01. A bank's resilience standard, written for its on-premises clusters on AOS 7.x, requires cluster fault tolerance 2N/2D for production. Its first production NC2 on Azure cluster will run AOS 6.10, the release the bank has certified, on six nodes. In Create Cluster, the architect has already selected AOS 6.10 on the Software tab.
What will the architect find when setting data protection on the Capacity tab?
a) A Redundancy field offering RF1 and RF2, with RF3 held for AOS 7.0
b) A Redundancy field, where RF3 protects against node failures alone
c) A Redundancy field, where RF3 carries the drive protection of 2N/2D
d) A Cluster Fault Tolerance field, where 2N/2D adds drive protection
02. A logistics company migrates a group of application VMs from its on-premises Nutanix cluster to an NC2 on Azure cluster. On premises, the VMs were members of a legacy (non-Next-Gen) Flow Network Security policy that restricts which systems can reach them. On NC2 the VMs are attached to overlay subnets of a user VPC and the application works, but Prism Central now raises the alert VPC VMs detected in Flow Security Policy.
How should the administrator read this alert?
a) The policy is not being enforced for these VMs while their NICs are in VPC subnets
b) The policy still applies, and the alert only flags their VPC membership
c) The user VPC's policies have taken over the security policy's rules for them
d) The policy is enforced only on traffic that passes through the Flow Gateway
03. A security operations team wants the audit logs and Security Policy Hit Logs from the Prism Central instance that manages its NC2 on Azure clusters to land in a Log Analytics workspace, where its analysts already query Azure data. The platform team will not install third-party agents on the Prism Central VMs, which it treats as a Nutanix appliance.
Which design meets both requirements?
a) Send Prism Central syslog to an Azure Storage account that the workspace queries as a data source
b) Send Prism Central syslog to a dedicated Linux forwarder whose Azure Monitor Agent rule sends Syslog to the workspace
c) Point Prism Central syslog directly at the workspace ingestion endpoint over TCP with RELP enabled
d) Install the Azure Monitor Agent on each Prism Central VM and attach a Linux Syslog data collection rule
04. An engineering consultancy will stretch a design-office subnet from its on-premises Nutanix cluster to an NC2 on Azure cluster over a Nutanix VPN connection. The on-premises gateway has already been created with a VLAN attachment. The administrator is now creating the local network gateway in the Prism Central that manages the NC2 cluster.
Which gateway configuration should the administrator choose on the NC2 side?
a) VPN gateway service, attached to the user VPC that holds the subnet
b) BGP gateway service, attached to the user VPC
c) VPN gateway service, attached to the transit VPC that hosts the external subnets
d) VPN gateway service with a VLAN attachment
05. An insurance company is creating the Nutanix VPN connections for a layer 2 stretch between its on-premises cluster and an NC2 on Azure cluster. One connection is being created in each Prism Central, with IPSec enabled.
Which two settings match the documented configuration?
(Choose two.)
a) A /29 local VTI prefix for a standby gateway
b) A /30 local VTI prefix, one address for each gateway
c) Static routing on both connections, leaving eBGP disabled for the stretch traffic
d) The on-premises connection as Initiator and the NC2 connection as Acceptor
06. Before a quarterly cost review, a platform team wants to list the Azure resources that belong to one NC2 on Azure cluster, such as its bare-metal instances, network interfaces, NAT gateway and security groups. The team wants to start from the NC2 console rather than browse the Azure resource group.
Which page in the NC2 console shows the resources associated with the cluster?
a) The Host tab on the Hardware page of the cluster
b) The Settings page of the cluster
c) The Notification Center of the console
d) The Cloud Resources page of the cluster
07. Four NC2 on Azure clusters are registered to one Prism Central instance. The monitoring team is adopting the Datadog Nutanix integration and must follow least privilege with the fewest components to maintain.
Which two configuration choices match the integration's documented setup?
(Choose two.)
a) Create a Prism Central user with the Prism Viewer role for the check
b) Give the check's user an administrator role in Prism Central for alerts, audits and tasks
c) Run one Datadog Agent per cluster, each connected to its Prism Element
d) Connect one Datadog Agent instance to Prism Central for all four clusters
08. Prism Central manages an NC2 on Azure cluster named az-prod. Three alert policies watch host CPU usage: one for all hosts, one for the hosts in az-prod, and one for the single host az-prod-h3. Last week an administrator disabled the az-prod-h3 policy during maintenance and has not re-enabled it.
Which two statements describe how CPU usage alerts are now evaluated?
(Choose two.)
a) The other az-prod hosts are evaluated against both the cluster policy and the all-hosts policy
b) The other az-prod hosts are evaluated against the az-prod cluster policy and not the all-hosts policy
c) Host az-prod-h3 falls back to the az-prod cluster policy while its own policy is disabled
d) Host az-prod-h3 raises no CPU usage alert from any of the three policies
09. The NC2 console shows an end-of-support banner for the BGP software on a scaled-out cluster that serves a trading platform. The change board allows only brief interruptions on weekdays, and it grants one 45-minute weekend window during which a full north-south outage is acceptable.
Which two planning decisions fit these constraints?
(Choose two.)
a) Allow up to 30 minutes for the BGP VM upgrade to complete
b) Schedule the BGP VM upgrade for the weekend window, since it can cause downtime
c) Run the BGP VM upgrade on a weekday, since it moves through the BGP VMs one at a time
d) Budget 60 to 90 seconds of total traffic loss for the BGP VM upgrade
10. The Prism Central instance that manages a company's NC2 on Azure clusters forwards syslog with the Audit and Security Policy Hit Logs modules selected and the severity level set to Warning. A data collection rule then sends the messages to a Log Analytics workspace, collecting the facility they arrive on at a minimum level of Warning. Analysts find the audit events but no Security Policy Hit Logs messages.
Which two statements are accurate about this result?
(Choose two.)
a) Raising the hit logs module to Critical in Prism Central would get them collected
b) Enabling RELP on the Prism Central syslog server entry would get them collected
c) Lowering the rule's minimum for that facility to Informational lets them through
d) Hit log messages always arrive at level 6, below the Warning minimum of the rule