After creating a new Nutanix User VPC, what is needed to allow traffic to flow out of the Flow gateway VM when using the NATed Path?
Answer(s): C
NATed Path Configuration: When using the NATed Path, it is essential to ensure that traffic can flow out of the Flow gateway VM to external networks.Default Route: Adding a default route on the Nutanix User VPC ensures that all outbound traffic is directed to the appropriate network gateway.Configuration Steps:Navigate to the routing settings of the Nutanix User VPC. Add a default route with the destination of 0.0.0.0/0, pointing to the External Overlay network.Security Group Settings:Ensure that the External Flow Gateway Security Group on the External NIC allows outbound traffic. Ensure that the Internal Flow Gateway Security Group on the internal NIC allows outbound traffic (if needed for internal network flows).Conclusion: Properly configuring the default route on the Nutanix User VPC enables outbound traffic flow via the NATed Path through the External Overlay network.
Nutanix Flow Gateway Configuration GuideAzure VPC Routing Documentation
Which entity should be contacted for cloud hardware support (EC2 instances, VPC, etc) related to NC2?
Answer(s): B
Cloud Hardware Support: For issues related to cloud hardware, such as EC2 instances or VPC configurations, the responsible entity is typically the public cloud vendor. Nutanix Responsibility: Nutanix manages the software layer and integration aspects of the NC2 service, but the underlying hardware support is managed by the cloud provider (e.g., AWS, Azure).Support Process:Public Cloud Vendor: Contact the public cloud vendor for issues directly related to the hardware, as they own and manage the physical infrastructure.Nutanix: For software and configuration issues specific to the NC2 service, contact Nutanix support. Conclusion: For cloud hardware-related support, the appropriate contact is the public cloud vendor.
Nutanix Support GuideAzure Support Documentation
When configuring permissions for an Azure subscription, which role is required to delegate minimum permissions for the Azure AD App registration?
Answer(s): A
Azure AD App Registration: When setting up an application registration in Azure AD, specific permissions are required to delegate access.User Access Administrator Role: This role has the necessary permissions to manage user access to Azure resources, including delegating permissions for app registrations.Comparison of Roles:Azure Reader Role: Grants read-only access, insufficient for managing app registrations. Azure Contributor Role: Allows creation and management of resources but does not include permissions to manage access.Azure Custom Role: While it can be defined to meet specific needs, the User Access Administrator role is predefined to handle access delegation.Conclusion: The Azure User Access Administrator role is required to delegate minimum permissions for Azure AD App registration.
Azure Role-Based Access Control DocumentationAzure AD App Registration Guide
An administrator deploys an NC2 cluster in Azure and uses 10.100.0.0/16 for one of the VNets.The cluster is configured as follows:* 8 nodes* Prism Central Deployed* Files DeployedFollowing the deployment, the administrator experiences network connectivity issues.Which reason explains the connectivity issues?
Network Configuration: Using a specific IP range for a VNet can cause conflicts if that range is reserved or already in use by the cluster's internal operations. Internal Usage: In NC2, certain IP ranges are reserved for internal cluster functions and should not be used for VNets to avoid IP conflicts and connectivity issues. Impact: If the 10.100.0.0/16 range is reserved for internal usage, using it for a VNet would lead to IP conflicts, causing network connectivity issues.Verification: It's important to verify the reserved IP ranges in the NC2 documentation before assigning them to VNets.Conclusion: The connectivity issues are likely due to using the 10.100.0.0/16 range, which is reserved for internal cluster usage.
Nutanix Networking GuidelinesAzure Virtual Network Documentation
An administrator needs to open the following ports in the firewall between an on-premises cluster and azure for disaster recovery:* 22* 2009* 2020* 2049* 3260* 9440Which rile-type should be created on the firewall for communication to be appropriately established?
Port Requirements: The specified ports (22, 2009, 2020, 2049, 3260, 9440) are commonly used for various services and require TCP communication.Port 22: SSHPort 2009: Used for Nutanix internal communicationPort 2020: Nutanix servicesPort 2049: NFSPort 3260: iSCSIPort 9440: Nutanix Prism managementCommunication Type: To ensure proper disaster recovery setup, bi-directional communication is needed to allow traffic to flow both from on-premises to Azure and vice versa. TCP Protocol: These ports use the TCP protocol, which provides reliable communication between devices.Conclusion: Creating a bi-directional (TCP) rule on the firewall allows the necessary communication for disaster recovery processes.
Nutanix Networking and Security DocumentationAzure Networking Documentation
Post your Comments and Discuss Nutanix NCP-CI-Azure exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the NCP-CI-Azure content, but please register or login to continue.