Important Nutanix NCP-CI-Azure Exam Questions

Answer: C

Explanation:

Azure Directory Service Role: Azure Directory Service must be able to resolve specific Nutanix URLs to ensure proper communication and functionality during the deployment of an NC2 cluster.

Critical Endpoint: The address 'Gateway-external-api.cloud.nutanix.com' is critical for establishing external API communications required for the deployment and management of the NC2 cluster.

DNS Resolution: Proper DNS resolution of this address ensures that the Azure Directory Service can interact with Nutanix services and APIs necessary for cluster operations.

Verification Process:

Ensure that DNS settings allow resolution of 'Gateway-external-api.cloud.nutanix.com'.

Test connectivity and resolution prior to deployment to avoid issues.

Importance: Without resolving this address, the deployment process might face connectivity issues, leading to potential deployment failures.

Nutanix NC2 on Azure Setup Guide

Azure Active Directory Integration

Answer: A

Explanation:

To connect the company's on-premises datacenter to the Azure cloud environment while avoiding traffic over the public internet, the administrator should use Azure ExpressRoute. ExpressRoute provides a private connection to Azure, offering more reliability, faster speeds, and lower latencies compared to typical internet connections. This service ensures that data traffic does not traverse the public internet, enhancing security and performance. Reference

Azure ExpressRoute Overview

Answer: A

Explanation:

Role Requirements: The task involves creating and managing multiple organizations and clusters, along with managing user access across the company.

Role Capabilities: The 'Customer Administrator' role is designed to provide extensive administrative capabilities, including:

Creating and managing organizations.

Managing clusters.

Handling user access and permissions.

Comparison of Roles:

Cluster Administrator: Primarily focuses on managing individual clusters but does not encompass organization-wide administrative tasks.

Customer Security Administrator: Focuses on security-related tasks and does not have broad administrative capabilities across organizations and clusters.

Organization Administrator: Manages organizational settings but might not cover all aspects needed for multiple clusters and user access management.

Conclusion: The 'Customer Administrator' role meets all the requirements for managing organizations, clusters, and user access comprehensively.

Nutanix Role-Based Access Control Documentation

NC2 on Azure User Roles Guide

Answer: A

Explanation:

Azure AD App Registration: When setting up an application registration in Azure AD, specific permissions are required to delegate access.

User Access Administrator Role: This role has the necessary permissions to manage user access to Azure resources, including delegating permissions for app registrations.

Comparison of Roles:

Azure Reader Role: Grants read-only access, insufficient for managing app registrations.

Azure Contributor Role: Allows creation and management of resources but does not include permissions to manage access.

Azure Custom Role: While it can be defined to meet specific needs, the User Access Administrator role is predefined to handle access delegation.

Conclusion: The Azure User Access Administrator role is required to delegate minimum permissions for Azure AD App registration.

Azure Role-Based Access Control Documentation

Azure AD App Registration Guide

Answer: C

Explanation:

Local Key Manager (LKM): The native local key manager in Nutanix requires a minimum number of nodes to function correctly and provide key management services.

Minimum Node Requirement for LKM: To support the Nutanix native LKM, at least three nodes are needed. This configuration ensures that the key management service can achieve the necessary quorum and redundancy for secure operations.

Nutanix Data Encryption Documentation

Nutanix Cluster Configuration Guide