NCP-CI-Azure Exam Dumps : Nutanix Certified Professional - Cloud Integration - Azure (NCP-CI-Azure v6.7)

Scenario Analysis:

A. Connectivity between sites already provides encryption: Using VTEP in this scenario is advantageous because VTEP does not inherently provide encryption. If encryption is already provided, VTEP can be effectively used without additional security concerns.

D. Multiple remote Availability Zones exist to add to the same VTEP-based extended Layer 2 subnet: VTEP is well-suited for scenarios where multiple remote Availability Zones need to be connected to the same extended Layer 2 subnet. This allows for efficient management and seamless connectivity across different zones.

Scenarios B and C:

B. Only one remote Availability Zone exists that needs the subnet extended: This scenario does not leverage the strengths of VTEP, as it is better suited for multiple zones.

C. Connectivity between sites already does not provide encryption: Using VTEP without existing encryption is not ideal as VTEP itself does not encrypt the traffic.

Conclusion: VTEP is advantageous when encryption is already in place and when multiple remote zones need to be connected to the same extended subnet.

References:

Nutanix NC2 Networking Guide

Azure Networking Documentation

Outbound Rule Necessity: For successful cluster deployment, certain outbound connections must be allowed to ensure proper download and configuration of resources.

Critical Destination: "Https://downloads.cloud.nutanix.com/*" is a critical endpoint from which the Nutanix software and updates are downloaded during the cluster deployment process.

Functionality: Ensuring an outbound rule for this destination allows the deployment to fetch necessary files and updates, enabling smooth cluster setup and operation.

Other Destinations:

Https://portal.nutanix.com/: Used for accessing the Nutanix portal, not directly related to deployment downloads.

Https://support.nutanix.com/: Used for support-related tasks, not for deployment-specific downloads.

: Related to development and API documentation, not necessary for initial deployment.

Conclusion: Outbound connectivity to "Https://downloads.cloud.nutanix.com/*" is essential for downloading deployment resources.

References:

Nutanix NC2 on Azure Network Configuration Guide

Azure Network Security Documentation

In the NC2 on Azure cluster scenario, the existing workloads were using floating IPs for inbound traffic before the addition of new Flow Gateways (FGW3 and FGW4). The NAT traffic path established initially will continue to direct traffic through the originally assigned Flow Gateways (FGW1 and FGW2). The existing workloads will not automatically utilize the new Flow Gateways (FGW3 and FGW4) without a reconfiguration or reboot, which reassigns the NAT paths.

References

Nutanix Flow Networking and Configuration Guide