[2024年10月21日]NCP-CI-AWS試験問題集を試そう！ベストNCP-CI-AWS試験問題
検証済みのNCP-CI-AWSテスト問題集で正確な77問題と解答
質問 # 37
An administrator needs to create user VM subnets for multiple NC2 clusters in AWS.
What would be the best approach to take?
- A. Use the cluster management subnet dedicated to each cluster.
- B. Create guest-VM subnets for each cluster.
- C. Create guest-VM subnets to be shared by all clusters.
- D. Create guest-VM VNets for each cluster.
正解：B
解説：
When creating user VM subnets for multiple NC2 clusters in AWS, the best approach is to create guest-VM subnets for each cluster. This ensures that each cluster has its own dedicated subnets, which simplifies network management and avoids potential IP conflicts.
Advantages of Dedicated Subnets:
Isolation: Each cluster operates in its own subnet, providing better isolation and security.
Management: Easier to manage and troubleshoot network issues when each cluster has its own subnets.
Scalability: More scalable as each subnet can be managed and expanded independently.
Steps to Create Guest-VM Subnets:
Identify the IP range for each subnet.
In the AWS VPC console, create a new subnet for each cluster using the identified IP ranges.
Associate the new subnets with the respective clusters during or after the cluster deployment process.
Why Not Shared Subnets:
Shared subnets could lead to IP conflicts and make network management more complex, especially as the number of clusters grows.
Reference:
Nutanix Cloud Clusters on AWS Administration Guide
AWS VPC Subnet Creation Documentation
質問 # 38
A company needs to create virtual interfaces directly to public AWS S3 services. The company also wants to bypass any internet service providers in the network path.
Which method will best satisfy this requirement?
- A. Direct Connect
- B. SSH
- C. VPN
- D. Bastion Host
正解：A
解説：
AWS Direct Connect allows companies to create private, dedicated connections between their data centers and AWS. This bypasses the internet and provides a more reliable and faster network connection directly to AWS services, including S3.
Reference:
AWS Direct Connect Documentation
AWS S3 Access over Direct Connect
質問 # 39
What is an available log module when configuring a syslog server in the Prism Central Admin Center?
- A. Zookeeper
- B. Prism
- C. API Audit
- D. Acropolis
正解：D
解説：
When configuring a syslog server in the Prism Central Admin Center for Nutanix, one of the available log modules is Acropolis.
The Acropolis module logs system events related to the Nutanix Acropolis operating system, which is critical for monitoring and auditing system activities and performance.
Configuring syslog with the Acropolis module ensures that important events and issues related to the Acropolis environment are captured and can be forwarded to an external syslog server for centralized logging and analysis.
Reference:
Refer to the Nutanix documentation on Prism Central and syslog configuration for the full list of available log modules and detailed steps for configuration.
質問 # 40
An administrator is tasked with enabling inbound internet access to two Virtual Servers in an NC2 cluster on AWS for the HTTPs protocol.
The cluster is configured with:
* 8 nodes
* Prism Central
* 3 x User VM subnets
All subnets have been configured and can communicate with Internet-based resources as well as on-premises servers. The company d to allow Internet access, so the administrator must implement an AWS solution.
Which approach will enable the necessary communication?
- A. Create a AWS Network Load Balancer, configure the listener TCP port as 80, create a target group and register the servers as targets.
- B. Create a WS Network Load Balancer, configure the listener TCP port as 80, create a target groud and register the servers as the endpoint
- C. Create a AWS Network Load Balancer, configure the lister TCP port as 433, create a target group and register an EIP as the Endpoint.
- D. Create a AWS Network Load Balancer, configure the listener TCP port as 443, create a target group and register an HP as the endpoint.
正解：D
解説：
To enable inbound internet access to Virtual Servers in an NC2 cluster on AWS for the HTTPS protocol, the administrator should use an AWS Network Load Balancer (NLB).
Configure the NLB listener to listen on TCP port 443, which is the standard port for HTTPS traffic.
Create a target group in AWS, and register the servers (Virtual Servers in the NC2 cluster) as targets within this group.
Ensure the NLB is properly configured with an Elastic IP (EIP) if required, to provide a static IP address for the load balancer.
Verify that the security groups and network ACLs associated with the load balancer and the target group allow inbound traffic on port 443.
Reference:
Refer to AWS documentation on Network Load Balancers and Nutanix NC2 on AWS integration guides for step-by-step instructions on setting up and configuring the necessary components for enabling HTTPS access.
質問 # 41
An administrator is investigating reports of network congestion on their NC2 deployment.
As part of the investigation, a packet capture is taken from a group of user VMs. During the analysis of the packet capture, it is observed that user VMs are receiving multicast traffic unexpectedly.
What action should the administrator take to resolve the issue?
- A. Enable IGMP snooping on the AHV hosts
- B. Enable DHCP snooping on the upstream network
- C. Disable DHCP snooping on the upstream network
- D. Disable IGMP snooping on the AHV hosts
正解：A
解説：
Enable IGMP snooping on the AHV hosts:
IGMP (Internet Group Management Protocol) snooping is a feature that listens to IGMP traffic between hosts and routers. By enabling IGMP snooping on the AHV (Acropolis Hypervisor) hosts, the switch can intelligently forward multicast traffic only to the ports that have requested it.
This reduces unnecessary multicast traffic on the network and prevents congestion by ensuring that multicast packets are only delivered to the appropriate endpoints.
Reference:
Refer to the Nutanix documentation on network configuration and best practices for managing multicast traffic.
質問 # 42
Which two statements are the most accurate regarding Cluster Protect? (Choose two.)
- A. The dusters that are to be protected must be registered with the same instance of Prism Central.
- B. Nutanix Guest Tools (NGT) is not required to be installed on User VMs.
- C. The Cluster Protect feature requires AOS version 6.7 or higher.
- D. An AWS subnet can be shared by VMs, Prism Central, and Multicloud Snapshort Technology (MST).
正解：A、C
解説：
The clusters that are to be protected must be registered with the same instance of Prism Central (Answer C):
For Cluster Protect to function correctly, all clusters intended for protection must be registered under the same Prism Central instance. This ensures consistent management and coordination of protection policies and operations across clusters.
The Cluster Protect feature requires AOS version 6.7 or higher (Answer D):
Cluster Protect is a feature that is available starting from AOS version 6.7. To utilize this feature, ensure that the Nutanix clusters are running this version or a newer one.
Reference:
Nutanix Cluster Protection Documentation
Nutanix AOS Release Notes
質問 # 43
When selecting the NC2 subscription plan from the Nutanix Billing portal, which options are available.
- A. Reserved Instances, Cloud Provider Credits, Bring your own License (BYOL)
- B. Reserved Instances, Bring your own License (BYOL)
- C. Pay-as-you-Go (PayG), Bring your own License (BYOL)
- D. Pay-as-you-Go (PayG), Cloud Provider Credits, Bring your own License (BYOL)
正解：C
解説：
When selecting the NC2 subscription plan from the Nutanix Billing portal, the available options include:
Pay-as-you-Go (PayG): A flexible payment option where users are billed based on their actual usage, providing cost efficiency for variable workloads.
Bring your own License (BYOL): Allows users to utilize existing Nutanix licenses they have purchased, offering a cost-effective way to leverage existing investments in Nutanix software.
Reference:
Refer to the Nutanix billing and subscription documentation for detailed descriptions of subscription plans and their benefits.
質問 # 44
An administrator planned to create a new NC2 cluster and chose the existing AWS VPC infrastructure in the workflow. The administrator needs two private subnets to complete the configuration.
- A. For user VMs and cluster management
- B. For DNS and NJP management
- C. For Prism Element and Prism Central management
- D. For private NAT and Elastic IP management
正解：A
解説：
When creating a new NC2 cluster using an existing AWS VPC infrastructure, two private subnets are needed. These subnets are used as follows:
One private subnet for user VMs, which houses the virtual machines that users interact with.
Another private subnet for cluster management, which is used for internal cluster operations and management tasks, ensuring that management traffic is isolated from user traffic for security and performance reasons.
Reference:
Nutanix Support & Insights
Nutanix Cloud Clusters on AWS Administration
質問 # 45
Which entity should be contacted for AOS software supported related to NC2?
- A. Nutanix
- B. Internal IT Operations team
- C. Partner
- D. Public Cloud Vendor
正解：A
解説：
For AOS software support related to NC2, the appropriate entity to contact is Nutanix. Nutanix provides comprehensive support for their software, including the Acropolis Operating System (AOS) used in NC2 deployments.
Support Scope:
Nutanix offers support for the deployment, configuration, and management of NC2 clusters, including any issues related to AOS software.
This includes troubleshooting, updates, and technical assistance.
Why Not Other Options:
Internal IT Operations team: Typically handles internal issues but does not have the specialized knowledge or resources for AOS software support.
Partner: May provide support but would ultimately escalate issues to Nutanix for software-specific concerns.
Public Cloud Vendor: Manages infrastructure-related issues but does not provide support for Nutanix AOS software.
Reference:
Nutanix Support Documentation
Nutanix Cloud Clusters on AWS Administration Guide
Nutanix Best Practices for AOS Support
質問 # 46
An administrator has been tasked with ensuring NC2 VMs are able to access AWS resources. The NC2 VM traffic must not traverse the internet.
in which two ways would the administrator achieve this? (Choose two.)
- A. By using a VPC Peer.
- B. By using an Interface Endpoint
- C. By using a Gateway Endpoint
- D. By using a NAT Gateway.
正解：A、B
解説：
To ensure that NC2 VMs can access AWS resources without traversing the internet, the administrator can use AWS VPC Peering and Interface Endpoints. Both methods ensure that traffic stays within the AWS network, maintaining security and efficiency.
Interface Endpoint:
Interface Endpoints allow you to privately connect your VPC to supported AWS services. They use AWS PrivateLink to route traffic directly to services within the AWS network, bypassing the public internet.
Steps:
Create an interface endpoint for the required service in the AWS VPC console.
Ensure the security groups and route tables are configured to allow traffic to the interface endpoint.
VPC Peering:
VPC Peering allows the routing of traffic between VPCs using private IP addresses, without the need for internet gateways, NAT devices, or VPN connections.
Steps:
Create a VPC peering connection between the VPCs.
Update the route tables to direct traffic between the peered VPCs.
Ensure security group rules allow the necessary traffic between VPCs.
Reference:
AWS VPC Peering Documentation
AWS Interface Endpoint Documentation
Nutanix Cloud Clusters on AWS Administration Guide
質問 # 47
An administrator is tasked with deploying a VM in an NC2 cluster on AWS that needs to by accessed by resources within the on-premises datacenter.
The cluster has the following characteristics:
* 8 nodes
* Resides in the us-east-1a Availability Zone
* Contains 13 Subnets
* Has access to a Direct Connect connection
* Subnet that the User VM (UVM) is being deployed to:UserVM_subnet
There are multiple VMs within the cluster and the UserVM_subnet has access to the on-premises resources.
The administrator deploys the machine, but communication is not possible.
What is the most likely resolution for this situation?
- A. The AWS UVM Security Group requires the new application's ports adding to inbound traffic.
- B. The AWS Internal Management Security Group requires the new application's ports adding to outbound traffic.
- C. The AWS IGW requires the new application's ports adding to inbound traffic.
- D. The AWS User Management Security Group requires the new application's ports adding to and traffic
正解：A
解説：
For a VM deployed in an NC2 cluster on AWS to be accessed by resources within the on-premises datacenter, the security group associated with the User VM (UVM) subnet must allow inbound traffic on the specific ports required by the application.
If the security group rules do not permit inbound traffic on these ports, the communication will fail, even if other network configurations are correct.
The administrator should ensure that the UVM Security Group includes rules to allow inbound traffic for the application's required ports, facilitating proper communication between the VM and on-premises resources.
Reference:
Refer to the AWS documentation on security group configurations and Nutanix NC2 documentation for details on configuring network access and security group rules.
質問 # 48
What role is needed to create a cluster?
- A. Customer Administrator
- B. Customer Security Administrator
- C. Cluster Super Admin
- D. Cluster Administrator
正解：C
解説：
To create a cluster in Nutanix Cloud Integration with AWS, the role needed is Cluster Super Admin.
The Cluster Super Admin role provides the highest level of privileges required to perform critical operations such as creating, managing, and deleting clusters.
This role is essential for overseeing the cluster setup and configuration processes, ensuring the user has full control over the cluster lifecycle.
Reference:
Refer to the Nutanix documentation on roles and permissions for NC2 on AWS for further details on the capabilities and required permissions for cluster creation.
質問 # 49
An administrator needs to recover a cluster protected using the Cluster Protect feature. The Prism Central instance was not on the failed cluster.
Which steps, in order, should the administrator perform to recover the cluster?
正解：
解説：
Reference:
Nutanix Documentation on Cluster Protect and Recovery Processes
Nutanix Support & Insights
Nutanix Cloud Clusters on AWS Administration
質問 # 50
Exhibit.
What does the exhibit indicate?
- A. Replication in paused state
- B. No ongoing replication
- C. Replication in error state
- D. Ongoing replication
正解：B
解説：
The exhibit indicates a replication operation with specific details about the protection domain, remote site, and snapshot. Key points to note are:
Bytes Completed: 0 bytes completed.
Complete Percent: 0.0%
Paused: false
Aborted: false
Given these details:
No ongoing replication: The operation has started, but there is no progress in terms of bytes completed or percentage completed. Since the status shows 0 bytes and 0 percent completed, it indicates that no data has been replicated yet.
Reference:
Nutanix Protection Domain and Replication Documentation
Nutanix Best Practices for Monitoring Replication
質問 # 51
preparing the landing zone networking resources for a Nutanix cluster on AWS. The administrator has created a VPC with two private subnets: one for cluster management and one for user VMs.
What additional subnet must the administrator create?
- A. Public subnet for Internet access
- B. Private subnet for Prism Central
- C. Public subnet for S3 access
- D. Private subnet for VPN gateway
正解：A
解説：
When setting up a landing zone for Nutanix clusters on AWS, having only private subnets for cluster management and user VMs is not sufficient for full cluster functionality. Nutanix clusters often need to communicate with the internet for updates, patches, and other cloud services.
VPC Configuration:
The VPC already has two private subnets (one for cluster management and one for user VMs).
Additional Requirements:
To access public services like S3 or for the cluster nodes to reach Nutanix services for updates, a public subnet is essential.
Why Public Subnet for Internet Access?:
A public subnet allows resources within it to communicate directly with the internet, which is necessary for accessing Nutanix's update servers, applying patches, and other maintenance tasks.
This subnet typically includes an internet gateway, enabling instances in the public subnet to receive and send traffic directly to the internet.
Reference:
Nutanix Cloud Clusters on AWS Administration Guide
AWS Networking Best Practices
Nutanix Networking and Subnet Configuration Guidelines
質問 # 52
A company wants to start using Nutanix Cloud Clusters (NC2) in AWS. The company has large spend commitments as part of an AWS Enterprise Discount Program (EDP) totaling $15 million.
What approach should the administrator take to ensure that Nutanix licensing costs to the EDP commitment?
- A. Request a trial license directly from Nutanix
- B. Purchase Nutaniz licenses through the AWS Marketplace.
- C. Leverage existing Nutanix licenses.
- D. Purchase Nutanix licenses directly from Nutanix and contact AWS support.
正解：B
解説：
Given the company's large spend commitments as part of an AWS Enterprise Discount Program (EDP) totaling $15 million, purchasing Nutanix licenses through the AWS Marketplace ensures that the costs contribute to the EDP commitment.
This approach integrates the Nutanix license costs into the overall AWS spend, thereby maximizing the benefits of the EDP.
Purchasing directly from Nutanix or leveraging existing licenses might not count towards the AWS EDP commitment, and trial licenses are typically for evaluation purposes and do not contribute to the committed spend.
Reference:
Refer to the Nutanix and AWS documentation on licensing and marketplace purchases, and EDP program details.
質問 # 53
Which entity should be contacted for cloud hardware supported (EC2 instances, VPC, etc) related to NC2?
- A. Nutanix
- B. Internal IT Operations team
- C. Partner
- D. Public Cloud Vendor
正解：D
解説：
For issues related to cloud hardware support such as EC2 instances, VPC, etc., the public cloud vendor (AWS in this case) should be contacted. AWS provides support and documentation for their infrastructure and services, ensuring that users can get assistance for any hardware or cloud-specific queries.
Reference:
Nutanix Support & Insights
質問 # 54
An administrator is deploying a new NC2 cluster on AWS and needs to ensure full connectivity is established between the company's on-premises datacenter and the AWS cloud.
Which two AWS offering will satisfy this requirement? (Choose two.)
- A. Direct Connect
- B. Dedicated interconnect
- C. ExpressRoute
- D. AWS VPN
正解：A、D
解説：
To establish full connectivity between the company's on-premises datacenter and the AWS cloud, the following AWS offerings will satisfy this requirement:
AWS VPN: This service allows you to create a secure connection between your on-premises network or other remote network and your AWS VPC using an IPsec VPN tunnel. It is suitable for low to moderate bandwidth requirements and provides secure, encrypted connections.
Direct Connect: AWS Direct Connect is a dedicated network connection from your premises to AWS. It provides a private, high-bandwidth, low-latency connection which is ideal for high-throughput applications and workloads that need consistent network performance.
Reference:
AWS VPN Documentation
AWS Direct Connect Documentation
質問 # 55
An administrator is tasked with providing VMs outbound internet connectivity in AWS.
Which components would the administrator need to create in the VPC to achieve this?
- A. Public Subnet NAT Gateway, Public EIP, Route Table
- B. Private Subnet NAT Gateway, Public EIP, Route Table
- C. Private Subnet Flow Gateway, Public EIP, Route Table
- D. Public Subnet Flow Gateway, Public EIP, Route Table
正解：B
解説：
To provide VMs with outbound internet connectivity in AWS using a private subnet, the administrator needs to create the following components in the VPC:
Private Subnet: A private subnet is required to house the VMs that need outbound internet access but do not require direct inbound access from the internet.
NAT Gateway: A NAT (Network Address Translation) Gateway is necessary to allow instances in the private subnet to connect to the internet or other AWS services while preventing the internet from initiating a connection with those instances.
Public EIP (Elastic IP Address): An EIP is associated with the NAT Gateway to provide a persistent public IP address that allows outbound internet traffic from the private subnet to be routed correctly.
Route Table: A route table is configured to route traffic from the private subnet to the NAT Gateway for outbound internet access.
Reference:
AWS NAT Gateway Documentation
AWS VPC Subnet Basics
質問 # 56
......
Nutanix NCP-CI-AWS 認定試験の出題範囲：
| トピック | 出題範囲 |
|---|---|
| トピック 1 |
|
| トピック 2 |
|
| トピック 3 |
|
| トピック 4 |
|
Nutanix NCP-CI-AWSテストエンジンPDFで全問 無料問題集：https://jp.fast2test.com/NCP-CI-AWS-premium-file.html
手に入れよう！最新NCP-CI-AWS認定有効な試験問題集解答：https://drive.google.com/open?id=1rDiu2La_Q187YRhjpMrXYu2bwlKtq85o