NCP-CI-Azure Nutanix Certified Professional - Cloud Integration - Azure (NCP-CI-Azure v6.7) Free Practice Exam Questions (2025 Updated)

Payment Method Options:When using a Pay As You Go subscription plan and opting to pay directly to Nutanix, wire transfer is a valid and secure payment method.

Direct Payment:Wire transfers allow for the direct transfer of funds from the organization's bank account to Nutanix, ensuring a straightforward and efficient payment process.

References:

Nutanix Billing and Payment Documentation

Pay As You Go Subscription Payment Methods Guide

To allow access from the native Azure VMs to the workloads running in the Nutanix User VPC, the administrator needs to:

Adjust the Inbound Network Security Group (NSG) on the Flow Gateway VM's Internal NIC.

Specifically, allow traffic from the subnet range of the native Azure VMs (10.20.80.0/20) in the Inbound rules of the NSG associated with the Internal NIC of the Flow Gateway VM.

This configuration change permits the desired network traffic, ensuring that the native Azure VMs can communicate with the workloads in the Nutanix User VPC.References

Azure Network Security Groups Overview

Nutanix Networking and Security Best Practices

DNS Server Options:

Cloudflare: A public DNS service that operates over the internet.

Azure: Azure DNS operates within the Azure cloud and does not require VPN or ExpressRoute for connectivity within Azure.

On-premises: Requires a secure connection, such as VPN or ExpressRoute, to be accessible from Azure, as it resides outside the Azure cloud.

Google: Another public DNS service accessible over the internet.

Connectivity Requirements:

On-premises DNS: To integrate on-premises DNS with Azure, secure connectivity (VPN or ExpressRoute) is necessary to ensure seamless and secure communication between the on-premises infrastructure and Azure resources.

Conclusion: An on-premises DNS server would require VPN or ExpressRoute connectivity to be accessible and integrated with the Azure environment.

References:

Azure DNS Overview

VPN Gateway Configuration

ExpressRoute Overview

Jump Host Deployment:A Jump Host is a secure server used to access other systems in a network. In the context of an NC2 cluster on Azure, it serves as an intermediary for accessing Prism Element and Prism Central.

Flexible Deployment Options:The Jump Host can be deployed in either the Prism Central VNet or an external VNet, providing flexibility in network design and access strategies. This allows the organization to choose the most suitable network for deploying the Jump Host based on their security and connectivity requirements.

References:

Nutanix NC2 on Azure Deployment Guide

Azure Virtual Network Configuration Documentation

API Key Management:For NC2 to manage Azure resources successfully, it needs to authenticate and authorize API calls. This is typically handled through API keys, which are managed via specific endpoints.

Required Connection:The endpointapikeys.nutanix.comis crucial for managing these API keys. Ensuring connectivity to this endpoint allows NC2 to verify and utilize the API keys needed for interacting with Azure services.

References:

Nutanix NC2 API Configuration Guide

Azure API Management Documentation

No-NAT Path Requirement:For a No-NAT path to function, the external networks must be able to route traffic directly to the Nutanix User VPC without translation.

Externally Routable IP Address:The externally routable IP address ensures that traffic from outside networks can reach the Nutanix User VPC.

Address Space Compatibility:Sharing the same address space as the Nutanix User VPC allows for seamless integration and communication between the external network and the User VPC.

References:

Azure Virtual Network Documentation on IP Addressing

Nutanix NC2 Configuration Guide on No-NAT Networking

Purpose of an Organization in NC2:In the NC2 console, an organization serves to manage and segregate clusters based on specific requirements such as departmental needs, project goals, or security policies.

Cluster Management:This segregation allows administrators to apply unique configurations, permissions, and policies to different clusters within the same environment, providing flexibility and control over resource allocation and management.

References:

Nutanix NC2 Console Documentation

Best Practices for Managing NC2 Clusters

Cloud Hardware Support: For issues related to cloud hardware, such as EC2 instances or VPC configurations, the responsible entity is typically the public cloud vendor.

Nutanix Responsibility: Nutanix manages the software layer and integration aspects of the NC2 service, but the underlying hardware support is managed by the cloud provider (e.g., AWS, Azure).

Support Process:

Public Cloud Vendor: Contact the public cloud vendor for issues directly related to the hardware, as they own and manage the physical infrastructure.

Nutanix: For software and configuration issues specific to the NC2 service, contact Nutanix support.

Conclusion: For cloud hardware-related support, the appropriate contact is the public cloud vendor.

References:

Nutanix Support Guide

Azure Support Documentation

BGP Gateway Deployment:The BGP gateway is deployed as Azure native VMs within the Prism Central VNet. This deployment ensures seamless integration with Azure's networking infrastructure.

Route Advertisement:The BGP gateway advertises the externally routable IP addresses to the Azure Route Server. This setup allows for dynamic routing and efficient traffic management.

Flow Gateways (FGW) as Next Hops:Each active Flow Gateway's external IP address is used as the next hop. This configuration ensures that southbound traffic is correctly routed to the appropriate Flow Gateway, providing efficient and reliable connectivity.

References:

Nutanix NC2 Networking Guide

Azure Route Server and BGP Documentation

Azure Monitor Overview: Azure Monitor is a comprehensive monitoring service that collects, analyzes, and acts on telemetry data from Azure resources.

Key Metrics Monitoring: Azure Monitor enables the monitoring of various Azure services such as virtual networks, virtual machines, and bare metal hosts, providing insights and visibility into their performance and health.

Comparison of Services:

Resource Manager: Manages Azure resources but does not provide detailed monitoring capabilities.

Azure Service Health: Provides personalized alerts and guidance when Azure service issues affect you but is not a comprehensive monitoring solution.

Azure Network Watcher: Focuses on network performance monitoring and diagnostics but does not cover all resource types.

Conclusion: Azure Monitor is the most suitable service for monitoring key metrics across a wide range of Azure services.

References:

Azure Monitor Documentation

Nutanix NC2 on Azure Monitoring Guide

Flow Gateway VMs: Flow Gateway VMs are used to manage and route network traffic within an NC2 on Azure cluster, ensuring sufficient bandwidth for workloads.

Scalability: To ensure enough available bandwidth, multiple Flow Gateway VMs can be deployed.

Maximum Limit: The highest number of Flow Gateway VMs that can be deployed within an NC2 on Azure environment is 6, providing the necessary capacity to handle high traffic volumes and ensure optimal performance.

Conclusion: Deploying up to 6 Flow Gateway VMs ensures adequate bandwidth for NC2 workloads.

References:

Nutanix Clusters Networking Guide

Azure Network Performance Documentation

Log Modules in Prism Central:When configuring a syslog server, different log modules can be selected to send logs to an external syslog server for centralized logging and analysis.

Acropolis Logs:The Acropolis module captures logs related to the Acropolis Hypervisor (AHV), including virtual machine operations, storage operations, and other critical functions within the Nutanix environment.

References:

Nutanix Prism Central Administration Guide

Nutanix Acropolis Documentation

Replication Factor (RF3):RF3 requires that data is replicated across three different nodes to ensure data durability and fault tolerance. This replication scheme allows the system to tolerate the failure of two nodes simultaneously.

Minimum Node Requirement for RF3:To meet the RF3 requirements while maintaining operational capability, a minimum of five nodes is necessary. This configuration ensures that there are enough nodes to distribute the data and provide the necessary redundancy.

References:

Nutanix Replication Factor Documentation

Nutanix NC2 on Azure Deployment Guide

ERP Configuration: ERP (External Route Prefix) settings determine how traffic is routed between subnets and VPCs.

Objective: The goal is to isolate Darren-Tier3 while ensuring proper routing for Tier1 and Tier2.

Transit VPC ERP: Setting it to 10.0.0.0/16 ensures that it covers the entire VPC range, allowing traffic within Tier1 and Tier2.

Servers ERP: Setting it to 10.0.4.0/24 ensures isolation for Darren-Tier3 by limiting traffic to that specific subnet and preventing external traffic from reaching it.

Conclusion: This configuration achieves the isolation of Darren-Tier3 while allowing proper routing for Tier1 and Tier2.

References:

Nutanix Networking Documentation

Azure Virtual Network Documentation

Initial Access: To gain access to the NC2 console, users need to create an account on the Nutanix platform.

My Nutanix Account: Creating a My Nutanix account provides access to the Nutanix console, support, and other resources.

Free Trial and Billing Portal: Starting a free trial or accessing the billing portal can be subsequent steps but require an initial account.

Support Case: Opening a support case is not necessary for initial access but might be needed for specific issues later.

Conclusion: Creating a My Nutanix account is the first step to accessing the NC2 console and other Nutanix services.

References:

Nutanix Account Creation Guide

Getting Started with Nutanix NC2

Equal-Cost Multi-Path (ECMP) Routing:ECMP allows multiple gateways to be used simultaneously for load balancing traffic across multiple paths. In this scenario, ECMP is configured to point to the external subnets in the Nutanix Transit VPC.

Traffic Distribution:All four Flow Gateway instances will be used to distribute the outgoing traffic from the application server based on the ECMP default route configuration. This ensures efficient load balancing and utilization of all available gateway resources.

Bidirectional Traffic:Both sending and receiving traffic will utilize all four Flow Gateway instances, ensuring high availability and performance for network-intensive applications.

References:

Nutanix NC2 Networking Guide

Azure Networking Documentation on ECMP

Flow Virtual Networking: Nutanix Flow Virtual Networking allows for the creation of overlay networks to segment and manage network traffic.

Network Types:

Underlay: Refers to the physical network infrastructure.

Overlay: Logical network built on top of the physical infrastructure, providing flexibility for creating isolated subnets and accommodating different workloads.

VPC: Virtual Private Cloud, a network within a public cloud provider.

VNET: Azure-specific virtual network.

Requirement: Creating a subnet for new workloads within Flow Virtual Networking suggests using an overlay network for logical separation and management.

Conclusion: An overlay network within Flow Virtual Networking will satisfy the task of accommodating a new type of workload in the NC2 Azure instance.

References:

Nutanix Flow Networking Guide

Azure Virtual Network Documentation

Floating IP Address Limitation:The cluster already has 25 floating IP addresses in use by other VMs. If the administrator cannot assign a floating IP address to the new VM, it is because the pool of available floating IPs is exhausted.

Requesting Additional Floating IPs:To resolve this issue, the administrator needs to request additional floating IP addresses to be allocated to the NAT subnet. This will ensure that there are enough IP addresses available for all VMs requiring inbound connectivity.

References:

Nutanix Networking Configuration Guide

Azure IP Address Management Documentation

To collect the appropriate logs (Cluster_agent, Host_agent, and Hostsetup) for diagnosing the deployment issue with Nutanix Support, the administrator should:

Log in to Prism Element to access the Controller VM (CVM) console.

Run thelogbay collectcommand from the CVM console. This command collects the necessary logs and packages them for support.

This method ensures that the correct logs are gathered in a format that Nutanix Support can analyze.References

Nutanix Support Documentation on Log Collection