NCP-MCI-7.5 Nutanix Certified Professional - Multicloud Infrastructure (NCP-MCI) 7.5 Free Practice Exam Questions (2026 Updated)

This question is about CPU feature compatibility, not storage or networking uniformity. Nutanix documentation and KB guidance explain that VM migration can fail when clusters contain nodes with different CPU generations or different exposed CPU features. A VM that is already running with features negotiated on a newer-generation CPU may not live-migrate successfully to an older or feature-different node until it is power-cycled or configured with advanced processor compatibility. That makes C the correct answer. ( portal.nutanix.com , portal.nutanix.com , portal.nutanix.com )

The important subtlety is that “same core count, memory, storage, subnet, and software version” does not guarantee CPU-feature equivalency. Firmware or ADS activity is not the primary issue described. Affinity rules can restrict placement, but the classic symptom after mixing repurposed nodes is CPU compatibility. Nutanix also documents that advanced processor compatibility settings persist across migrations and power cycles, reinforcing that CPU exposure is the real gating factor here.

Nutanix documentation explains that Projects in Prism Central provide logical groupings of infrastructure resources and user access, and that you can add users and user groups to a project while also allowing clusters and subnets in that project. That is exactly the mechanism used when a user group needs controlled access to resources drawn from multiple clusters. The project becomes the governance boundary that ties users, roles, and infrastructure scope together. Therefore A. Configure Nutanix Projects is the correct answer. ( Nutanix Portal )

The other choices are unrelated to access scoping across clusters. Advanced Network Controller deals with networking services and policy capabilities, not user resource assignment. Micro Services Platform is not the RBAC/governance feature for multi-cluster access. Availability Zone is relevant for placement and DR topologies, not for delegating cluster resources to user groups. Nutanix’s governance guidance is clear that Projects are the construct used to organize infrastructure resources and assign them to users or groups with the proper RBAC controls. So for a user group that needs access to resources from multiple clusters, the authentic Prism Central action is A. ( Nutanix Portal )

Nutanix’s NCC ec_enablement_check identifies containers where erasure coding could save space, but administrators still need to apply judgment based on workload behavior. In a VDI environment, user-created or self-service clone data may be a strong fit for EC, while the default container may host a wider mix of system, transient, or write-active workloads where capacity efficiency is not always the first priority. Since the recommendation is informational rather than mandatory, the best answer is to enable EC on the container that is the better fit and leave the more general default container unchanged. That makes D the most balanced answer.

This question is testing operational discretion. “Enable EC everywhere NCC mentions” is too simplistic. Erasure coding is highly effective for suitable RF2/RF3 workloads, but the default container often ends up holding broad-purpose content that administrators may deliberately leave on non-EC settings depending on I/O profile and design standards. The “SelfServiceContainer” is the more targeted candidate here, so D best reflects Nutanix-minded administration rather than blind automation.

Nutanix documentation for Active Directory authentication in Prism Element states that the default LDAP port is 389, while port 636 is used for LDAPS, which provides encrypted LDAP traffic. Because the question explicitly says the administrator wants all traffic encrypted, the correct port is 636. That is the standard LDAPS answer and the one Nutanix documents directly.

The missing exhibit is not actually necessary to answer the question because the encryption requirement itself is enough. Ports 443 and 9440 are associated with web interfaces or management access, not LDAP directory authentication transport. Port 389 is unencrypted LDAP unless other mechanisms are layered on top. Nutanix’s own directory-authentication docs make the intended answer clear: use LDAPS on port 636. Therefore C is the authentic Nutanix answer.

Nutanix security guidance is explicit on this point. After adding an SSH public key and verifying connectivity, Nutanix recommends disabling password authentication for all CVMs and AHV hosts to reduce interactive access risk. The Security Guide notes that after the SSH key inclusion and connectivity validation are complete, password authentication should be disabled as the next hardening step. That makes B the correct answer.

This is a straightforward hardening sequence question. The administrator has already completed the prerequisite—public-key access is working—so the next step is to remove the weaker interactive method. Core dumps, login banners, and UI session settings do not address SSH authentication exposure. Nutanix’s security model favors moving from password-based remote shell access to key-based access only. Therefore B is the authentic and recommended next step.

Nutanix documentation for updating an existing virtual switch describes both Quick and Standard (Recommended) methods. Nutanix explicitly recommends the Standard method for production-style changes because it applies updates in a controlled rolling manner, typically by migrating workloads and updating nodes sequentially to minimize impact. The Quick method is available only in certain update scenarios and is not the recommended path for critical workloads when avoiding disruption is the priority. That makes A correct. ( portal.nutanix.com , portal.nutanix.com , portal.nutanix.com )

Deleting and recreating the switch would be far more disruptive. Putting all nodes into maintenance mode at once defeats the entire purpose of non-disruptive rolling change. Nutanix’s own recommendation in this area is the strongest clue: for production, use the Standard method.

Nutanix documentation for Prism Central point-in-time backup states that the system supports one point-in-time backup target at a time. Nutanix further documents that Prism Central can be backed up to registered clusters, Nutanix Objects, AWS S3, or generic S3-compliant storage, but the platform still supports only one active point-in-time backup target concurrently. Therefore the correct answer is A. 1.

This question is easy to overthink because the product supports multiple target types, but that is different from supporting multiple simultaneous configured S3 targets for one Prism Central instance. Nutanix’s wording is explicit and leaves little ambiguity: one backup target at a time. That means answers B, C, and D are not consistent with the documented PC backup design. So for a study guide grounded in current official Nutanix documentation, the authentic answer is A.

In Prism Central VM efficiency and behavioral-learning views, Nutanix groups inefficient VMs into categories such as over-provisioned, inactive, bully, and constrained. A constrained VM is one that does not have enough resources for its workload and is therefore experiencing pressure. Nutanix documentation ties constrained status to signs such as CPU readiness, memory swapping, or other stress indicators that show the VM is not adequately provisioned for what it is trying to do. That means the best interpretation is that those VMs are lacking sufficient resources, which is option B. ( Nutanix Portal )

This category is different from the other distractors. An inactive VM is mostly idle and not making meaningful use of its assigned resources. An over-provisioned VM is wasting capacity because it was allocated too much. A VM that is merely “consuming too much CPU” could be a bully VM or simply a busy VM, but that alone does not define the constrained classification. Nutanix uses the constrained label to signal a right-sizing opportunity in the direction of adding or adjusting resources, not reclaiming them. Therefore the most accurate answer is B, because constrained VMs are the ones that are short on sufficient resources for their workload behavior. ( Nutanix Portal )

Nutanix documentation for multisite disaster recovery states that a protection policy can include multiple replication schedules across up to three different recovery clusters, and Nutanix also documents the ability to configure multisite replication schedules for up to three recovery clusters with different schedules. That means a source site can protect workloads to multiple destinations without requiring separate, duplicated protection policies for each site. Given the options, the most efficient approach is therefore one protection policy from the source cluster covering all three sites, which is option D.

The answer choices that create multiple separate protection policies are less efficient and introduce avoidable administrative duplication. Cloning policies across sites also misses the point of Nutanix’s native multisite capability. Even though the sites are managed by different Prism Central instances, Nutanix documents DR support between clusters registered to different Prism Central instances as well. So the most scalable and documentation-aligned answer is D.

Nutanix AHV networking documentation identifies Active-Active with MAC pinning, also known as balance-slb, as the bond mode that can increase host and VM bandwidth utilization across multiple adapters without requiring additional physical-switch configuration. That makes D the correct answer. By contrast, balance-tcp is associated with LACP and therefore depends on switch-side configuration. ( portal.nutanix.com , portal.nutanix.com , portal.nutanix.com )

This is one of the most fundamental AHV bond-type questions. Active-Backup gives redundancy but not simultaneous bandwidth use. No Uplink Bond provides neither aggregation nor redundancy. Because the requirement explicitly says “across multiple physical adapters” and “without additional switch configuration,” the answer must be balance-slb.

Nutanix Self-Service and NCM documentation explains that approval policies are built around defined conditions and approvers, and those policies are part of the broader Policy Engine capability. Nutanix further documents that the Policy Engine is included in NCM and provides the governance framework for conditions-based approvals before deployment actions proceed. Since the question asks specifically about defining conditions and approvers that must be satisfied before deployment, the correct enabling component is Policy Engine.

Marketplace can host deployable items, but it does not by itself provide the approval-governance mechanism being asked about. Nutanix Central and Power Monitor are unrelated to approval workflows. The wording in the question almost mirrors Nutanix’s own approval-policy description, which is why the intended answer is clear. To enforce conditional approvals before provisioning or deployment actions, administrators use Policy Engine. Therefore A is the authentic answer.

If the organization has changed naming conventions and needs VM disks placed into containers that comply with the new standard, the direct operational method is to move the VM’s virtual disks to the correct container. In Nutanix, that action is done through live vDisk migration. This preserves workload availability while relocating storage placement to the new destination container that matches policy. The question is really about correcting existing placement, not just defining intent for future objects. ( Nutanix Portal )

The other options do not solve the immediate placement problem. A storage policy can influence behavior, but it does not retroactively relocate already placed vDisks unless that policy is tied to an action that changes their storage location. Image placement policy affects images, not existing VM disk residency. Renaming storage containers is not the right operational answer here because naming policy changes usually result in a need to place workloads into the correct containers, and administrators do not rely on renaming alone to change where current VM data lives. Nutanix’s management model supports live movement of VM storage, so A is the practical and technically correct answer. ( Nutanix Portal )

When Prism Central is scaled out for resiliency, the design goal is not only to have multiple Prism Central VMs, but also to ensure they are not placed together in a way that creates a common point of failure. Nutanix documentation around anti-affinity policies explains that VM-VM anti-affinity is used to keep selected VMs from running on the same host. In a scaled-out Prism Central deployment, this placement separation is the logical next step to strengthen resiliency, because it prevents the Prism Central instances from collapsing onto the same physical host and failing together during a node outage. ( Nutanix )

The other options are either unrelated or not the primary required follow-up. Witness Service is associated with Metro Availability and DR designs, not with the baseline requirement of distributing Prism Central VMs after scale-out. Protection Domain protection may be useful in some cases, but it does not solve co-location risk. HA reservations on the hosting Prism Element cluster address restart capacity, not placement diversity. The most direct resiliency improvement after scaling out Prism Central is to enforce separation between the Prism Central VMs. That is why D is the best answer. ( Nutanix )

Here the uploaded answer key says D, but official Nutanix documentation supports B. Nutanix documents that for enhanced security of ROBO environments (typically 1- or 2-node clusters), administrators should select Native KMS (remote) for software-based encryption. Nutanix also states in KMS considerations that software encryption using Native KMS is supported for ROBO deployments using the Native KMS (remote) KMS type. Because the question explicitly describes a 2-node ROBO cluster and requires the keys to be stored outside the cluster, the Nutanix-authentic answer is B. Native KMS (remote).

An external KMS is valid in many enterprise encryption designs, but this question is more specific: it asks for the KMS type Nutanix supports and recommends for software encryption on a ROBO cluster. On that narrow requirement, the official docs point to Native KMS (remote) rather than External KMS. So for an authentic study guide aligned to Nutanix documentation, B is the correct answer.

Nutanix documentation for PD-based DR remote-site configuration states that if vStore mapping is not configured, replication occurs to the remote container with the same name as the source container. Nutanix further explains that this fallback relies on the existence of that matching destination container. Therefore, if same-name containers do not exist on the two sites and no explicit vStore mapping is defined, the replication target cannot be resolved correctly and the replication will fail. That makes A the correct answer.

This behavior is intentional. Nutanix does not randomly pick a destination container, nor does it silently force all replications into the default container. When administrators want different container names between source and target, the supported mechanism is vStore mapping. Skipping that mapping only works when identical container names already exist at both sites. Because the question explicitly removes that condition, replications fail to complete, which is why A is the authentic answer.

Nutanix documentation confirms that a Prism Element cluster can be registered with only one Prism Central at a time, so option B is false. Nutanix also documents support for deploying multiple Prism Central instances on the same Prism Element cluster, so option A is false as well. The presence of a dedicated Nutanix doc for deploying multiple Prism Central instances on one PE cluster directly disproves option A. ( Nutanix Portal )

That leaves C and D. Nutanix documentation does not position Marketplace as the standard mechanism described in this context for deploying additional Prism Central instances. By contrast, Nutanix clearly documents registration and unregistration workflows, including the fact that clusters can be unregistered when no longer needed and later registered again. Since a cluster can only be attached to one Prism Central at a time, repeating register/unregister operations is a valid administrative action in supported workflows. Therefore D is the best valid statement among the given options. This question is mostly testing whether you know the difference between deployment support and registration exclusivity. Multiple PC instances may exist on the cluster, but registration to management is still one-at-a-time. ( Nutanix Portal )

Nutanix Move is primarily a migration platform for virtual machines, but Nutanix also documents adjacent migration capabilities around file shares to Nutanix Files and migration of NSX local-manager constructs to Flow Network Security (FNS) in supported scenarios. Among the listed answers, only A aligns with the documented Nutanix migration direction set and product intent. Option A stays within the realistic Nutanix ecosystem patterns rather than inventing broad cloud-to-cloud and hypervisor-to-hypervisor combinations that Nutanix Move is not presented as supporting.

The other options are not credible when compared with Nutanix Move’s official scope. AHV-to-Azure or AHV-to-ESXi is not how Nutanix Move is typically documented, and some of the listed items mix unrelated technologies in unsupported ways. This question is testing whether the candidate can distinguish Nutanix’s actual migration tooling scope from made-up combinations. Since Nutanix Move is centered on migrating VMs into Nutanix environments and related supported migration paths such as file shares to Files and NSX local manager to FNS, the correct answer is A.

Here the uploaded answer key says B, but the current Nutanix documentation for post-restoration considerations says that after restoring Prism Central, administrators should reset the credentials, and it explicitly lists that as a post-restore action. The same Nutanix page also mentions other follow-up tasks such as reconfiguring the proxy server or FQDN if needed, but resetting credentials is directly named as a required post-restoration consideration. Because the question asks what should be done once Prism Central is restored, the most documentation-faithful answer is D. Reset the credentials. ( Nutanix Portal )

The confusion probably comes from related Nutanix guidance that after a restore, some services may continue with self-signed certificates or rotate certificates as part of Microservices Infrastructure behavior. That can make certificate replacement necessary in some environments, but it is not the clearest universal immediate post-restore action documented in the restoration considerations. By contrast, reset the credentials is explicitly listed in the post-restoration guidance. So for an authentic study guide grounded in Nutanix docs rather than only the source key, D is the correct answer. ( Nutanix Portal )

Incrementing rx_crc_errors usually point to a Layer 1 or physical-path problem, not a CPU or memory issue. CRC errors mean frames are arriving corrupted, and the most common reasons are a faulty cable, damaged transceiver, bad port, or another physical medium issue between the AHV host and the switch. Because the CRC counter is specifically increasing while other counters like missed, FIFO, and general rx errors remain low, this strongly suggests corruption during transmission rather than host overload. That makes B the correct answer.

A duplex mismatch can cause broader link-performance problems, but the pattern of steadily rising CRC errors is much more classically tied to bad physical media. MTU issues usually show fragmentation or packet-handling problems, not CRC corruption itself. CPU saturation does not create on-the-wire checksum corruption. In Nutanix troubleshooting, when CRC counters rise repeatedly, the correct operational response is to inspect and swap the cable or optics, verify switch-port health, and test the NIC path physically. So B is the strongest technical match.