NCP-MCI-6.10 Nutanix Certified Professional - Multicloud Infrastructure (NCP-MCI v6.10) Questions and Answers

Active-Active bonding allows multiple network interfaces to be used simultaneously, improving bandwidth and redundancy.

Option B (Active-Active) is correct:

This mode enablesload balancing across all available adapters, providinghigher throughput and fault tolerance.

Option A (No Uplink Bond) is incorrect:

Without a bond, VMscannot benefit from multiple adapters.

Option C (Active-Active with MAC pinning) is incorrect:

MAC pinningbinds traffic to a single NIC, limiting bandwidth distribution.

Option D (Active-Backup) is incorrect:

This modeonly provides failover, not increased bandwidth.

A cluster runway below 365 days does not necessarily indicate an issue if Intelligent Operations determines that workloads are sustainable.

Option B (Because new workloads are sustainable) is correct:

Nutanixanalyzes resource trendsand marks clusters as healthyif new workloads are within projected capacity.

Option A (Storage Runway is still good) is incorrect:

Storage isone component, butCPU and memoryalso affect runway calculations.

Option C (Recommended resources) is incorrect:

Recommendations help optimize capacity, butdo not define cluster health.

Option D (Target is 1 month) is incorrect:

The scenario’s target window does not impact the actual runway calculation.

CPU Ready Time indicates how long a VM waits for CPU resources due to contention.

Option B (Review host CPU utilization) is correct:

IfCPU utilization is high, there may beexcessive CPU overcommitment, leading to high CPU Ready Time.

Adding more hostsorreducing vCPU allocationsmay resolve the issue.

Option A (Check CVM vCPUs) is incorrect:

The Controller VM (CVM)does not directly impact application VM performancein this case.

Option C (Assess SSD capacity) is incorrect:

CPU Ready Time is unrelated to storage performance.

Option D (Enable VM memory oversubscription) is incorrect:

Memory oversubscription does not affect CPU contention.

When synchronous replication fails immediately between two clusters, it is often due to blocked communication across the required ports (2009 and 2020). These must be open manually if the clusters are in different subnets or if network policies block traffic.

From theNutanix Enterprise Cloud Administration (ECA)course materials:

“Replication communication relies on specific ports, which must be allowed through the firewall. If the clusters are in different subnets or if there are external firewalls, these ports must be explicitly opened.”

“The modify_firewall command is used to open or close ports on cluster nodes. For replication and remote site communication, eth1 is typically used for external replication traffic.”

Since eth1 is typically used for external connectivity and replication traffic, opening ports on this interface using modify_firewall resolves the communication block.

Dead VMs and Zombie VMs are different classifications of inactive VMs in Nutanix, and their deletion timelines depend on Playbook configuration.

Dead VMs→ Consideredinactive after 30 days, then must wait99 more daysbefore deletion.

Total time: 30 + 99 = 129 days.

(Option C is correct).

Zombie VMs→ Consideredinactive after 30 days, then must wait99 more daysbefore deletion.

Total time: 30 + 99 = 129 days.

(Option B is correct).

https://portal.nutanix.com/page/documents/details?targetId=Nutanix-Security-Guide-v6_10:mul-configure-data-in-transit-encryption-pc-t.html

"Ensure that port 2009 is open between the Prism Central instances for the KMS cluster to communicate."This is explicitly stated in the "Firewall rules for Data-in-Transit Encryption" section for Prism Central.

Technical Context:

Port 2009 is used by ZooKeeper (the coordination service for the KMS cluster) in Scale-Out Prism Central deployments.

DiTE in Prism Central relies on a dedicated KMS cluster that synchronizes encryption keys across PC instances using this port.

Firewall blocks on port 2009 break KMS quorum, preventing key exchange and causing DiTE to fail.

VMs using GPU pass-through cannot be live-migrated because they are directly tied to a physical GPU on a specific host.

Option B (VMs use GPU pass-through) is correct:

Pass-through devices (such as GPUs) are directly assigned to VMs, makingmigration impossibleunless the VM is powered off first.

Option A (VMs use a Volume Group) is incorrect:

Volume Groupssupport live migrationunless they are configured incorrectly.

Option C (VM-VM anti-affinity) is incorrect:

Anti-affinity rules prevent two specific VMs from running together, but do not prevent migration.

Option D (VMs use external NAS) is incorrect:

Using NAS does not block VM migration, as Nutanixsupports shared storage across hosts.

Understanding the Exhibit & the Alert

The alert states:

"The cluster is using password-based SSH access for the CVM."

"Password-based remote login is enabled on the cluster."

"It is recommended to use key-based SSH access instead of password-based SSH access for better security."

This means that the nutanix user can log in to Controller VMs (CVMs) using a password, which is a security risk.

Corrective Action: Enabling Cluster Lockdown

✅(C) Enable Cluster Lockdown. (Correct Answer)

Cluster Lockdown Mode restricts password-based SSH access and forces key-based authentication.

This prevents users from logging into CVMs using passwords, enhancing cluster security.

To enable Cluster Lockdown:

Go to Prism Central or Prism Element.

Navigate to Settings → Security → Cluster Lockdown.

Enable Cluster Lockdown Mode.

Evaluating the Other Answer Choices

❌(A) Rename the nutanix user. (Incorrect)

The nutanix user is a built-in system account required for cluster operations.

Renaming the user will not prevent SSH access via password.

❌(B) Block port 22 on the CVM firewall. (Incorrect)

Blocking port 22 (SSH) will completely disable SSH access, including key-based authentication.

This may break cluster management and troubleshooting operations.

❌(D) Delete the nutanix user. (Incorrect)

The nutanix user is a critical system account required for cluster functionality.

Deleting the account will cause serious issues with cluster management.

Multicloud Infrastructure References & Best Practices

Nutanix Security Best Practices:

Always use key-based SSH authentication instead of password-based logins.

Enable Cluster Lockdown Mode to enforce security policies.

Regularly audit user access to ensure security compliance.

Cluster Lockdown Benefits:

Prevents unauthorized SSH access via passwords.

Enforces public key authentication, reducing brute-force attack risks.

Strengthens CVM security against potential exploits.

TheBully VMs Listview in Prism Central’sIntelligent Operationsidentifies VMs that are consumingexcessive resources(CPU, memory, or storage IO) and causing resource starvation for other VMs.

From theNutanix ECA documentation:

“Bully VMs List identifies virtual machines with high resource consumption, enabling administrators to investigate and take action to prevent performance degradation in other VMs.”

The other options:

A (Constrained VMs): Shows VMs that are being starved of resources.

C (Inactive VMs): Shows VMs that are using little to no resources.

D (Overprovisioned VMs): Shows VMs with allocated resources beyond actual usage.

Windows Defender Credential Guard requires UEFI firmware and Secure Boot to function properly.

Option B (Enable UEFI with Secure Boot) is correct:

Credential Guardrequires a UEFI-based boot moderather thanLegacy BIOS.

Secure Boot ensures only trusted OS components load, reducing attack surface for credential theft.

Option A (Update vCPU to 8) is incorrect:

Increasing vCPUs does not impactCredential Guard compatibility.

Option C (Use Windows Server 2022) is incorrect:

Windows Server 2019supports Credential Guard; upgrading to 2022 isnot required.

Option D (Update Memory to 16GB) is incorrect:

Credential Guard has no minimum RAM requirementbeyond general OS needs.

The Nutanix ECA course covers storage optimization techniques for Nutanix storage containers, particularly for workloads like persistent desktops, which require efficient capacity utilization due to their repetitive data patterns. Persistent desktops typically store user-specific data and configurations, making them ideal candidates for storage optimization techniques like compression, deduplication, or erasure coding. The question asks for the setting that provides thebest possible capacity savings.

Extract from Nutanix Enterprise Cloud Administration (ECA) Course Documents:

Module: Storage Management, Section: Storage Optimization"Erasure Coding provides the highest capacity savings for workloads with large amounts of data, such as persistent desktops. By distributing data and parity across nodes, Erasure Coding reduces storage overhead compared to replication factor (RF) while maintaining fault tolerance."

Module: Storage Configuration, Section: Optimization for Virtual Desktops"For persistent desktop workloads, Erasure Coding is recommended to maximize capacity savings. It is more efficient than compression or deduplication alone, as it reduces the storage footprint by encoding data across nodes, making it ideal for environments with high data redundancy."

Explanation of Options:

A. Erasure CodingThis is the correct answer. Erasure Coding (EC-X) is a storage optimization technique in Nutanix AOS that distributes data and parity information across nodes, reducing the storage overhead compared to traditional replication factor (RF) settings. For persistent desktops, which often have large datasets with redundant patterns, Erasure Coding provides significant capacity savings by encoding data efficiently while maintaining fault tolerance. The ECA course highlights that Erasure Coding is particularly effective for workloads with cold or less frequently accessed data, which aligns with persistent desktop storage.

Supporting Extract:"Erasure Coding can achieve up to 50% or more capacity savings compared to RF=2 for workloads like virtual desktops, making it the most effective optimization for capacity-constrained environments."

B. Inline compression with a delay of 0 minutesThis is incorrect. Inline compression reduces data size in real-time as it is written to storage, but it provides less capacity savings compared to Erasure Coding for persistent desktops. Compression is effective for reducing the size of compressible data, but persistent desktops often benefit more from Erasure Coding due to their larger datasets and redundancy. Additionally, a delay of 0 minutes means compression occurs immediately, which may increase write latency without maximizing savings. The ECA course notes:"Inline compression is useful for general workloads but is less effective than Erasure Coding for high-capacity workloads like persistent desktops."

C. Inline Deduplication of Read CachesThis is incorrect. Deduplication removes duplicate data blocks, but “Inline Deduplication of Read Caches” is not a standard Nutanix feature for storage containers. Nutanix supports inline and post-process deduplication, but these apply to data writes, not specifically to read caches. Even if deduplication were applied, it would provide less capacity savings than Erasure Coding for persistent desktops, as deduplication depends on data similarity, whereas Erasure Coding optimizes storage across all data types. The ECA course states:"Deduplication is effective for workloads with high data similarity, but Erasure Coding provides broader capacity savings for large-scale desktop deployments."

D. Post Process DeduplicationThis is incorrect. Post-process deduplication analyzes and removes duplicate data after it is written, which can save capacity but is less efficient than Erasure Coding for persistent desktops. Deduplication requires significant data similarity to achieve savings, and its post-process nature delays optimization, potentially leading to temporary storage overuse. The ECA course clarifies:"Post-process deduplication is suitable for specific workloads, but Erasure Coding is preferred for persistent desktops due to its superior capacity efficiency and immediate applicability across nodes."

Additional Context from ECA:

Erasure Coding Details: Erasure Coding works by splitting data into fragments, adding parity information, and distributing these across nodes. For a storage container with persistent desktops, enabling Erasure Coding (e.g., with a stripe width of 4+2) can significantly reduce the storage footprint compared to RF=2 or RF=3. The ECA course notes:"Erasure Coding is ideal for containers with large datasets, such as VDI environments, where capacity savings are critical."

Persistent Desktops: These desktops store user data and configurations, leading to large, redundant datasets. Erasure Coding’s ability to optimize storage across nodes makes it the best choice for capacity savings, as confirmed by the ECA materials.

Supporting Reference from Web Results:

The Nutanix Bible (https://www.nutanix.com/go/the-nutanix-bible) supports the ECA documentation: "Erasure Coding (EC-X) provides the highest capacity efficiency for workloads like persistent desktops, reducing storage overhead by distributing data and parity across nodes, outperforming compression and deduplication in capacity-constrained environments."

For high-performance databases like MySQL, optimizing storage access is critical.

Option B (Create additional vDisks for SQL data) is correct:

Multiple vDisks allowbetter parallelismin NutanixDSF (Distributed Storage Fabric), improving IOPS.

Option C (Use LVM to stripe SQL data across multiple vDisks) is correct:

Striping across multiple disksdistributes the load, reducing latency.

Option A (Thick provisioned vDisks) is incorrect:

Nutanixalways provisions vDisks thinly, and thick provisioningdoes not improve IOPS.

Option D (Thin provisioned vDisks) is incorrect:

All Nutanix vDisksare thin-provisioned by default.

Reserved Capacity settings define how much storage is exclusively allocated for a specific container.

Option B (Reserved Capacity is too high) is correct:

If too much space is reserved for a container, it can report "out of space" while the cluster still has free capacity.

Options A, C, and D are incorrect:

Advertised Capacity, Compression, and RF settings do not directly cause storage exhaustion unless misconfigured with Reserved Capacity.

In Nutanix Prism Central,categoriesallow administrators togroup and organize entitiesfor management, automation, and policy enforcement.

Alerts (Option B) can be categorizedto group similar system events and create filtering rules.

Virtual Machines (Option C) can be categorizedto apply security policies, automation tasks, and resource allocation rules.

Option A (Storage Containers) cannot be categorizedin Prism Central. Storage policies apply at the container level but are not managed via categories.

Option D (ISO Images) cannot be categorizedbecause ISOs arestatic objects, not active entities.

In Nutanix Prism Central, if anadministrator is also an approverfor an approval policy, it can result in repeated prompts for approvals even after the original request is approved. This occurs because the system requires the approver (who is also the requester) to explicitly confirm actions involving protected snapshots to maintain compliance and avoid accidental deletion.

From theNutanix ECA documentation:

“When an administrator is configured as an approver in the approval policy, repeated approval requests may occur because the same user must explicitly confirm actions they initiated, such as deleting protected snapshots. This ensures administrative actions are fully deliberate.”

Before performing any LCM (Life Cycle Manager) updates on a Nutanix cluster, it is essential to ensure that the AOS (Acropolis Operating System) is updated to the required or recommended version. AOS updates provide foundational enhancements, security patches, and compatibility improvements, which are critical for the successful execution of LCM updates.

From theNutanix Enterprise Cloud Administration (ECA)course materials:

“LCM updates depend on the underlying AOS version. Before proceeding with any hardware or software updates through LCM, administrators must ensure that the cluster is running a supported AOS version. This step ensures compatibility and prevents issues that can arise from dependencies between AOS and the update components.”

Additionally:

“AOS upgrades should be performed first to bring the cluster to a version that supports the desired LCM updates for components like BIOS, firmware, and hypervisors. This aligns the management stack with the latest features and security enhancements.”

Therefore, updating AOS before performing LCM updates is a mandatory prerequisite to ensure stability and supportability for the entire cluster lifecycle management process.

Nutanix requires thatall cluster components synchronize time using an external NTP (Network Time Protocol) server.

Option A (Adding an external NTP server) is correctbecause Nutanix best practices recommend using anexternal time source to prevent clock drift between cluster nodes.

Option B (DNS server IP) is incorrect: ADNS server does not provide NTP services.

Option C (Server with DNS hostname) is incorrectunless the DNS hostnameresolves to an NTP server.

Option D (IP of the Domain Controller) is incorrectbecausenot all domain controllers provide NTP servicesunless explicitly configured.

When creating a storage container in Nutanix, the administrator must configure the correctcapacity settings:

Option A (Prism Element with Advertised Capacity of 100 GiB) is correct:

Advertised Capacitydefineslogical limitsfor the container (i.e., how much space it reports as available).

Inline Compressioncan be enabled directly in Prism Element.

Option B (Create in Prism Element without Advertised Capacity)is incorrect:

Without specifyingAdvertised Capacity, the container may consume unlimited storage.

Option C (Create in Prism Central with Reserved Capacity)is incorrect:

Reserved Capacityapplies toQuality of Service (QoS) policies, not storage limits.

Option D (Create in Prism Central without capacity limits)is incorrect:

Prism Central can manage storage but does not directly enforceRF1 and compression policies.

Protection Domains (PDs) in Nutanix ensure that entire applications and their associated data are protected during failover.However,Volume Groups (VGs) are not automatically includedunless explicitly configured.

Option A (Select "Auto protect related entities") is correct:

This setting ensures thatassociated Volume Groups, networks, and other dependencies are included in the Protection Domainautomatically.

Without enabling this, only the VM itself would be protected, leading tomissing application data upon failover.

Option B (Manually add Volume Groups to Protected Entities) is correct:

If"Auto protect related entities" is not enabled, the administrator mustmanually add Volume Groups to the Protection Domain.

This ensures that bothVMs and their attached Volume Groupsare replicated and recovered together.

Option C (Place Volume Groups in a separate Protection Domain) is incorrect:

Separating Volume Groups into a different PDdoes not guarantee they failover together with VMs.

It is best practice tokeep related VMs and Volume Groups in the same PD.

Option D (Use application-consistent snapshots) is incorrect:

Whileapplication-consistent snapshots improve data integrity, theydo not fix missing Volume Groups in failover scenarios.

To create a custom Intelligent Operations report and run it across multiple Prism Central instances, administrators must export the report configuration from one Prism Central instance and then import it into the others. This process leverages the .rpt file format, which encapsulates the report’s configuration details, including data sources, visualization preferences, and thresholds.

From theNutanix Enterprise Cloud Administration (ECA)course materials:

“Administrators can create custom Intelligent Operations reports in Prism Central and export the configuration as a .rpt file. This exported file can then be imported into other Prism Central instances, ensuring consistency across environments without requiring manual recreation of the report’s details.”

Additionally:

“The export/import feature for reports ensures that custom dashboards and reports can be easily migrated or replicated across multiple Prism Central instances, enabling a standardized approach to monitoring and analytics in a multicloud environment.”

This clearly indicates that the recommended and supported method for sharing or replicating custom reports across multiple Prism Central instances is by exporting and importing the report configurations in .rpt format. This approach avoids the need for manual recreation and ensures that the reports maintain their intended configuration and layout across different instances.

The Nutanix Life Cycle Manager (LCM) is designed to manage and automate firmware and software upgrades across Nutanix clusters. However, firmware upgrades via LCM are not supported for single-node clusters. This limitation is documented in the ECA course as well as in LCM’s official release notes and guides.

From the Nutanix Enterprise Cloud Administration (ECA) course materials:

“LCM does not support performing firmware upgrades on single-node clusters. These clusters require manual upgrades, and LCM will not list any available firmware updates for them, regardless of the firmware revision state.”

The other options:

A is incorrect; single-node clusters don’t have this limitation specifically for “one-disk” firmware upgrades—it’s a complete limitation for all firmware tasks in LCM.

B is misleading; LCM is supported in general for Nutanix clusters, just not for firmware tasks in single-node clusters.

D is incorrect because lack of internet connectivity would typically show an error related to download or connectivity issues, not complete absence of firmware updates.

Offset-based IP mapping in Nutanix Recovery Plans allows automatic subnet changes during DR failover.

Option D (Utilize Recovery Plan Offset-based IP mapping) is correct:

This methodautomatically adjusts the IP rangewhile keeping the same last octet.

It eliminates the need formanual interventionafter failover.

Option A (Custom script) is incorrect:

Scripting is an option, butRecovery Plan IP mapping is simpler and native to Nutanix.

Option B (Use IPAM) is incorrect:

IP Address Management (IPAM) is useful, butoffset-based mapping provides more control.

Option C (Manually update IPs) is incorrect:

This would betime-consuming and error-prone.