Which two types of granular RBAC does Nutanix provide for AHV hosts? (Choose two.)
Answer(s): A,D
Nutanix provides two types of granular RBAC for AHV hosts: category based and cluster based3. Category based RBAC allows administrators to assign roles to users or groups based on categories, which are key-value pairs that can be applied to various entities in Prism Central, such as clusters, hosts, VMs, images, and networks. Categories can be used to group entities by different criteria, such as department, project, environment, or location. For example, an administrator can create a category key named Department and assign different values to it, such as Finance, Marketing, or Engineering. Then, the administrator can apply this category to different clusters or hosts and assign roles to users or groups based on this category. This way, users or groups can have different levels of access to different clusters or hosts depending on their department4.Cluster based RBAC allows administrators to assign roles to users or groups based on specific clusters registered in Prism Central. For example, an administrator can create a role named Cluster Admin and assign it to a user or group for a particular cluster. This way, the user or group can have full access to that cluster and its hosts and VMs, but not to other clusters5.
Role-Based Access Control https://portal.nutanix.com/page/documents/details?targetId=Nutanix-Security-Guide-v6_7:sec- cluster-rbac-pc-c.html
An administrator is tasked with configuring networking on an AHV cluster and needs to optimize for maximum single VM throughput.Which bond mode should the administrator select?
Answer(s): B
Active-Active is a bond mode that allows all uplinks in the bond to be used simultaneously for traffic transmission and reception. This bond mode provides load balancing and increased bandwidth for the AHV host and its VMs. Active-Active bond mode uses a hashing algorithm based on source MAC addresses to distribute traffic across different uplinks in the bond. Each individual VM NIC uses only a single bond member interface at a time, but multiple VM NICs are spread across different bond member interfaces. As a result, it is possible for a Nutanix AHV node with two 10 Gb interfaces to use up to 20 Gbps of network throughput, while individual VMs have a maximum throughput of 10 Gbps6.Therefore, if an administrator needs to optimize for maximum single VM throughput, they should select Active-Active bond mode for their AHV cluster. This bond mode can be configured using Prism Element UI or manage-ovs commands on each AHV host7. No additional configuration is required on the upstream switch side, as long as the switches are interconnected physically or virtually and both uplinks trunk the same VLANs8.
Configuring Load Balancing active-backup and balance-slb modes on AHV
Refer to Exhibit:An administrator wants to replace and old node with a node of newer generation in a 3-node cluster. The administrator has already chosen the appropriate node. But unable to remove it from the cluster.Why is the Remove Host option not shown in the exhibit?
Answer(s): D
A Nutanix cluster requires a minimum of three nodes to maintain quorum and data availability. Removing a node from a 3-node cluster would violate the redundancy factor and cause data loss. Therefore, it is not possible to remove a host from a 3-node cluster using Prism or CLI. The only way to replace a node in a 3-node cluster is to use the Foundation tool, which will erase the existing cluster configuration and create a new cluster with the new node1.
An administrator needs to create a new Linux image and will to do the following as part of the VM deployment:* Set the OS hostname* Add custom users* Add keys* Run custom scriptsWhat package needs to be installed in the Linux image to facilitate this automation?
Answer(s): A
CloudInit is a package that contains utilities for early initialization of cloud instances. It allows you to customize virtual machines provided by a cloud vendor by modifying the generic OS configuration on boot. You can use CloudInit to set the OS hostname, add custom users, add keys, run custom scripts, and more2. CloudInit is supported by most major Linux and FreeBSD operating systems and works across different cloud platforms3. Sysprep is a tool for Windows operating systems that prepares an installation for cloning, auditing, and customer delivery4.
1: Replacing Nodes in Nutanix Cluster - Nutanix Support & Insights 2: Customize a Linux VM with cloud-init in Azure - Azure Virtual Machines 3: Cloud-Init - The standard for customising cloud instances 4: Sysprep (Generalize) a Windows installation
An administrator has created a Nutanix managed it a VLAN ID of 512.Several VMs have been created, and the administrator notices that the can successfully communicate with other VMs on that VLAN.Provided they are on the host, but cannot communicate with VMs that reside on different hosts in the cluster.What is most likely thee cause of this issue?
Answer(s): C
The correct answer is C. The VLAN was not created on the upstream switches.A VLAN (virtual local area network) is a logical segmentation of a physical network that allows devices on the same VLAN to communicate with each other, regardless of their physical location. A VLAN also isolates the devices on different VLANs from each other, unless there is a router or a layer3 switch that can route traffic between VLANs. To create a VLAN, the administrator needs to configure the network devices that are involved in the VLAN, such as switches, routers, and hosts. The administrator also needs to assign a unique VLAN ID to each VLAN, which is a number between 1 and 4094 that identifies the VLAN1.In Nutanix AHV, the administrator can create a Nutanix managed network with a specific VLAN ID for guest VMs. This network can be assigned to VM NICs using Prism Element or Prism Central. However, creating a Nutanix managed network does not automatically create the VLAN on the upstream switches that connect the AHV hosts. The administrator needs to manually configure the upstream switches to allow the VLAN traffic on the ports that connect to the AHV hosts. The administrator also needs to ensure that the upstream switches are interconnected physically or virtually and can forward traffic between different VLANs if needed2.Therefore, if an administrator has created a Nutanix managed network with a VLAN ID of 512 and notices that the VMs on that network can only communicate with other VMs on the same host, but not with VMs on different hosts in the cluster, the most likely cause of this issue is that the VLAN was not created on the upstream switches. This means that the switches are dropping or blocking the traffic with VLAN ID 512 and preventing it from reaching other hosts or VMs. To resolve this issue, the administrator should create the VLAN on the upstream switches and allow it on the ports that connect to the AHV hosts3.
Nutanix AHV Networking Best Practices
Post your Comments and Discuss Nutanix NCP-MCI exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the NCP-MCI content, but please register or login to continue.