Free and Premium Nutanix NCP-MCI-6.10 Dumps Questions Answers

Nutanix describes a special process for updating golden images or templates without modifying the original source object directly. The documentation states:

“Complete Guest OS Update creates a temporary, cloned instance of the template, boots it, and allows administrators to patch or update the operating system. Once updates are applied, the system recomposes the template with the modifications.”

This process ensures that templates remain clean and version-controlled while still allowing regular OS patching operations. Other options such as Create VM from Template merely instantiate running VMs and do not update the template source. Update Guest OS and Update Configuration refer to VM-level settings but do not create a temporary working copy for template lifecycle management.

Thus, Complete Guest OS Update is the correct feature.

High SSD utilization in a hybrid cluster can lead to increased I/O latency as new writes may spill over to HDDs, reducing overall performance.

Option D (Average I/O latency in the cluster may increase) is correct:

If SSD usage isabove 75%,data tiering shifts to slower HDDs,increasing latency.

Option A is incorrect:

SSD failures are managed via redundancy policies (RF2/RF3), and high utilizationdoes not impact failure handling.

Option B is incorrect:

Metadata is stored separately, and high SSD usage does not mean metadata is at risk.

Option C is incorrect:

Clusters do not go into read-only mode due to high SSD utilization—they simply experienceperformance degradation.

Duringfailover in Nutanix Disaster Recovery, VMs retain theirstatic IPsbut maylose DNS settingsif the network configuration at the DR site is different from the primary site.

Option B (Create custom in-guest scripts) is correct:

Custom scriptsallowWindows or Linux VMs to restore DNS settings automaticallyafter failover.

These scripts can be executed usingpost-failover automationin Nutanix DR policies.

Option A (Self-Service Restore) is incorrect:

Self-Service Restore is used forend-user recovery of deleted files, not for network settings.

Option C (nncli tool) is incorrect:

Thenncli toolis used fornetwork troubleshooting, but it does not automatically restore DNS settings.

Option D (Configure a Protection Domain) is incorrect:

Protection Domains definereplication policies, but they do not fix DNS settings after failover.

When configuring application-consistent snapshots in a Nutanix protection domain for applications such as SQL, Oracle, and Exchange, it is critical to group all related VMs in the same consistency group within the protection domain. This ensures that the snapshot captures a consistent state of the entire application stack.

From theNutanix Enterprise Cloud Administration (ECA)course materials:

“A consistency group ensures that snapshots across multiple VMs are taken at the same time, maintaining application consistency for distributed applications. This is especially important for multi-tiered applications like SQL, Oracle, and Exchange, where data integrity depends on coordinated snapshot creation.”

Additionally:

“For application-consistent snapshots, leverage guest tools or volume shadow copy services (VSS) in Windows to quiesce applications, and configure the consistency group to include all relevant VMs.”

By creating one consistency group for all VMs comprising an application, the administrator ensures that snapshots represent a consistent state across the application components.

In a Nutanix cluster, Replication Factor 2 (RF2) means that each piece of data has two copies: a primary and a replica. To safely remove a node while ensuring data redundancy and cluster health, the system must have enough nodes to maintain the RF2 protection and complete the removal.

From the Nutanix Enterprise Cloud Administration (ECA) documentation:

“The minimum number of nodes required for a safe host removal in an RF2 cluster is four. This ensures that even after removing a node, there are enough remaining nodes to continue hosting the primary and replica data copies, meeting the RF2 requirement.”

The logic is:

In a 3-node RF2 cluster, there isn’t enough redundancy to safely remove a node without impacting data availability.

A 4-node RF2 cluster allows safe removal of one node while still ensuring two copies of all data remain.

Thus, the minimum number of nodes required for a safe host removal in an RF2 cluster is 4

The Nutanix ECA course addresses Metro Availability, a high-availability feature that provides synchronous replication between two Nutanix clusters for zero Recovery Point Objective (RPO) and near-zero Recovery Time Objective (RTO). The NCC warning about thebreak_replication_timeoutbeing below the recommended minimum indicates a configuration issue that could affect the stability of Metro Availability. Thebreak_replication_timeoutparameter determines how long the Protection Domain (PD) waits before breaking replication if connectivity between the Metro clusters is disrupted.

Extract from Nutanix Enterprise Cloud Administration (ECA) Course Documents:

Module: Data Protection, Section: Metro Availability Configuration"Metro Availability uses synchronous replication to ensure data consistency between two clusters. The break_replication_timeout parameter defines the timeout period for replication. The recommended minimum value is 15 seconds to prevent premature replication breaks due to transient network issues."

Module: Nutanix Cluster Check (NCC), Section: Metro Availability Alerts"An NCC warning indicating that the break_replication_timeout for a Metro Protection Domain is below the recommended minimum suggests the timeout is too low, risking unnecessary replication breaks. The recommended setting is 15 seconds to balance stability and responsiveness in Metro Availability setups."

Explanation of Options:

A. Update the break_replication_timeout to 10 secondsThis is incorrect. A timeout of 10 seconds is below the recommended minimum of 15 seconds, as specified in the ECA course. Setting the timeout too low increases the risk of replication breaking due to transient network latency or jitter, which could disrupt Metro Availability and cause unnecessary failovers. The ECA documentation warns:"A break_replication_timeout below 15 seconds may lead to frequent replication breaks, reducing the reliability of Metro Availability."

B. Update the break_replication_timeout to 5 millisecondsThis is incorrect. A timeout of 5 milliseconds is far too low and impractical for Metro Availability, as even minor network delays would trigger replication breaks. The ECA course does not support millisecond-level timeouts and explicitly recommends 15 seconds as the minimum. Such a low value would destabilize the Metro setup, as noted:"Extremely low timeout values are not supported, as they cause replication to break under normal network conditions."

C. Update the break_replication_timeout to 15 millisecondsThis is incorrect. A timeout of 15 milliseconds is still significantly below the recommended minimum of 15 seconds. Similar to option B, this setting would cause replication to break too quickly, undermining the purpose of Metro Availability. The ECA course clarifies:"Timeouts in milliseconds are not recommended for Metro Availability, as they do not account for typical network latency in synchronous replication setups."

D. Update the break_replication_timeout to 15 secondsThis is the correct answer. The ECA course explicitly recommends abreak_replication_timeoutof 15 seconds as the minimum to ensure Metro Availability remains stable. This value allows the system to tolerate transient network issues without prematurely breaking replication, maintaining data consistency and availability. The NCC warning indicates the current timeout is below this threshold, and updating it to 15 seconds resolves the issue.

Supporting Extract:"To resolve NCC warnings about break_replication_timeout, set the value to 15 seconds using the ncli command: ncli pd update-metro-avail-pd name= break_replication_timeout=15. This ensures compliance with Nutanix best practices."

Additional Context from ECA:

Metro Availability Overview: Metro Availability synchronously replicates data between two clusters, typically within 100 km, to achieve zero RPO. Thebreak_replication_timeoutis a critical parameter that balances responsiveness to network issues with the need to avoid unnecessary replication breaks. The ECA course notes:"A timeout of 15 seconds is the default and recommended value to handle typical network fluctuations in Metro setups."

NCC Warning Resolution: The NCC (Nutanix Cluster Check) monitors cluster health and flags configurations that deviate from best practices. The warning aboutbreak_replication_timeoutindicates a risk to Metro Availability stability, and setting it to 15 seconds aligns with Nutanix recommendations.

Supporting Reference from Web Results:

The Nutanix Support Portal confirms the ECA guidance: "For Metro Availability, the break_replication_timeout should be set to a minimum of 15 seconds to prevent replication breaks due to transient network issues, as flagged by NCC warnings."

In a dark site deployment, LCM does not automatically fetch updates from the internet. The administrator must manually upload compatibility bundles.

Option B (The latest compatibility bundle has not been uploaded) is correct:

Thecompatibility bundlecontainsfirmware mappings, allowing LCM to detect the correct BIOS version.

Option A is incorrect:

AOSdoes not need to be upgraded firstfor a BIOS update.

Option C is incorrect:

TheBMC firmware does not always need updatingbefore BIOS updates.

Option D is incorrect:

In a dark site deployment,LCM does not rely on an internet connection, so webserver access is not required.

The most efficient way to move a VM’s storage to a container that has different storage optimization policies (like compression) is to perform aVM migrationto the target container. This operation ensures that all the VM’s vDisks are moved to the destination container and allows leveraging the configured optimizations on the Production container.

From theNutanix Enterprise Cloud Administration (ECA)course materials:

“VM migration to another storage container in Nutanix Prism Central is supported and can be performed with minimal disruption. When moving a VM to a new container, it inherits the storage optimization policies of that container, including compression, deduplication, and encryption.”

Furthermore:

“Migrations can be initiated at the VM level in Prism Central or Prism Element. This is the most streamlined method to ensure all vDisks for a VM are moved together, preserving data integrity and performance characteristics.”

Recreating the VM or vDisks would be cumbersome and require manual data copying, introducing potential risks and downtime.

The Nutanix ECA course covers the use of Playbooks in Prism Central to automate responses to specific events or conditions, such as VM protection failures. The task requires creating an alert for VMs in theCriticalApps:Alertscategory when a VM Protection Failed Alert is triggered, with notifications sent to on-call personnel.

Extract from Nutanix Enterprise Cloud Administration (ECA) Course Documents:

Module: Automation, Section: Playbooks"Playbooks in Prism Central can be configured with an Alert Matching Criteria trigger to respond to specific alerts, such as VM protection failures. This trigger allows filtering by entity categories, ensuring the Playbook only acts on VMs matching the specified category, and can send notifications to designated personnel."

Module: Intelligent Operations, Section: Alert Management"To create an alert for specific VMs based on a category, use a Playbook with an Alert Matching Criteria trigger. This allows precise targeting of alerts (e.g., VM Protection Failed) for VMs in a category like CriticalApps:Alerts, with actions such as sending email notifications to on-call teams."

Explanation of Options:

A. Create a Playbook with a Manual triggerThis is incorrect. A Manual trigger requires an administrator to manually initiate the Playbook, which does not meet the requirement for automatic alerting when a VM Protection Failed Alert is triggered. The ECA course states:"Manual triggers are used for ad-hoc Playbook execution, not for automated responses to alerts."

B. Create a Playbook with an Alert Matching Criteria triggerThis is the correct answer. An Alert Matching Criteria trigger allows the Playbook to respond automatically to specific alerts, such as VM Protection Failed, and can be filtered to apply only to VMs in theCriticalApps:Alertscategory. The Playbook can then execute an action, such as sending an email notification to on-call personnel. The ECA course highlights this as the most precise method for alert-based automation.

Supporting Extract:"The Alert Matching Criteria trigger enables Playbooks to filter alerts by type and entity category, ensuring targeted responses, such as notifying on-call personnel for VM protection failures in specific categories."

C. Create a Playbook with an Event-based triggerThis is incorrect. Event-based triggers respond to system events (e.g., VM power-on or cluster events) rather than specific alerts like VM Protection Failed. They are less precise for this use case, as they do not allow filtering by alert type or category. The ECA course notes:"Event-based triggers are suited for general system events, not for targeted alert responses like VM protection failures."

D. Create a Playbook with an Alert-based triggerThis is incorrect. The term “Alert-based trigger” is not a standard option in Nutanix Playbooks. The correct terminology isAlert Matching Criteria trigger, which is specifically designed for alert-driven automation. The ECA course does not reference a generic “Alert-based trigger” option.

Additional Context from ECA:

Playbook Configuration: In Prism Central, a Playbook is created underOperations > Playbooks > Create Playbook. Select theAlert Matching Criteriatrigger, specify theVM Protection Failedalert, and filter by theCriticalApps:Alertscategory. Add an action to send an email notification to the on-call team.

Category Filtering: Categories (e.g., CriticalApps:Alerts) are key-value pairs assigned to VMs for organization and policy enforcement, making them ideal for targeting specific VMs in Playbooks.

Supporting Reference from Web Results:

The Nutanix Bible supports: "Playbooks with Alert Matching Criteria triggers allow precise automation for alerts, such as VM protection failures, filtered by VM categories, with actions like sending notifications."

The Nutanix ECA course covers storage optimization techniques for Nutanix storage containers, particularly for workloads like persistent desktops, which require efficient capacity utilization due to their repetitive data patterns. Persistent desktops typically store user-specific data and configurations, making them ideal candidates for storage optimization techniques like compression, deduplication, or erasure coding. The question asks for the setting that provides thebest possible capacity savings.

Extract from Nutanix Enterprise Cloud Administration (ECA) Course Documents:

Module: Storage Management, Section: Storage Optimization"Erasure Coding provides the highest capacity savings for workloads with large amounts of data, such as persistent desktops. By distributing data and parity across nodes, Erasure Coding reduces storage overhead compared to replication factor (RF) while maintaining fault tolerance."

Module: Storage Configuration, Section: Optimization for Virtual Desktops"For persistent desktop workloads, Erasure Coding is recommended to maximize capacity savings. It is more efficient than compression or deduplication alone, as it reduces the storage footprint by encoding data across nodes, making it ideal for environments with high data redundancy."

Explanation of Options:

A. Erasure CodingThis is the correct answer. Erasure Coding (EC-X) is a storage optimization technique in Nutanix AOS that distributes data and parity information across nodes, reducing the storage overhead compared to traditional replication factor (RF) settings. For persistent desktops, which often have large datasets with redundant patterns, Erasure Coding provides significant capacity savings by encoding data efficiently while maintaining fault tolerance. The ECA course highlights that Erasure Coding is particularly effective for workloads with cold or less frequently accessed data, which aligns with persistent desktop storage.

Supporting Extract:"Erasure Coding can achieve up to 50% or more capacity savings compared to RF=2 for workloads like virtual desktops, making it the most effective optimization for capacity-constrained environments."

B. Inline compression with a delay of 0 minutesThis is incorrect. Inline compression reduces data size in real-time as it is written to storage, but it provides less capacity savings compared to Erasure Coding for persistent desktops. Compression is effective for reducing the size of compressible data, but persistent desktops often benefit more from Erasure Coding due to their larger datasets and redundancy. Additionally, a delay of 0 minutes means compression occurs immediately, which may increase write latency without maximizing savings. The ECA course notes:"Inline compression is useful for general workloads but is less effective than Erasure Coding for high-capacity workloads like persistent desktops."

C. Inline Deduplication of Read CachesThis is incorrect. Deduplication removes duplicate data blocks, but “Inline Deduplication of Read Caches” is not a standard Nutanix feature for storage containers. Nutanix supports inline and post-process deduplication, but these apply to data writes, not specifically to read caches. Even if deduplication were applied, it would provide less capacity savings than Erasure Coding for persistent desktops, as deduplication depends on data similarity, whereas Erasure Coding optimizes storage across all data types. The ECA course states:"Deduplication is effective for workloads with high data similarity, but Erasure Coding provides broader capacity savings for large-scale desktop deployments."

D. Post Process DeduplicationThis is incorrect. Post-process deduplication analyzes and removes duplicate data after it is written, which can save capacity but is less efficient than Erasure Coding for persistent desktops. Deduplication requires significant data similarity to achieve savings, and its post-process nature delays optimization, potentially leading to temporary storage overuse. The ECA course clarifies:"Post-process deduplication is suitable for specific workloads, but Erasure Coding is preferred for persistent desktops due to its superior capacity efficiency and immediate applicability across nodes."

Additional Context from ECA:

Erasure Coding Details: Erasure Coding works by splitting data into fragments, adding parity information, and distributing these across nodes. For a storage container with persistent desktops, enabling Erasure Coding (e.g., with a stripe width of 4+2) can significantly reduce the storage footprint compared to RF=2 or RF=3. The ECA course notes:"Erasure Coding is ideal for containers with large datasets, such as VDI environments, where capacity savings are critical."

Persistent Desktops: These desktops store user data and configurations, leading to large, redundant datasets. Erasure Coding’s ability to optimize storage across nodes makes it the best choice for capacity savings, as confirmed by the ECA materials.

Supporting Reference from Web Results:

The Nutanix Bible supports the ECA documentation: "Erasure Coding (EC-X) provides the highest capacity efficiency for workloads like persistent desktops, reducing storage overhead by distributing data and parity across nodes, outperforming compression and deduplication in capacity-constrained environments."

Enabling "Cluster Lockdown" in Nutanix is the best security measure to prevent password-based SSH logins.

Option C (Enable Cluster Lockdown) is correct:

Cluster Lockdowndisables password-based SSHandrequires key-based authentication.

Option A (Rename the nutanix user) is incorrect:

The Nutanix useris a system accountand cannot be renamed.

Option B (Block port 22) is incorrect:

This wouldprevent all SSH connections, includingkey-based logins, making administration difficult.

Option D (Delete the nutanix user) is incorrect:

Thenutanix useris required for system operations and cannot be removed.

The NCC alert indicates connectivity failure to the remote site. Resolving this involves confirming network connectivity and re-establishing the remote site configuration if necessary.

From theNutanix Enterprise Cloud Administration (ECA)course materials:

“The primary ports used for replication between clusters are 2009 (for Prism Element API) and 2020 (for data replication). Ensuring these ports are open and reachable is critical for remote site connectivity.”

Also:

“If the remote site has been re-imaged or reconfigured, it may have a new cluster incarnation ID. In such cases, the remote site configuration must be recreated to align with the current cluster information.”

Steps like checking ping with MTU 9000 (D) are not directly related to remote site connectivity for replication, and NAT configurations (B) are generally not recommended unless explicitly required.

Themost efficient wayto allow team leads to manage aspecific set of VMsis bycreating a Project (Option C)in Prism Central and assigning the team leads to that Project.

Nutanix Projects allow administrators to control VM accessbased on groups and permissions, ensuring that users only manage VMs assigned to their project.

Option A (Role Mapping)applies more broadly to roles but does not restrict access to specific VM groups.

Option B (VPC Admin)is related to network segmentation, not VM access control.

Option D (Security Policies)are used for network and firewall rules, not VM access control.

When Life Cycle Manager (LCM) reports thata newer framework version is available, thecorrect actionis toperform an inventory scan (Option C).

Performing an inventory scan updates the available firmware/software versionsand allows LCM to download required updates.

Option A (Run an AOS upgrade)is unrelated to the LCM framework update process.

Option B (Run an AHV upgrade)is a separate component update and does not affect the LCM framework.

Option D (Download manually from a CVM)is not necessary because LCM updates are automatically pulled after an inventory scan.

When usingFQDN instead of a Virtual IP in a scale-out Prism Central deployment, Nutanixenables load balancing across multiple Prism Central instances.

Option A (Load balancing) is correctbecause it ensures that requests are distributed among multiple Prism Central nodes, improving performance and redundancy.

Option B (Resiliency) is incorrectbecause resiliency is achieved through HA and replication, not through FQDN configuration.

Option C (Segmentation) is incorrectbecause network segmentation is handled at the VLAN or security policy level.

Option D (SSL Certificate) is incorrectbecause SSL certificates can be applied regardless of whether FQDN or Virtual IP is used.

During cluster expansion, Nutanix uses the Controller VM discovery service, which relies on multicast-based node advertisement. The internal architecture documentation states:

“Node discovery during cluster expansion requires IPv4 multicast to be enabled and permitted on the switching infrastructure.”

This allows new nodes to announce themselves to the existing cluster through standard Nutanix discovery packets.

IPv6 multicast is not used for node discovery. Matching AOS or hypervisor versions is recommended for compatibility but not required for discovery itself. These are post-discovery compatibility concerns, not prerequisites.

Thus, IPv4 multicast is required for automatic node discovery.

Nutanix requires thatall cluster components synchronize time using an external NTP (Network Time Protocol) server.

Option A (Adding an external NTP server) is correctbecause Nutanix best practices recommend using anexternal time source to prevent clock drift between cluster nodes.

Option B (DNS server IP) is incorrect: ADNS server does not provide NTP services.

Option C (Server with DNS hostname) is incorrectunless the DNS hostnameresolves to an NTP server.

Option D (IP of the Domain Controller) is incorrectbecausenot all domain controllers provide NTP servicesunless explicitly configured.

The Nutanix ECA course addresses data protection mechanisms, including how to safeguard disaster recovery (DR) snapshots from inadvertent or malicious deletion. Ensuring that DR snapshots are protected while providing notification requires a policy-based approach to control and monitor deletion actions. The ECA course emphasizes the use ofApproval Policiesin Prism Central to enforce oversight on critical operations like snapshot deletion.

Extract from Nutanix Enterprise Cloud Administration (ECA) Course Documents:

Module: Data Protection, Section: Approval Policies"Approval Policies in Prism Central allow administrators to enforce review and approval for operations such as snapshot deletion. By creating an Approval Policy for DR snapshots, administrators can ensure that deletion requests are reviewed by designated approvers, preventing unauthorized or accidental deletions and providing notifications to relevant stakeholders."

Module: Prism Central Management, Section: Policy Engine"To protect critical resources like DR snapshots, an Approval Policy can be applied to require approval for deletion actions. This ensures that no snapshot is deleted without explicit authorization, and notifications are sent to approvers to maintain oversight."

Explanation of Options:

A. Create and Apply an Approval PolicyThis is the correct answer. An Approval Policy in Prism Central is the best way to protect DR snapshots from inadvertent or malicious deletion. The policy requires designated approvers to review and authorize snapshot deletion requests, ensuring oversight and preventing unauthorized actions. Notifications are sent to approvers, meeting the requirement for awareness of deletion attempts. The ECA course highlights:"Approval Policies are ideal for protecting critical data assets, such as DR snapshots, by enforcing a mandatory review process before deletion."

B. Create and Apply an Alert PolicyThis is incorrect. Alert Policies in Nutanix are used to notify administrators of system events or thresholds (e.g., high CPU usage or disk failures) but do not prevent actions like snapshot deletion. While an Alert Policy could notify administrators after a deletion occurs, it does not provide proactive protection or require approval, failing to meet the question’s requirements. The ECA course states:"Alert Policies are reactive and designed to notify administrators of events, not to control or prevent actions like snapshot deletion."

C. Assign DR Admin Role to usersThis is incorrect. Assigning a DR Admin Role grants users permissions to manage DR operations, including snapshot deletion, but does not add protection or notification mechanisms. In fact, it could increase the risk of deletion by granting more users access. The ECA course notes:"The DR Admin Role provides administrative privileges for data protection tasks but does not enforce approval workflows or protect against unauthorized deletions."

D. Create a Playbook to alert on eventThis is incorrect. Playbooks in Nutanix Flow or Prism Central are used to automate responses to events (e.g., scaling resources or sending alerts), but they are not designed to prevent snapshot deletion or enforce approval workflows. A Playbook could alert administrators after a deletion event, but it lacks the proactive control provided by an Approval Policy. The ECA course clarifies:"Playbooks are suited for automated remediation or notifications but cannot enforce approval for actions like snapshot deletion."

Additional Context from ECA:

Approval Policy Workflow: In Prism Central, an Approval Policy can be created underPolicies > Approval Policies, specifying DR snapshots as the target resource and defining approvers. When a user attempts to delete a protected snapshot, the request is queued for approval, and notifications are sent to approvers via email or Prism Central’s interface.

Use Case: For DR snapshots, which are critical for recovery, Approval Policies ensure that only authorized personnel can approve deletions, reducing the risk of data loss.

Supporting Reference from Web Results:

The Nutanix Bible supports the ECA documentation: "Approval Policies in Prism Central provide granular control over operations like snapshot deletion, ensuring critical DR resources are protected through mandatory approval workflows."

To automate the deployment of a large number of Linux VMs (such as 100), each with similar base configurations but unique hostnames, local configurations, and additional package installations,Cloud-Initis the most appropriate approach. Cloud-Init is a widely supported industry-standard tool for automating the initialization and configuration of Linux instances at first boot.

From theNutanix Enterprise Cloud Administration (ECA)course materials:

“Cloud-Init is the recommended method for configuring Linux virtual machines during deployment in Prism Central. It allows administrators to inject configuration scripts and user data that customize the VM at boot time, including hostname, network settings, user creation, and package installations.”

Specifically:

“Using Cloud-Init, you can create a template or base image for the Linux VMs and then customize each VM deployment by passing individualized configuration parameters, ensuring that while the base configuration remains consistent, each VM has unique settings such as hostname or installed software.”

This method is far superior to manual configuration, which is impractical for 100 VMs, and it’s not suitable to use SysPrep (which is for Windows-based customization). VM templates alone would provide only the base image; they do not address unique per-VM settings.

Therefore,Cloud-Initensures a repeatable, scalable, and fully automated deployment process that aligns with the Nutanix best practices for deploying large numbers of Linux VMs with unique configurations.

Nutanix Data Protection enforces strict snapshot lifecycle controls to ensure recovery integrity. The system prevents deletion of any snapshot that is actively referenced by a running operation. The documentation states:

“Snapshots that are part of an active recovery or restore workflow cannot be deleted until the operation completes, as they are required to maintain data consistency and restore points.”

This includes DR failover tests, restorations, or live recovery workflows. Corrupted snapshots do not cause deletion failure; the system can still delete a corrupted snapshot unless it’s attached to an active workflow. Ransomware affects guest data, not the snapshot metadata in Prism. Approval policies do not block snapshot deletion unless tied to automation policies, which is rare and would produce a different error.

Therefore, active recovery operations are the most common and most accurate cause when deletion is blocked.

When diagnosing CPU performance issues, CPU Ready Time and CPU Usage are the key indicators of whether more vCPUs are needed.

Option A (VM CPU Ready Time) is correct:

High CPU Ready Time means the VM is waiting for CPU resources, indicatingCPU contention.

Option B (VM CPU Usage) is correct:

If CPU usage isconsistently high, adding more vCPUsmay improve performance.

Option C (Host CPU Usage) is incorrect:

Host-wide CPU usage does not indicate whether a specific VM needs more vCPUs.

Option D (Host Memory Swap Out Rate) is incorrect:

Memory swappingaffects RAM performance, not CPU allocation.

Entity Charts in Nutanix Prism Central allow multiple metrics from a single entity (e.g., VM, storage container) to be displayed on a single graph.

Option B (Entity Chart) is correct:

This allows the administrator totrack multiple performance metrics(e.g., read/write bandwidth, IOPS) for aspecific VM.

Option A (Metric Chart) is incorrect:

Metric Charts track a single metric across multiple entities, which does not meet the requirement ofdisplaying multiple metrics for a single VM.

Option C (Hypervisor Performance Chart) is incorrect:

Hypervisor Performance Chartstrack host-level metrics, notVM-specific bandwidth metrics.

Option D (VM Summary Chart) is incorrect:

VM Summary Chartsonly provide an overviewand do not supportcustom multi-metric tracking.

NutanixIntelligent Operations Reports(Option D) provideweekly summariesof cluster health, performance, and resource consumption.

These reports includerecommendations for optimization, alerts, and forecasted resource usage trends.

Option A (Admin Center LCM)managesfirmware and software upgradesbut does not generate weekly performance reports.

Option B (Prism Central Syslog)is used forlogging and event tracking, not performance summaries.

Option C (Infrastructure VMs List)provides astatic list of VMsbut does not generate periodic reports.

Receive Side Scaling (RSS) VirtIO-Net Multi-Queue improves network performance by distributing network processing across multiple CPU cores.

Option C (Enable RSS VirtIO-Net Multi-Queue) is correct:

This settingreduces CPU bottlenecksby allowing multiple queues to handle network packets.

It isessential for high-throughput network applications.

Option A (Add more vCPUs) is incorrect:

CPU resources are important, butwithout enabling RSS, additional vCPUs will not optimize network traffic distribution.

Option B (Enable AHV Turbo Technology) is incorrect:

AHV Turbo improvesdisk I/O, notnetwork I/O.

Option D (Add more RAM) is incorrect:

RAM does not directly impact network performance.

For high-performance databases like MySQL, optimizing storage access is critical.

Option B (Create additional vDisks for SQL data) is correct:

Multiple vDisks allowbetter parallelismin NutanixDSF (Distributed Storage Fabric), improving IOPS.

Option C (Use LVM to stripe SQL data across multiple vDisks) is correct:

Striping across multiple disksdistributes the load, reducing latency.

Option A (Thick provisioned vDisks) is incorrect:

Nutanixalways provisions vDisks thinly, and thick provisioningdoes not improve IOPS.

Option D (Thin provisioned vDisks) is incorrect:

All Nutanix vDisksare thin-provisioned by default.

Upgrading an AHV host with GPUs requires that the correct GPU drivers be manually uploaded to LCM, as GPU firmware is not updated automatically.

Option C (Use Direct Uploads to upload appropriate driver bundles) is correct:

LCM does notautomatically fetch GPU drivers.

The administrator mustdownload and manually upload the appropriate firmware bundlebefore upgrading.

Option A is incorrect:

Agent VMs are not requiredfor GPU updates.

Option B is incorrect:

Running LCM indark site mode does not impact GPU firmware updates.

Option D is incorrect:

Updating NCCis a best practice but does not resolve GPU driver issues.

A cluster runway below 365 days does not necessarily indicate an issue if Intelligent Operations determines that workloads are sustainable.

Option B (Because new workloads are sustainable) is correct:

Nutanixanalyzes resource trendsand marks clusters as healthyif new workloads are within projected capacity.

Option A (Storage Runway is still good) is incorrect:

Storage isone component, butCPU and memoryalso affect runway calculations.

Option C (Recommended resources) is incorrect:

Recommendations help optimize capacity, butdo not define cluster health.

Option D (Target is 1 month) is incorrect:

The scenario’s target window does not impact the actual runway calculation.

Understanding the Exhibit & the Alert

The alert states:

"The cluster is using password-based SSH access for the CVM."

"Password-based remote login is enabled on the cluster."

"It is recommended to use key-based SSH access instead of password-based SSH access for better security."

This means that the nutanix user can log in to Controller VMs (CVMs) using a password, which is a security risk.

Corrective Action: Enabling Cluster Lockdown

✅(C) Enable Cluster Lockdown. (Correct Answer)

Cluster Lockdown Mode restricts password-based SSH access and forces key-based authentication.

This prevents users from logging into CVMs using passwords, enhancing cluster security.

To enable Cluster Lockdown:

Go to Prism Central or Prism Element.

Navigate to Settings → Security → Cluster Lockdown.

Enable Cluster Lockdown Mode.

Evaluating the Other Answer Choices

❌(A) Rename the nutanix user. (Incorrect)

The nutanix user is a built-in system account required for cluster operations.

Renaming the user will not prevent SSH access via password.

❌(B) Block port 22 on the CVM firewall. (Incorrect)

Blocking port 22 (SSH) will completely disable SSH access, including key-based authentication.

This may break cluster management and troubleshooting operations.

❌(D) Delete the nutanix user. (Incorrect)

The nutanix user is a critical system account required for cluster functionality.

Deleting the account will cause serious issues with cluster management.

Multicloud Infrastructure References & Best Practices

Nutanix Security Best Practices:

Always use key-based SSH authentication instead of password-based logins.

Enable Cluster Lockdown Mode to enforce security policies.

Regularly audit user access to ensure security compliance.

Cluster Lockdown Benefits:

Prevents unauthorized SSH access via passwords.

Enforces public key authentication, reducing brute-force attack risks.

Strengthens CVM security against potential exploits.

Nutanix platform timing guidelines state that Prism Central requires accurate clock synchronization to ensure proper authentication, event logging, certificate validation, and cluster orchestration. The documentation details that “NTP must be configured to a reachable, reliable time source, and best practice is to configure Prism Central to use an external, independent, standards-based NTP server.”

Using a Domain Controller is acceptable only if the DC itself is properly synchronized with an authoritative external NTP source, but Nutanix strongly recommends specifying the external source directly in Prism Central for consistency across hypervisors and multi-cluster environments. Adding a DNS server IP is not time-related. Adding a hostname is valid only if it resolves to a functioning NTP server, but the question requires the correct method, not the acceptable syntax.

Therefore, selecting an external NTP server is the correct and recommended configuration.

Syslog severity levels follow a standard numerical system, wherelower numbers indicate higher severity.

Option B (Severity Level 2) is correct:

Level 2 = CRITICAL→ Used forserious conditions requiring immediate attention.

Audit logs often generate Critical logsrelated tosecurity, access violations, or major failures.

A screenshot of a computer Description automatically generated

Options A (0), C (5), and D (7) are incorrect:

0 = Emergency (Too severe, only used for full system failures).

5 = Notice (Not critical, used for general system events).

7 = Debug (Not relevant for critical logs).

"Ensure that port 2009 is open between the Prism Central instances for the KMS cluster to communicate."This is explicitly stated in the "Firewall rules for Data-in-Transit Encryption" section for Prism Central.

Technical Context:

Port 2009 is used by ZooKeeper (the coordination service for the KMS cluster) in Scale-Out Prism Central deployments.

DiTE in Prism Central relies on a dedicated KMS cluster that synchronizes encryption keys across PC instances using this port.

Firewall blocks on port 2009 break KMS quorum, preventing key exchange and causing DiTE to fail.

Nutanix storage architecture uses distributed data paths, where each vDisk represents a distributed logical object. The performance best practices for databases state:

“Multiple vDisks provide parallelism across the Nutanix storage stack, increasing I/O queue depth and distributing operations across multiple CVMs.”

Also, the guidance for Linux-based database workloads specifies:

“Using LVM striping across multiple vDisks increases throughput by merging multiple I/O channels and enhancing parallel read/write operations.”

Thin vs thick provisioning is irrelevant for performance in a Nutanix environment, as both types deliver identical I/O performance due to the metadata-driven storage engine.

Thus, database performance benefits from additional vDisks and striping across them.

Data-in-Transit Encryption ensures that replication traffic is encrypted while being sent over the internet.

Option D (Enable Data-in-Transit Encryption) is correct:

This encryptsreplicated data between clusters, ensuring security againstman-in-the-middle attacks.

Option A (Self-encrypting drive) is incorrect:

This protects data at rest, not during transmission.

Option B (UEFI Secure Boot) is incorrect:

Secure Boot prevents unauthorized OS modifications, but doesnot encrypt network traffic.

Option C (Data-at-Rest Encryption) is incorrect:

This encryptsstored data but does not secure replication traffic.

VM templates in Nutanix are supported only when the VM’s disks reside on storage containers configured with Replication Factor 2 (RF2) or higher.

Option C (VM has disks on RF2 containers) is correct:

VM templates requirea minimum RF2 for fault tolerance.

RF1 containers do not meet Nutanix best practices for VM templates.

Option A is incorrect:

VMs protected by Protection Domains can be cloned, but this is different from creating a VM template.

Option B is incorrect:

Agent VMs (e.g., Witness VMs) or Prism Central cannot be used as VM templates.

Option D is incorrect:

Nutanix VM templates are natively supported on AHV, not ESXi.

Nutanix LCM architecture supports firmware, BIOS, BMC, disk controller, and drive updates only when the environment includes multiple nodes that can provide redundancy during the upgrade process. The LCM documentation specifies that firmware upgrades require node evacuation and rolling upgrade sequencing so that workloads remain available. A single-node cluster does not have node-level redundancy and therefore cannot support firmware upgrade operations that require putting a node into maintenance automatically. The guidance clearly states that “firmware upgrades are not supported for single-node clusters because the host cannot be safely placed into a maintenance mode during the LCM workflow.” LCM is supported for software inventory, but not for firmware activation on single-node clusters. This explains why no firmware updates appear in the LCM interface.

For workloads requiring new IP addresses and DNS server settings during DR recovery, using custom scripting within the Recovery Plan is the recommended and supported method.

From theNutanix Enterprise Cloud Administration (ECA)course materials:

“Recovery Plans support scripting within the Recovery Sequence to enable administrators to perform post-recovery customization tasks, such as updating IP addresses, configuring DNS, or applying application-specific settings.”

“This scripting capability provides a flexible, automated approach to ensure that VMs are correctly reconfigured to operate within the DR environment’s network and DNS settings.”

This avoids the need for manual reconfiguration post-recovery or adjusting settings in production prior to failover.

When creating a storage container in Nutanix, the administrator must configure the correctcapacity settings:

Option A (Prism Element with Advertised Capacity of 100 GiB) is correct:

Advertised Capacitydefineslogical limitsfor the container (i.e., how much space it reports as available).

Inline Compressioncan be enabled directly in Prism Element.

Option B (Create in Prism Element without Advertised Capacity)is incorrect:

Without specifyingAdvertised Capacity, the container may consume unlimited storage.

Option C (Create in Prism Central with Reserved Capacity)is incorrect:

Reserved Capacityapplies toQuality of Service (QoS) policies, not storage limits.

Option D (Create in Prism Central without capacity limits)is incorrect:

Prism Central can manage storage but does not directly enforceRF1 and compression policies.

Metro Availability in Nutanix requires that the primary and secondary storage containers be configured identicallyto ensuredata replication consistency.

Option C (The destination storage container is not empty) is correct:

Theremote storage container must be emptybefore Metro Availability can be enabled.

Existing data can cause conflictsand prevent it from appearing in the "Compatible Remote Sites" list.

Option D (Both storage containers must have the same name) is correct:

Metro Availability requires thatstorage containers have identical names across clusters.

If namesdo not match, thestorage container will not be listed as compatible.

Option A is incorrect: Metro Availability works regardless of hardware vendor differences.

Option B is incorrect:Compression does not affect compatibilitybut may impact performance.

Categories in Nutanix are used to group resources and require only a name and a value for definition.

Option A (A name and a value) is correct:

Categoriesrequire a name (e.g., "Production VMs")and a value (e.g., "Tier 1").

These are then applied to VMs, storage, and other resources forpolicy-based management.

Option B (Policy and Entity) is incorrect:

Policiesuse categories but are not required to define a category.

Option C (Service and Scope) is incorrect:

Categoriesdo not require servicesor a defined scope.

Option D (Catalog and Template) is incorrect:

These apply toself-service provisioning, not categories.

Scale-out Prism Central deployments consist of multiple nodes running the Prism Central service. Nutanix documentation emphasizes that:

“When deploying multi-node Prism Central, an FQDN backed by DNS can provide request distribution across all Prism Central nodes, enabling load balancing and increased concurrency.”

A Virtual IP in contrast only directs traffic to a single active Prism Central node. Internal behavior notes:

“A VIP is not active-active; it designates one node as primary for all inbound requests.”

“Using an FQDN with DNS round-robin or an external load balancer allows the cluster to distribute workload across all PC nodes.”

The FQDN allows:

distributing API/UI traffic across multiple Prism Central nodes

improving performance under heavy load

enabling parallel query handling

avoiding bottlenecks on the primary node

SSL certificates apply to either VIP or FQDN. Segmentation and resiliency are unrelated to FQDN usage.

Thus, the correct answer is Load Balancing.