In a scale-out Prism Central deployment, what additional functionality does configuring an FQDN instead of a Virtual IP provide?
Answer(s): A
In a scale-out Prism Central deployment, using an FQDN (Fully Qualified Domain Name) enables load balancing across multiple Prism Central instances.Option A (Load balancing) is correct:When an FQDN is used, Nutanix automatically distributes traffic between multiple Prism Central nodes, improving performance.Option B (Resiliency) is incorrect:Resiliency is achieved through cluster redundancy, not by using an FQDN.Option C (Segmentation) is incorrect:Segmentation relates to network isolation rather than FQDN-based load balancing.Option D (SSL Certificate) is incorrect:SSL certificates can be applied to both FQDN and Virtual IP configurations.
Nutanix Prism Central Guide Configuring Scale-Out Deployment Nutanix KB How FQDN Enhances Load Balancing in Scale-Out Prism Central
An administrator wants to disable password-based SSH access for the nutanix user on a CVM to improve security.What action should the administrator take?
Answer(s): C
Enabling "Cluster Lockdown" in Nutanix is the best security measure to prevent password-based SSHlogins.Option C (Enable Cluster Lockdown) is correct:Cluster Lockdown disables password-based SSH and requires key-based authentication.Option A (Rename the nutanix user) is incorrect:The Nutanix user is a system account and cannot be renamed.Option B (Block port 22) is incorrect:This would prevent all SSH connections, including key-based logins, making administration difficult.Option D (Delete the nutanix user) is incorrect:The nutanix user is required for system operations and cannot be removed.
Nutanix Security Guide Implementing Cluster LockdownNutanix KB Best Practices for SSH Security on CVMs
An administrator configured a remote site for Protection Domain replication, but network performance and stability are impacted.How can the remote site configuration be adjusted to fix the issue?
A) NAT between the two Nutanix clusters to ensure proper address translation and stable inter-site replication traffic. NAT can alleviate routing and MTU issues that degrade performance for remote Protection Domain replication.B) Many-to-many replication is not a configuration for remote site stability; it changes replication topology but does not address underlying network performance problems.C) Bandwidth Throttling Policy controls bandwidth usage but does not resolve core stability/latency problems caused by misrouted or address-mapping traffic between clusters.D) Remote Cluster VIP as a proxy is not a supported or recommended approach for protecting replication traffic and can introduce additional latency.
An administrator needs to modify an AHV VM to support a large number of concurrent network connections. The VM has:4 vCPUs20 GB RAMOS: Microsoft Windows Server 2022Which modification can improve network performance for network I/O-intensive applications?
Receive Side Scaling (RSS) VirtIO-Net Multi-Queue improves network performance by distributing network processing across multiple CPU cores.Option C (Enable RSS VirtIO-Net Multi-Queue) is correct:This setting reduces CPU bottlenecks by allowing multiple queues to handle network packets. It is essential for high-throughput network applications.Option A (Add more vCPUs) is incorrect:CPU resources are important, but without enabling RSS, additional vCPUs will not optimize network traffic distribution.Option B (Enable AHV Turbo Technology) is incorrect:AHV Turbo improves disk I/O, not network I/O.Option D (Add more RAM) is incorrect:RAM does not directly impact network performance.
Nutanix AHV Best Practices Guide Optimizing Network Performance with RSS Multi-Queue Nutanix KB Enabling Multi-Queue for High-Performance Applications
After adding new workloads, the Overall Runway is now below 365 days, but the scenario still shows the cluster is in good shape.Why?
Answer(s): B
A cluster runway below 365 days does not necessarily indicate an issue if Intelligent Operations determines that workloads are sustainable.Option B (Because new workloads are sustainable) is correct:Nutanix analyzes resource trends and marks clusters as healthy if new workloads are within projected capacity.Option A (Storage Runway is still good) is incorrect:Storage is one component, but CPU and memory also affect runway calculations.Option C (Recommended resources) is incorrect:Recommendations help optimize capacity, but do not define cluster health.Option D (Target is 1 month) is incorrect:The scenario's target window does not impact the actual runway calculation.
Nutanix Prism Central Guide Capacity Planning & Runway Analysis Nutanix KB Understanding Capacity Runway and Workload Sustainability
An administrator is configuring Protection Policies to replicate VMs to a Nutanix Cloud Cluster (NC2) over the internet.To comply with security policies, how should data be protected during transmission?
Answer(s): D
Data-in-Transit Encryption ensures that replication traffic is encrypted while being sent over the internet.Option D (Enable Data-in-Transit Encryption) is correct:This encrypts replicated data between clusters, ensuring security against man-in-the-middle attacks.Option A (Self-encrypting drive) is incorrect:This protects data at rest, not during transmission.Option B (UEFI Secure Boot) is incorrect:Secure Boot prevents unauthorized OS modifications, but does not encrypt network traffic.Option C (Data-at-Rest Encryption) is incorrect:This encrypts stored data but does not secure replication traffic.
Nutanix Security Guide Configuring Data-in-Transit Encryption Nutanix KB Protecting Replication Traffic Over Public Networks
Refer to Exhibit:An administrator sees the alert shown in the exhibit.What should the administrator do to ensure the nutanix user can no longer SSH to a CVM using a password?
Understanding the Exhibit & the AlertThe alert states:"The cluster is using password-based SSH access for the CVM." "Password-based remote login is enabled on the cluster." "It is recommended to use key-based SSH access instead of password-based SSH access for better security."This means that the nutanix user can log in to Controller VMs (CVMs) using a password, which is a security risk.Corrective Action: Enabling Cluster Lockdown(C) Enable Cluster Lockdown. (Correct Answer)Cluster Lockdown Mode restricts password-based SSH access and forces key-based authentication. This prevents users from logging into CVMs using passwords, enhancing cluster security.To enable Cluster Lockdown:Go to Prism Central or Prism Element.Navigate to Settings Security Cluster Lockdown.Enable Cluster Lockdown Mode.Evaluating the Other Answer Choices(A) Rename the nutanix user. (Incorrect)The nutanix user is a built-in system account required for cluster operations. Renaming the user will not prevent SSH access via password.(B) Block port 22 on the CVM firewall. (Incorrect)Blocking port 22 (SSH) will completely disable SSH access, including key-based authentication. This may break cluster management and troubleshooting operations.(D) Delete the nutanix user. (Incorrect)The nutanix user is a critical system account required for cluster functionality. Deleting the account will cause serious issues with cluster management.Multicloud Infrastructure References & Best PracticesNutanix Security Best Practices:Always use key-based SSH authentication instead of password-based logins. Enable Cluster Lockdown Mode to enforce security policies. Regularly audit user access to ensure security compliance.Cluster Lockdown Benefits:Prevents unauthorized SSH access via passwords.Enforces public key authentication, reducing brute-force attack risks.Strengthens CVM security against potential exploits.
Nutanix Security Guide Enabling Cluster Lockdown for SSH Security Nutanix KB Securing SSH Access on Nutanix Clusters
A security team asks an administrator to set up port mirroring of a specific source VM to a target VM. What must the administrator ensure for this configuration to be possible?
Port mirroring requires the source and target VMs to be on the same host to efficiently copy network traffic without additional routing overhead.Option B (Source VM and Target VM are on the same host) is correct:AHV's port mirroring only works within a single host because network packets are intercepted before leaving the hypervisor.If the VMs are on different hosts, mirroring cannot be configured without additional network tools.Option A (Same VLAN) is incorrect:VLAN membership is not a requirement for port mirroring.Option C (Same subnet) is incorrect:Port mirroring happens at the virtual switch level, which does not require VMs to be in the same subnet.Option D (Same VPC) is incorrect:While VPCs provide network isolation, they do not control port mirroring availability.
Nutanix AHV Networking Guide Configuring Port Mirroring in AHV Nutanix KB Port Mirroring Best Practices
Post your Comments and Discuss Nutanix NCP-MCI-6.10 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the NCP-MCI-6.10 content, but please register or login to continue.