Study with NCP-NS Actual Test Questions

A service-insertion firewall VM protects user VMs access to the internet. The virtual and physical switches, as well as all user VMs, currently use the default MTU size of 1500.
Everything functions normally until a user VM is migrated to another host. After the migration, the user reports that some websites fail to load while ping to those same sites still succeeds. Routing and security policies appear normal.
Which two configuration changes could resolve the issue? (Choose two.)

• A. Lower the MTU across all vSwitch and physical uplinks on the relevant network path to 1442 or lower.
• B. Decrease the MTU on the user VM's vNIC to 1442 or lower.
• C. Increase the MTU on the user VM's vNIC to 1558 or greater.
• D. Increase the MTU across all vSwitch and physical uplinks on the relevant network path to 1558 or greater.

An administrator has deployed a VPC for a multi-tier application on Nutanix AHV. The Web tier requires public internet access, while the App and Database tiers must remain private and isolated.
Which steps should the administrator take to configure the external network correctly?

• A. Configure an external network for the Web tier subnet and leave App and Database tiers private.
• B. Attach a single external network to the VPC and allow all tiers unrestricted internet access.
• C. Use overlay networks for external access instead of configuring a VPC external network.
• D. Assign external IPs to all VMs in the VPC to simplify connectivity.

An administrator has configured a VPC with multiple overlay subnets and attached a VPN gateway using IPSec. After enabling Jumbo Frames on the physical network, VMs are still experiencing packet drops.
What is the most likely reason?

• A. Jumbo frames are not supported on overlay subnets.
• B. Floating IP is missing on the VPN gateway.
• C. DHCP relay is misconfigured.
• D. MTU on guest VMs exceeds recommended size for IPSec.

A junior network operator is assigned two predefined roles in Prism Central...
Role A: Prism Viewer
Role B: VPC Admin
The operator reports being able to successfully create, update, and delete Virtual Private Clouds (VPCs). However, the operator is unable to create a VM into the VPC.
How does Prism Central determine the operator's effective permissions?

• A. The permissions of the VPC Admin role override the more restrictive Prism Viewer role.
• B. The system applies the principle of "most privilege," granting the highest level of access from any assigned role.
• C. The permissions are the union of both roles, granting VPC management rights and global read-only access.
• D. The Prism Viewer role's permissions take precedence, preventing any write operations from the VPC Admin role.

An administrator is deploying a multi-tier application on a Nutanix AHV cluster. The Web tier needs to be accessible from the internet, the App tier must communicate only with the Web tier and the Database tier, and the Database tier should accept traffic only from the App tier.
The administrator must determine the correct configuration to ensure secure, reliable connectivity for the Web tier while maintaining isolation from the Internet for the App and Database tiers.
Which connectivity option should the administrator implement to meet the requirements?

• A. Assign direct external IPs to all VMs in the VPC.
• B. Use overlay networks for the Web tier to provide internet access.
• C. Assign Floating IP assignments to Web tier only.
• D. Connect all tiers directly to the external network with no NAT.