Online Access Free NCP-NS-7.5 Exam Questions

When configuring an Application policy, an administrator defines a VM Category Application:MySQL as a Secured Entity. The administrator wants to ensure that traffic between VMs in the Secured Entity is kept to only required replication traffic on the default mysql service port. How should the administrator best accomplish this?

• A.Create an Outbound Rule specifying the mysql service as the allowed traffic.
• B.Create an Inbound Rule specifying the mysql service as the allowed traffic.
• C.Create an Inter-Tier Rule specifying the mysql service as the allowed traffic.
• D.Create an Intra-Tier Rule specifying the mysql service as the allowed traffic.

In a Nutanix deployment, when is the Network Controller automatically enabled?

• A.When the Network Controller is enabled on a Hyper-V cluster
• B.When the Network Controller is manually configured from the Prism Central settings page
• C.When the X-Large Prism Central deployment is installed or upgraded
• D.When the Small Prism Central deployment is scaled out to three PCVM's

While configuring a new security policy in a Nutanix microsegmentation environment, an administrator wants the policy to remain flexible even if virtual machines change subnets or obtain new IP addresses. Which configuration approach should the administrator use when defining the policy scope?

• A.Use VM categories to define the secured and allowed entities.
• B.Configure the policy only on specific VLAN IDs.
• C.Apply the policy after setting static routes for each VM.
• D.Assign IP addresses manually to all VMs included in the policy.

An administrator has deployed a VPC for a multi-tier application on Nutanix AHV. The Web tier requires public internet access, while the App and Database tiers must remain private and isolated. Which steps should the administrator take to configure the external network correctly?

• A.Use overlay networks for external access instead of configuring a VPC external network.
• B.Attach a single external network to the VPC and allow all tiers unrestricted internet access.
• C.Configure an external network for the Web tier subnet and leave App and Database tiers private.
• D.Assign external IPs to all VMs in the VPC to simplify connectivity.

An administrator uses Nutanix Flow to secure a three-tier application (Web, App, and Database tiers). After observing the traffic, they find that: The Web tier communicates with the App tier over HTTP (port 80) The App tier communicates with the Database tier over TCP port 1433 The Database tier does not initiate connections The Web tier receives inbound HTTP traffic from the corporate DMZ on port 8080 No other traffic should be allowed What should the administrator do to document and then securely apply these flows in Nutanix Flow?

• A.Use Flow Network Visualization to capture observed flows and convert them into microsegmentation security policies.
• B.Disable traffic-flow discovery and configure all policies manually.
• C.Manually create isolation policies between all VMs in the environment.
• D.Add all VMs to a single security policy to simplify communication.