Nutanix NCP-NS Actual Tests : Nutanix Certified Professional Network & Security v6.10

Which step is required before placing the Flow Network Security software bundle on a local web server?

• A. Set up a local web server and download both the required software LCM bundle and compatibility bundle.
• B. Enable Direct Upload in Life Cycle Manager so the bundles can be transferred automatically to the Nutanix cluster.
• C. Extract the downloaded bundle using 7zip and upload it directly to Prism Central.
• D. Perform an inventory on the Nutanix cluster before transferring any bundle files to the web server.

Which statement accurately describes the behavior of a Flow Network Security policy operating in Monitor mode?

• A. Only East-West traffic is discovered, but North-South traffic is not.
• B. All matching traffic is discovered and allowed, but not blocked.
• C. Traffic is blocked unless it matches an "allow" rule in Enforce mode.
• D. All matching traffic is discovered and denied, but not allowed.

A customer wants to extend a VLAN subnet to a remote data center using VTEP. The administrator configures a Subnet Extension which shows UP in the Prism Interface, yet traffic fails to pass.
Which setting is most likely misconfigured?

• A. Route Policy for VTEP has not been configured.
• B. Remote gateway IP address has not been configured.
• C. VXLAN UDP port is set to 4789.
• D. VLAN ID does not match in the remote data center.

An administrator has a VPC with a single active gateway node that successfully peers with an external router using a single BGP GW and session.
To eliminate a single point of failure, the administrator deploys a second BGP gateway to the VPC. After the second gateway is added and shows a healthy state, the external router still only sees a single BGP session.
What is the most likely reason for the second session not being established on the external router?

• A. Network Security Groups are blocking BGP traffic from the second gateway's IP address.
• B. The BGP Hold-down timer on the external router is set too high.
• C. The external router needs BGP peering configuration pointing to the IP address of the first gateway node.
• D. The second BGP gateway requires a BGP session configured to peer with the external router.

Refer to the exhibit.

An organization uses an FNS-NG Service Chain to steer application traffic through a pair of third-party firewall Network Function VMs operating in Active/Standby mode. Users suddenly report that all application access is blocked. The administrator reviews Prism Central -> Network & Security -> Network Functions, where the summary shown in the exhibit is displayed. Additional information: Alert: "Network Function 'PANW Service Insertion' virtual NIC pair(s) are unhealthy." Both firewall VMs are powered on and reachable. The security policy using the service chain has not been changed. Based on the exhibit and findings, what is the most likely cause of the traffic outage?

• A. The inbound vNIC on SE-PA-VM Firewall-2 failed, preventing redirected packets from reaching the firewall.
• B. The service-chain health check failed to reroute sessions to the healthy firewall.
• C. Firewall policy synchronization was not configured when the standby firewall became active.
• D. One of the Network Function vNIC pairs lost dataplane connectivity, interrupting traffic until health is stabilized.