Therefore, while a 2-node cluster provides excellent local availability, its off-site disaster recovery capability is limited to a 1-hour RPO, which should be considered during the initial architectural design and risk assessment phase for critical workloads.

A multisite deployment in Nutanix Disaster Recovery allows a single primary cluster to replicate its workloads to multiple destination availability zones (AZs) for increased resilience. While a single " Protection Policy " can define the replication schedules to both recovery sites, the " Recovery Plan " is the separate object responsible for the actual orchestration of the failover.

A Recovery Plan is fundamentally a point-to-point object; it defines how to move workloads from Site A to Site B. If an administrator wants the ability to failover to either of two different recovery AZs, they must create two distinct Recovery Plans: one for AZ1 and another for AZ2. Each plan will contain the site-specific network mappings, boot sequences, and IP mappings relevant to that specific destination. If the administrator has only created a recovery plan for the first AZ, they will be able to see recovery points at both locations but will only have a " target " defined for the first site. The second AZ will not appear as a valid destination in the failover menu until its specific Recovery Plan is built and validated. This modular design ensures that each DR site can have its own customized networking and application orchestration logic.

Nutanix Disaster Recovery provides multisite replication capabilities, allowing a single cluster to protect workloads across multiple locations. However, there are specific architectural constraints regarding the type of replication schedules that can coexist within a single Protection Policy.

The primary limitation in this architect ' s design is that a single Nutanix Protection Policy supports only one synchronous replication schedule. While you can configure a policy to replicate to multiple sites using Asynchronous or NearSync schedules, you cannot natively instruct the system to perform a synchronous " 3-way " write where a single VM mirrors every I/O to two different physical destination clusters simultaneously. This is due to the extreme latency and metadata synchronization overhead that would be required to maintain zero-RPO consistency across three sites for every single write operation. Prism Central does allow pairing with more than one AZ (negating Option B), and synchronous replication is fully supported in Protection Policies (negating Option D). Therefore, to achieve the desired level of protection, the architect would need to use a combination of one synchronous schedule and additional asynchronous schedules to the second AZ, rather than attempting two simultaneous synchronous links within one policy.

The Nutanix Cerebro service manages replication by scheduling snapshots and transferring the delta changes to the remote site. In an asynchronous replication schedule, if a new snapshot is taken before the previous one has finished replicating, the system faces a choice. To ensure that the most current data is available at the recovery site as quickly as possible, Nutanix may " skip " the replication of an older pending snapshot in favor of starting the replication of the newest one.

In this scenario, all infrastructure components (bandwidth, ports, hardware) are verified as healthy and have supported successful replication for months. This points toward a data-level issue rather than a connectivity issue. A " significant one-time surge in change rate " (Option D) means the VM generated a massive amount of new data blocks (churn) in a short period. Because the " Snapshot-on-wire " transfer size is directly tied to the number of changed blocks, this specific snapshot would take much longer than usual to replicate. If the transfer time exceeds the RPO interval, the next scheduled snapshot will trigger. The Cerebro service will see that it has a newer recovery point ready to go and will skip the " stuck " or slow-moving older snapshot to maintain the most recent RPO possible at the target. This behavior generates the " Replication was skipped " warning to notify the administrator that the historical sequence was interrupted due to a temporary imbalance between data churn and available throughput.

The primary purpose of a Test Failover is to validate the recovery process in a non-disruptive manner. When a VM is recovered from a snapshot during a test, it retains its original configuration, including its IP address and hostname. If this test VM were to be powered on on the same network as the live production VM, it would immediately cause a duplicate IP address conflict and potentially disrupt production services or trigger security alerts.

To prevent this disruption, Nutanix Recovery Plans allow administrators to map the production network to a " Test Network " at the recovery site. This test network is typically an " Isolated " VLAN or overlay network that has no physical or logical route back to the production environment. By using an isolated network (Option A), the test VMs can boot up, run their internal services, and even communicate with other test VMs (if placed on the same isolated segment) without any risk of interfering with real users or databases. This allows the infrastructure team to verify that the " Recovered " state is functional while the " Primary " state continues to serve the business, fulfilling the core requirement of non-disruptive testing.

Modern Nutanix Disaster Recovery utilizes Prism Central-based Protection Policies and Recovery Plans, which offer more advanced orchestration and automation than legacy Prism Element-based Protection Domains. When an organization decides to upgrade its DR management, a careful migration path must be followed to ensure that VMs do not lose protection during the transition.

The first and most critical step is to migrate the virtual machines from the legacy Protection Domain to a new PC-based Protection Policy. This process involves adding the VMs to the correct Categories in Prism Central, which then associates them with the new policy. Once the VMs are " claimed " by the Protection Policy, the system will begin managing their snapshots and replication schedules according to the new logic. Only after the VMs are successfully protected under the new system is it safe to " unprotect " them and remove the legacy Protection Domains (and their associated snapshots) to reclaim storage. Attempting to delete snapshots first (Option A) or perform a failover (Option D) before the management handoff is complete could leave the business without a valid recovery point if an outage occurs during the migration window.

Nutanix Metro Availability is a continuous availability solution designed to survive a site failure with zero data loss (Zero RPO). Because it operates on a synchronous replication model, every write performed by a virtual machine must be acknowledged by both the local and the remote clusters before the write is confirmed to the application. This process introduces a " latency penalty " equal to the network Round Trip Time (RTT) between the sites.

To maintain acceptable application performance and ensure cluster stability, Nutanix enforces a strict latency limit of 5 ms RTT between the primary and secondary clusters. If the latency exceeds this 5 ms threshold, the time spent waiting for remote acknowledgments would cause severe performance degradation for high-I/O workloads, such as the SQL or Oracle databases common in financial institutions. Furthermore, high latency increases the risk of the synchronous link being " broken " during periods of high data churn. While the Witness VM (used for tie-breaking) can tolerate much higher latency (up to 200 ms), the data-path link must remain under 5 ms to satisfy the technical requirements of the Metro Availability feature and the performance expectations of Tier-1 business-critical applications.

Volume Groups (VGs) are used in Nutanix to provide block storage to virtual machines, often for high-performance applications like SQL Server. VGs can be attached to VMs in two ways: " In-guest " (using iSCSI initiators) or " Hypervisor-attached " (where the hypervisor handles the connection).

In a disaster recovery scenario managed by Recovery Plans, there is a technical distinction in how these attachments are handled. While Nutanix Disaster Recovery can replicate the data in the Volume Groups and recover the VM itself, VGs that are " hypervisor-attached " do not currently support automatic reattachment as part of the orchestration workflow in all AOS versions. When the failover completes, the VM powers on at the recovery site, but the VGs are not connected to the VM at the hypervisor level. This causes the application (SQL) to find its data disks missing, resulting in the database staying offline. To resolve this, the administrator must manually reattach the Volume Groups to the VM at the recovery site using the Prism interface or a script. This limitation highlights the need to verify specific application storage configurations during DR testing. For automated recovery of VGs, using " In-guest " iSCSI attachments is often preferred because the iSCSI initiator within the guest OS can re-establish the connection to the new cluster ' s Data Services IP once the network is active.

In the Nutanix Disaster Recovery orchestration workflow, Network Mapping is a critical step that tells the system which production VLAN at the primary site corresponds to which VLAN at the recovery site. This ensures that when a VM is recovered, its virtual NIC (vNIC) is " plugged in " to a functional and valid network at the new location.

If an administrator leaves the Network Mapping section blank, the Nutanix orchestrator has no information about where to connect the VM ' s network interface. In this scenario, the priority of the system is to ensure the VM can boot and start its services without causing a " network storm " or security risk. If the system were to simply attach the VM to a random or default network, it could cause IP address conflicts or expose the VM to the wrong security zone. Therefore, the built-in behavior for a failover without a valid mapping is to recover the VM with all its network adapters in a " disconnected " state. The vNIC still exists on the VM, but the " connected " checkbox in the hypervisor is unchecked. This explains why the application owners report that the VMs are " isolated. " To fix this, the administrator must either update the Recovery Plan with the correct mappings and re-run the task or manually connect each VM ' s vNIC to the correct local VLAN in the recovery site ' s Prism interface.

By default, Nutanix clusters use the same management network interface (eth0) for administrative tasks and replication traffic. In high-traffic environments or over narrow WAN links, replication can consume all available bandwidth, impacting management accessibility or other VM traffic. When a new dedicated high-speed link (such as a 10G connection) is added specifically for BCDR, the cluster must be instructed to move its replication traffic to that new path.

The Nutanix solution for this is " Network Segmentation for DR. " This feature allows the administrator to define a new, dedicated network for disaster recovery and replication. By configuring segmentation, the administrator assigns a specific virtual interface (typically ntnx0) and a dedicated set of IP addresses for each Controller VM (CVM) on the new 10G link. Once enabled, the Cerebro and Stargate services will bind to these new " segmented " IPs for all site-to-site data transfers. This effectively offloads replication from the management network, ensuring that the 10G link is fully utilized for BCDR while the management network remains stable for administrative tasks. This configuration provides both better performance for replication (meeting aggressive RPOs) and better overall cluster security and stability through traffic isolation.

Transitioning from legacy Protection Domains (which are cluster-centric) to modern Prism Central-based Protection Policies (which are management-plane centric) is a common task during Nutanix environment upgrades. This migration involves a " handoff " where the responsibility for snapshots and replication shifts from the local Cerebro service on the cluster to the global orchestration provided by Prism Central.

The primary risk during this migration is the creation of a " protection gap. " If an administrator deletes the legacy snapshots immediately after assigning a new policy, and that new policy has not yet successfully completed its first replication cycle, the virtual machine is effectively unprotected. If a disaster occurs at that exact moment, there would be no valid recovery points at the destination site to restore from. Nutanix best practice dictates that legacy artifacts must be preserved until the new system is verified as operational. Once the first recovery point for the VM appears in the Prism Central " Recovery Points " tab, it confirms that the new Protection Policy has successfully captured the VM ' s state and replicated it to the recovery AZ. At this stage, the legacy snapshots in the Protection Domain become redundant and can be safely deleted to reclaim storage space without compromising the organization ' s ability to meet its Recovery Point Objective (RPO) and Recovery Time Objective (RTO).

In Nutanix Protection Domains, the relationship between a virtual machine and a snapshot is tied to the metadata at the time the snapshot was created . When an administrator removes a VM from a PD (Option B), the cluster stops taking new snapshots, but the historical snapshots (recovery points) remain in the storage system until their retention period expires .

If a disaster or corruption occurs (Option Wednesday), the administrator can still use those historical snapshots to perform a " Revert " operation. The Nutanix AOS engine can successfully roll back the VM ' s vDisks to the Monday state because the data exists. However, the " Revert " operation only impacts the data on the disks; it does not re-establish the logical configuration of the Protection Domain. Because the VM was explicitly removed from the PD on Tuesday, the system treats it as an " unprotected " VM after the restore is finished. It will not be included in the next scheduled snapshot cycle of PD_Production. To resume ongoing protection, the administrator must manually add the Inventory-VM back into the PD_Production Protection Domain. This scenario illustrates a critical operational point: restoring data does not automatically restore the protection schedule, and administrators must verify the " Protection Status " of VMs following any manual recovery task to ensure they are not left vulnerable to future failures.

Nutanix manages data recovery operations differently depending on whether a virtual machine is in an asynchronous or synchronous replication state. For a standard Asynchronous VM like " REPORTING-DEV, " the local cluster takes periodic snapshots. If data corruption occurs, the administrator can perform an " In-place Restore " or " Revert " using a local recovery point. This is a standard procedure where the current vDisks are overwritten by the point-in-time data from the snapshot.

However, " ERP-PROD " is part of a Synchronous replication policy (0 RPO). This means the storage container it resides on is effectively " stretched " and locked in an active-active relationship with a remote cluster. Every write must be identical at both sites. If an administrator attempts to " Revert " a synchronous VM to a local snapshot, it would cause an immediate data mismatch between the primary and recovery sites, breaking the zero-RPO guarantee and potentially causing cluster-wide consistency issues. To protect data integrity, Prism Central typically grays out or blocks the " Revert " option for VMs currently in an active synchronous " Sync " state. To recover such a VM, an administrator would generally need to either " Clone " the snapshot to a new VM or temporarily move the VM into an asynchronous state by modifying the policy, thereby unlocking the ability to revert the data disks locally before re-enabling synchronization.

Nutanix uses a " Roll-up " retention strategy to optimize storage while maintaining a range of recovery options. This strategy keeps all high-frequency recovery points for the most recent period and then consolidates (rolls up) older snapshots into daily or weekly points as they age.

For a policy with a 1-hour RPO and 5-day retention, the system is designed to provide granular recovery for the immediate past. By default, Nutanix retention logic maintains the hourly snapshots for the current 24-hour window. As snapshots move past the 24-hour mark, they are " rolled up " into a single daily snapshot to save space while still providing a 5-day historical view. Therefore, after six days of operation, the administrator will find approximately 24 hourly recovery points for the most recent 24 hours, followed by several daily recovery points representing the previous four days. This approach balances the need for surgical " point-in-time " recovery (to combat recent data corruption or ransomware) with the need for long-term historical data, ensuring that the BCDR solution is both effective and storage-efficient.

An In-place Restore (Revert) is the fastest way to roll back a VM because it overwrites the current vDisks with the data from the snapshot. However, this operation has strict requirements regarding the consistency of the VM ' s hardware configuration. The most common technical blocker for an in-place revert is a change in the disk topology between the time the snapshot was taken and the time of the restore.

If the administrator added a new 50GB data disk (Option D) after taking the snapshot, the VM ' s current configuration now includes a vDisk that does not exist in the snapshot ' s metadata. Nutanix AOS cannot " revert " a disk that has no point-in-time reference in the recovery point. In this situation, the " In-place Restore " button is typically disabled or will throw an error, forcing the administrator to use the " Clone " (Out-of-place) option. Cloning creates a new VM based exactly on the snapshot ' s metadata, effectively ignoring the newly added disk. While changing memory (Option B) or NGT versions (Option A) might affect performance or guest features, they do not usually prevent the storage-level revert operation. Being forced into a " Clone " restore increases the RTO slightly, as the administrator must then delete the corrupted VM and ensure the new clone has the correct network settings.

Application-consistent snapshots are critical for ensuring data integrity for transactional workloads, such as databases. In a Nutanix AHV or ESXi environment, the cluster achieves application consistency by communicating with the guest operating system ' s Volume Shadow Copy Service (VSS). This communication is facilitated exclusively through Nutanix Guest Tools (NGT). When NGT is installed and enabled, it provides a VSS hardware provider that Nutanix uses to " quiesce " (pause/stabilize) the application ' s I/O and flush pending writes to the disk before the snapshot is taken. If crash-consistent snapshots are working but application-consistent ones are failing, it is a primary indicator that the VSS hooks provided by NGT are either missing, outdated, or not communicating correctly with the Nutanix cluster services. Without NGT, the system cannot verify the internal state of the guest OS, leading to VSS processing errors in third-party backup solutions like Veeam or Commvault. Ensuring NGT is installed and the NGT agent is running within the guest VM is the mandatory first step to resolving any snapshot failure involving application-level consistency.

In a Nutanix Disaster Recovery environment using Protection Policies (Prism Central-based), the system needs to know which storage container at the recovery site should receive the replicated data from the primary site. This is known as " Container Mapping. " By default, Nutanix uses an " Automatic Container Mapping " feature to simplify administration.

The automatic mapping logic relies on matching names. If a VM is in a container named SalesA at Site A, the system will look for a container named SalesA at Site B to land the data. If the administrator manually created a container at the recovery site but named it SalesB (as in this scenario), the automatic mapping will fail because the names do not match. The system will instead attempt to find a container with the same name, and if it fails to find one, it may create a new one automatically or replication might fail. The fact that SalesB shows 0 bytes confirms that no data was ever sent to that specific container. To fix this, the administrator should either rename the destination container to match the source (SalesA) or manually configure a " Storage Container Mapping " in Prism Central that explicitly links the SalesA container on Cluster A to the SalesB container on Cluster B.

Storage Container mapping is a fundamental requirement for successful replication between Nutanix clusters, as it defines where the replicated recovery point data will reside on the destination cluster. In the early versions of Nutanix Disaster Recovery, administrators had to manually map source containers to destination containers to ensure the replication stream had a valid landing zone. However, to simplify the deployment of BCDR solutions and reduce manual configuration errors, modern Nutanix Disaster Recovery behavior has been enhanced. If the system detects that a VM is protected but no manual container mapping has been established in Prism Central, it will proactively check the recovery site for a container with the same name as the source. If that container does not exist, the orchestrator will automatically create a new storage container with the identical name on the remote cluster to allow replication to proceed without interruption. This automation ensures that " out-of-the-box " protection policies can function immediately even if the recovery site hasn ' t been fully pre-provisioned with storage structures. This behavior prevents replication from failing due to minor administrative oversights and maintains the integrity of the data protection schedule.

Prism Central (PC) acts as the centralized control plane for Nutanix Disaster Recovery, storing the critical metadata for Protection Policies and Recovery Plans. If the cluster hosting the Prism Central instance suffers a total failure, the " brain " of the DR orchestration is lost, and the administrator cannot trigger the Recovery Plans through the usual interface. To address this risk, Nutanix provides the " Prism Central Backup and Restore " feature, which replicates the PC metadata to a remote cluster managed by Prism Element (PE). In a disaster scenario affecting Cluster A, the first and most critical step is to recover the management plane. The administrator must log into Prism Element on the surviving cluster and use the native recovery workflow to restore the Prism Central instance from the most recent backup. Once the PC instance is restored and booted on the surviving cluster, it will once again have access to the Recovery Plans and Protection Policies. Only after the management plane is restored can the administrator then initiate the " Unplanned Failover " tasks to bring up the protected workloads. This process ensures that the RTO is kept low by restoring the automated orchestrator rather than manually re-creating policies and plans on a new instance (Option B).