NCP-NS-7.5試験無料問題集（108題）「Nutanix Certified Professional

出題：1

Exhibit:

An administrator has just added a new VPC for Tenant-B... However, users are reporting that they are unable to access external resources from VMs created in the Tenant-B-Prod subnet. What should be done to correct the problem?

A. Update the ERPs for Tenant-B-VPC.

B. Add a Network Policy in Tenant-B-VPC.

C. Add a Network Policy in Transit-VPC.

D. Update the ERPs for Transit-VPC.

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：2

While configuring a new security policy in a Nutanix microsegmentation environment, an administrator wants the policy to remain flexible even if virtual machines change subnets or obtain new IP addresses. Which configuration approach should the administrator use when defining the policy scope?

A. Configure the policy only on specific VLAN IDs.

B. Assign IP addresses manually to all VMs included in the policy.

C. Use VM categories to define the secured and allowed entities.

D. Apply the policy after setting static routes for each VM.

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：3

An administrator needs to use Prism Central to identify a subnet belonging to a VPC. How can the administrator identify networks associated with a VPC within Prism Central?

A. The subnet will have a non-zero VLAN ID.

B. There will be a valid IP Prefix for the subnet.

C. The subnet will be identified as type Overlay.

D. The subnet will reference multiple clusters.

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：4

Which statement accurately describes the behavior of a Flow Network Security policy operating in Monitor mode?

A. All matching traffic is discovered and allowed, but not blocked.

B. Traffic is blocked unless it matches an "allow" rule in Enforce mode.

C. Only East-West traffic is discovered, but North-South traffic is not.

D. All matching traffic is discovered and denied, but not allowed.

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：5

Which policy mode blocks all traffic that is not explicitly allowed by the policy?

A. Block Mode

B. Monitor Mode

C. Enforce Mode

D. Save Mode

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：6

An administrator is building a VPC... VPC CIDR: 10.10.0.0/16 Subnet CIDR: 10.10.10.0/24 "Ext_Net_Ext" (NAT): 192.168.1.0/24 "Ext_Net_Internal" (Routed): 172.16.1.0/24 The on-premises application server has an IP address of 172.16.2.50/24. A VM (10.10.10.100) in the VPC Subnet can reach the internet but cannot reach the on-premises server. Which static route needs to be added to the VPC route table to resolve this?

A. Destination prefix: 192.168.1.0/24 Next-Hop: Ext_Net_Ext

B. Destination Prefix: 10.10.0.0/16, Next-Hop: Ext_Net_Internal

C. Destination prefix: 172.16.2.0/24, Next-Hop: Ext_Net_Ext

D. Destination prefix: 172.16.2.0/24, Next-Hop: Ext_Net_Internal

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：7

Refer to Exhibit:

How should an Application Policy be created whose rules apply only to vNIC1 of VM1?

A. Add Cat:SubnetA as secured entity in the Application Policy.

B. Add Cat:SubnetA and Cat:VM1 as secured entity in the Application Policy.

C. Create an Entity Group with Cat:SubnetA, Cat:SubnetB and Cat:VM1 and then add the Entity Group as Secured Entity to the Application Policy.

D. Create an Entity Group with Cat:SubnetA and Cat:VM1 and then add the Entity Group as Secured Entity to the Application Policy.

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

NCP-NS-7.5試験無料問題集「Nutanix Certified Professional - Network and Security (NCP-NS) 7.5 認定」