最新的Nutanix NCP-NS-7.5免費考試真題

問題1

Which statement is correct about cloning Application Security Policies?

A. The system prevents saving the cloned policy if it has the same secured entities as the original.

B. The default name of the cloned policy must be manually entered; the system does not provide a default.

C. The policy type can be changed while cloning a policy.

D. Only one policy can be cloned at a time.

正確答案: C

說明：（僅 Fast2test 成員可見）

問題2

An administrator receives a ticket reporting unwanted traffic between production and development servers.
The administrator reviews the Flow Network Security logs and finds the following:

How can the administrator resolve the issue?

A. Update the policy to disallow the unwanted traffic.

B. Move the servers to separate IP subnets.

C. Change the enforcement mode for the policy

D. Enable the Network Controller for the policy

正確答案: A

說明：（僅 Fast2test 成員可見）

問題3

Before creating a new Application Security Policy in Prism Central, what prerequisite must exist?

A. The Network Controller must be deployed on each cluster in the policy's scope.

B. A category key/value pair must be defined for use in the policy.

C. Targeted VMs must have category assignments.

D. Flow Network Security must be enabled on all registered clusters.

正確答案: C

說明：（僅 Fast2test 成員可見）

問題4

Refer to Exhibit:

An organization uses an FNS-NG Service Chain to steer application traffic through a pair of third-party firewall Network Function VMs operating in Active/Standby mode. Users suddenly report that all application access is blocked. The administrator reviews Prism Central - > Network & Security - > Network Functions, where the summary shown in the exhibit is displayed. Additional information: Alert: "Network Function
'PANW Service Insertion' virtual NIC pair(s) are unhealthy." Both firewall VMs are powered on and reachable. The security policy using the service chain has not been changed. Based on the exhibit and findings, what is the most likely cause of the traffic outage?

A. Firewall policy synchronization was not configured when the standby firewall became active.

B. One of the Network Function vNIC pairs lost dataplane connectivity, interrupting traffic until health is stabilized.

C. The inbound vNIC on SE-PA-VM Firewall-2 failed, preventing redirected packets from reaching the firewall.

D. The service-chain health check failed to reroute sessions to the healthy firewall.

正確答案: B

說明：（僅 Fast2test 成員可見）

問題5

An administrator recently deployed a new set of virtual machines... 3-tier web application... restricted as follows: Only application VMs can talk to database VMs on port 3306 Frontend VMs should only communicate with application VMs on port 8080 Which action will correctly create and configure the Security Policies in Nutanix Flow to satisfy this task?

A. Create categories for each tier then define an Application Policy allowing specific ports between them.

B. Configure a global "Allow All" Security Policy and rely on guest OS firewalls for tier-based restrictions.

C. Create IP-based rules for each VM category within a Security Policy.

D. Create VLANs for each tier and configure ACLs to restrict communication.

正確答案: A

說明：（僅 Fast2test 成員可見）

問題6

An administrator must delegate management of a single tenant VPC to a junior engineer. The engineer should be able to modify that VPC but must not see or change any other VPCs or networking configurations in Prism Central. The administrator wants to meet this requirement using RBAC. Which action should the administrator take to meet this requirement?

A. Assign the VPC Admin role and restrict its scope to the desired VPC.

B. Assign the Network Infrastructure Admin role and restrict its scope to the desired VPC.

C. Assign a Custom Role cloned from VPC Admin and restrict its scope to the desired VPC.

D. Assign a Custom Role cloned from Network Infrastructure Admin and restrict its scope to the desired VPC.

正確答案: A

說明：（僅 Fast2test 成員可見）

問題7

Which statement accurately describes the behavior of a Flow Network Security policy operating in Monitor mode?

A. All matching traffic is discovered and allowed, but not blocked.

B. All matching traffic is discovered and denied, but not allowed.

C. Only East-West traffic is discovered, but North-South traffic is not.

D. Traffic is blocked unless it matches an "allow" rule in Enforce mode.

正確答案: A

說明：（僅 Fast2test 成員可見）

最新的Nutanix Certified Professional - Network and Security (NCP-NS) 7.5 - NCP-NS-7.5免費考試真題

聯系我們

站內鏈接

最新更新