Prep and try our NCP-NS-7.5 valid and latest training questions & answers

Nutanix NCP-NS-7.5 Exam Overview:

Nutanix NCP-NS-7.5 Exam Syllabus Topics:

Nutanix Certified Professional - Network and Security (NCP-NS) 7.5 Sample Questions:

Question 1

When configuring an Application policy, an administrator defines a VM Category Application:MySQL as a Secured Entity. The administrator wants to ensure that traffic between VMs in the Secured Entity is kept to only required replication traffic on the default mysql service port. How should the administrator best accomplish this?

A. Create an Intra-Tier Rule specifying the mysql service as the allowed traffic.
B. Create an Inbound Rule specifying the mysql service as the allowed traffic.
C. Create an Outbound Rule specifying the mysql service as the allowed traffic.
D. Create an Inter-Tier Rule specifying the mysql service as the allowed traffic.

Question 2

An administrator needs to make a web server VM, which is inside a private VPC overlay subnet, accessible from the external network. The administrator assigns a Floating IP to the VM, but the service is still unreachable from the outside. What is a likely reason for this failure?

A. The VM was not rebooted after the Floating IP was assigned.
B. A Floating IP was assigned from a different external subnet than the one used by the VPC.
C. The VPC has no default route configured to use the external subnet.
D. The web server VM is not running the latest version of NGT.

Question 3

Refer to Exhibit:

In the AD-VDI Departmental SecPol policy shown in the exhibit, ADGroup: Engineering is configured as a secured entity in a VDI Security Policy. Prism Central shows 2 / 2 active sessions under this group, but the administrator confirms that three Engineering users are currently logged in to persistent VDI desktops. The third user's VM shows no ADGroup assignment in its VM details in Prism Central, even after the user has successfully logged in. All three users are members of the same AD group, and the Domain Controller event logs confirm a successful interactive login for the third user. Which condition explains why the third user's VM is not being assigned the ADGroup: Engineering category?

A. The Flow Identity Service has been disabled in Prism Central for the VM the third user is logging in to.
B. The Flow Network Security policy scope does not include the VLAN where the third user's VM resides.
C. The third user's VM has been assigned an AppType category, preventing ID-Based categorization.
D. The Active Directory Service account used by Prism Central is locked.

Question 4

Which step is required to prepare an AHV cluster for Flow Network Security Next-Gen?

A. Assign static IP addresses to all VMs before enabling Flow.
B. Enable microsegmentation policies on all VM groups before enabling Flow.
C. Enable microsegmentation and network controller on the cluster.
D. Disable all existing VLANs in the cluster to allow Flow to control traffic.

Question 5

A VPC admin creates a policy to allow traffic between two IP subnets but forgets to enable reverse direction.
What happens in this scenario?

A. Traffic flows only in one direction, blocking return traffic.
B. Policy is rejected by Prism Central during validation.
C. Traffic flows bidirectionally because policies are stateful by default.
D. Traffic is blocked completely because the policy is invalid.

Solutions: