NCP-MCI-6.10 Nutanix Certified Professional - Multicloud Infrastructure (NCP-MCI v6.10) Free Practice Exam Questions (2026 Updated)

Nutanix AHV networking documentation describes IGMP Snooping as a feature that enables the AHV virtual switch to learn which VMs have joined specific multicast groups through IGMP membership reports. The documentation states that with IGMP Snooping enabled, multicast traffic is forwarded only to VMs that are registered members of a multicast group, preventing unnecessary flooding of multicast packets across all ports. LACP is for NIC bonding, network segmentation is for isolating networks, and LLDP is for link layer device discovery. None of these selectively deliver multicast traffic. Only IGMP Snooping provides the optimized multicast forwarding described.

Data-in-Transit Encryption ensures that replication traffic is encrypted while being sent over the internet.

Option D (Enable Data-in-Transit Encryption) is correct:

This encryptsreplicated data between clusters, ensuring security againstman-in-the-middle attacks.

Option A (Self-encrypting drive) is incorrect:

This protects data at rest, not during transmission.

Option B (UEFI Secure Boot) is incorrect:

Secure Boot prevents unauthorized OS modifications, but doesnot encrypt network traffic.

Option C (Data-at-Rest Encryption) is incorrect:

This encryptsstored data but does not secure replication traffic.

Within Nutanix Recovery Plans, IP address transformations are handled through an automated mechanism known asIP Address Mapping. The documentation describes two methods: fixed mappings and offset-based mappings.

Offset-based mapping allows administrators to maintain consistent host identity attributes such as the last octet while shifting only the subnet portion during DR failover. The internal guidance states, “Offset-based mapping enables automatic recalculation of target IP addresses using offsets applied to source subnets, allowing preservation of host-specific octets across networks.”

Custom scripts are possible but not recommended because Nutanix already provides a built-in, automated IP transformation system. Editing IPs inside VMs after failover is operationally expensive and defeats the purpose of an orchestrated DR workflow. IPAM is useful for dynamic IP assignment but does not preserve the last octet mapping requirement.

Thus, Offset-based IP mapping is the correct mechanism for this requirement.

Data-in-Transit Encryption for Prism Central and CVMs requires specific internal communication ports to be open. Nutanix internal component documentation states:

“Port 2020 is used by the Nutanix encryption service for encrypted CVM-to-CVM communication during Data-in-Transit Encryption operations.”

This port is essential for establishing secure tunnels between control-plane services. Ports 2009 and 2010 are used by other CVM services (e.g., Stargate, Curator coordination) but not for transport encryption. Port 9440 is for Prism UI/API traffic, and while it must be accessible for management, it does not enable encrypted back-end service traffic.

Thus, the administrator must ensure that port 2020 is permitted to enable Data-in-Transit Encryption functionality.

To resolve issues with application-consistent snapshots (script execution failures), two critical actions are needed:

NGT Service Status:From the ECA materials:

“The Nutanix Guest Tools (NGT) service is responsible for executing pre-freeze and post-thaw scripts for application-consistent snapshots. If NGT is not running, these scripts will not execute.”

Script Validation:

“Before relying on scheduled snapshot runs, execute pre-freeze and post-thaw scripts manually to ensure they complete successfully. This helps to rule out script logic or permission issues.”

Ownership or log review of the script path itself (A and B) are secondary and typically not root-cause resolution steps.

Categories in Nutanix are used to group resources and require only a name and a value for definition.

Option A (A name and a value) is correct:

Categoriesrequire a name (e.g., "Production VMs")and a value (e.g., "Tier 1").

These are then applied to VMs, storage, and other resources forpolicy-based management.

Option B (Policy and Entity) is incorrect:

Policiesuse categories but are not required to define a category.

Option C (Service and Scope) is incorrect:

Categoriesdo not require servicesor a defined scope.

Option D (Catalog and Template) is incorrect:

These apply toself-service provisioning, not categories.

Offset-based IP mapping in Nutanix Recovery Plans allows automatic subnet changes during DR failover.

Option D (Utilize Recovery Plan Offset-based IP mapping) is correct:

This methodautomatically adjusts the IP rangewhile keeping the same last octet.

It eliminates the need formanual interventionafter failover.

Option A (Custom script) is incorrect:

Scripting is an option, butRecovery Plan IP mapping is simpler and native to Nutanix.

Option B (Use IPAM) is incorrect:

IP Address Management (IPAM) is useful, butoffset-based mapping provides more control.

Option C (Manually update IPs) is incorrect:

This would betime-consuming and error-prone.

In Nutanix AHV-based clusters, when you want to ensure that a specific VM (e.g., a critical VM like a domain controller) is powered on before other VMs during a host startup or failover scenario, you use the Agent VM configuration setting.

Here’s the exact explanation from the Nutanix ECA course:

“Agent VMs are special VMs that are automatically powered on before other user VMs during host startup or recovery. This ensures that critical VMs, such as those that provide essential services, are always available first.”

In contrast:

✅Recovery Plan (A) — This is used in the context of DR and failover, typically with Nutanix Leap.

✅Host Affinity (B) — Host affinity rules control placement policies of VMs but not startup priority.

✅High Availability (C) — HA ensures VMs are restarted on surviving hosts but does not control startup order.

Therefore, setting the VM as an Agent VM guarantees that it is powered on before the other VMs during host start-up. Let me know if you’d like steps on how to configure an Agent VM within Prism Central or Prism Element!

Duringfailover in Nutanix Disaster Recovery, VMs retain theirstatic IPsbut maylose DNS settingsif the network configuration at the DR site is different from the primary site.

Option B (Create custom in-guest scripts) is correct:

Custom scriptsallowWindows or Linux VMs to restore DNS settings automaticallyafter failover.

These scripts can be executed usingpost-failover automationin Nutanix DR policies.

Option A (Self-Service Restore) is incorrect:

Self-Service Restore is used forend-user recovery of deleted files, not for network settings.

Option C (nncli tool) is incorrect:

Thenncli toolis used fornetwork troubleshooting, but it does not automatically restore DNS settings.

Option D (Configure a Protection Domain) is incorrect:

Protection Domains definereplication policies, but they do not fix DNS settings after failover.

The “nutanix” user is a system-level account required by the platform for internal operations, automation, cluster communication, and support access. It cannot be deleted or renamed. Nutanix security guidelines state:

“The correct method to prevent password-based SSH access for system accounts is to use Cluster Lockdown mode, which disables password authentication and enforces key-based access for all system-level CVM accounts.”

Cluster Lockdown modifies SSH configuration across all CVMs, ensuring:

password authentication is disabled

only key-based authentication is permitted

privileged system accounts such as ‘nutanix’ cannot log in interactively

Blocking port 22 is not appropriate because it would block SSH entirely, including legitimate administrative access. The “nutanix” user cannot be renamed or removed due to system dependency.

Thus, enabling Cluster Lockdown is the proper Nutanix-approved method to remove password-based SSH access for system accounts.

When creating a storage container in Nutanix, the administrator must configure the correctcapacity settings:

Option A (Prism Element with Advertised Capacity of 100 GiB) is correct:

Advertised Capacitydefineslogical limitsfor the container (i.e., how much space it reports as available).

Inline Compressioncan be enabled directly in Prism Element.

Option B (Create in Prism Element without Advertised Capacity)is incorrect:

Without specifyingAdvertised Capacity, the container may consume unlimited storage.

Option C (Create in Prism Central with Reserved Capacity)is incorrect:

Reserved Capacityapplies toQuality of Service (QoS) policies, not storage limits.

Option D (Create in Prism Central without capacity limits)is incorrect:

Prism Central can manage storage but does not directly enforceRF1 and compression policies.

When usingFQDN instead of a Virtual IP in a scale-out Prism Central deployment, Nutanixenables load balancing across multiple Prism Central instances.

Option A (Load balancing) is correctbecause it ensures that requests are distributed among multiple Prism Central nodes, improving performance and redundancy.

Option B (Resiliency) is incorrectbecause resiliency is achieved through HA and replication, not through FQDN configuration.

Option C (Segmentation) is incorrectbecause network segmentation is handled at the VLAN or security policy level.

Option D (SSL Certificate) is incorrectbecause SSL certificates can be applied regardless of whether FQDN or Virtual IP is used.

High SSD utilization in a hybrid cluster can lead to increased I/O latency as new writes may spill over to HDDs, reducing overall performance.

Option D (Average I/O latency in the cluster may increase) is correct:

If SSD usage isabove 75%,data tiering shifts to slower HDDs,increasing latency.

Option A is incorrect:

SSD failures are managed via redundancy policies (RF2/RF3), and high utilizationdoes not impact failure handling.

Option B is incorrect:

Metadata is stored separately, and high SSD usage does not mean metadata is at risk.

Option C is incorrect:

Clusters do not go into read-only mode due to high SSD utilization—they simply experienceperformance degradation.

The Nutanix AHV virtualization guide explains that vGPU-enabled VMs can be live migrated only when the destination host contains compatible GPU hardware and has available vGPU capacity matching the profile assigned to the VM. The documentation states that the VM must have "adequate and equivalent GPU resources on the target host" for migration to proceed. Host affinity is a limiting factor and not a requirement. Agent VMs are not designed to be migrated. Changing the vGPU profile is not necessary as long as the target host supports the currently assigned profile. Therefore, ensuring the destination host has sufficient compatible resources is the required condition.

Understanding the Issue

The administrator is investigating VM performance complaints and is analyzing CPU Ready Time data.

CPU Ready Time is a crucial metric in Nutanix and virtualization environments (AHV, ESXi, or Hyper-V).

It measures the amount of time a VM is waiting for CPU scheduling due to resource contention.

High CPU Ready Time indicates that VMs are ready to run but are waiting because the host lacks available CPU resources.

Analysis of the Exhibit

The graph shows CPU Ready Time spikes for multiple VMs.

Some VMs have CPU Ready Time exceeding 18% to 21.5%, which is very high.

A healthy CPU Ready Time should be below 5%.

Values above 10% indicate CPU contention, and anything above 20% is critical and requires immediate troubleshooting.

Evaluating the Answer Choices

❌(A) Check the number of vCPUs assigned to each CVM. (Incorrect)

CVMs (Controller VMs) have fixed CPU allocation, and modifying their vCPU count is not recommended unless advised by Nutanix Support.

The issue is related to VM CPU contention, not CVM configuration.

✅(B) Review host CPU utilization. (Correct Answer)

High CPU Ready Time suggests CPU overcommitment or host saturation.

The administrator should check host CPU usage in Prism Central to determine if the cluster is overloaded.

If host CPU usage is consistently above 85–90%, VMs are competing for CPU resources, leading to high CPU Ready Time.

❌(C) Assess cluster SSD capacity. (Incorrect)

SSD capacity impacts storage performance (latency, read/write speeds) but does not affect CPU Ready Time.

High CPU Ready Time is a CPU scheduling issue, not a storage bottleneck.

❌(D) Enable VM memory oversubscription. (Incorrect)

Memory oversubscription does not impact CPU scheduling.

Enabling memory oversubscription affects RAM allocation, but CPU Ready Time is strictly related to CPU contention.

Next Steps to Diagnose & Resolve the Issue

Review Host CPU Utilization:

Navigate to Prism Central → Analysis → CPU Usage per Host.

Identify hosts experiencing high CPU load.

Check VM vCPU Allocation:

Ensure that VMs do not have excessive vCPUs assigned, which can lead to scheduling inefficiencies.

Overprovisioning vCPUs can cause unnecessary contention.

Balance Workload Across Hosts:

Use Nutanix AHV DRS (Dynamic Scheduling) or VMware DRS to redistribute VMs across hosts.

Check if certain hosts are overloaded while others have spare CPU capacity.

Consider Scaling Out the Cluster:

If CPU usage is consistently high, adding more nodes may be required to reduce CPU contention.

Multicloud Infrastructure References & Best Practices

CPU Ready Time Best Practices:

Keep CPU Ready Time below 5%.

Avoid overcommitting vCPUs on heavily loaded hosts.

Monitor Prism Central Runway Metrics to predict future CPU resource needs.

Nutanix AHV CPU Scheduling Optimization:

Ensure proper VM sizing (avoid excessive vCPU allocation).

Balance workloads using Nutanix AHV DRS.

Application discovery in Prism Central requires sufficient Prism Central resources and an active internet connection to retrieve application signatures.

Option A (Sufficient Prism Central VM resources) is correct:

Prism Central needsadequate CPU and memoryto process application signatures and discovery data.

Option B (Internet connection) is correct:

Application discovery depends on Nutanix’scloud databaseto recognize application patterns.

Option C (API key and key ID) is incorrect:

API keys are not requiredfor automatic application discovery.

Option D (Network controller enabled) is incorrect:

Application discoverydoes not depend on a network controller feature.