Download Full Version NCP-MCI-6.10 Nutanix Exam

When configuring application-consistent snapshots in a Nutanix protection domain for applications such as SQL, Oracle, and Exchange, it is critical to group all related VMs in the same consistency group within the protection domain. This ensures that the snapshot captures a consistent state of the entire application stack.

From theNutanix Enterprise Cloud Administration (ECA)course materials:

“A consistency group ensures that snapshots across multiple VMs are taken at the same time, maintaining application consistency for distributed applications. This is especially important for multi-tiered applications like SQL, Oracle, and Exchange, where data integrity depends on coordinated snapshot creation.”

Additionally:

“For application-consistent snapshots, leverage guest tools or volume shadow copy services (VSS) in Windows to quiesce applications, and configure the consistency group to include all relevant VMs.”

By creating one consistency group for all VMs comprising an application, the administrator ensures that snapshots represent a consistent state across the application components.

Understanding the Exhibit & the Alert

The alert states:

"The cluster is using password-based SSH access for the CVM."

"Password-based remote login is enabled on the cluster."

"It is recommended to use key-based SSH access instead of password-based SSH access for better security."

This means that the nutanix user can log in to Controller VMs (CVMs) using a password, which is a security risk.

Corrective Action: Enabling Cluster Lockdown

✅(C) Enable Cluster Lockdown. (Correct Answer)

Cluster Lockdown Mode restricts password-based SSH access and forces key-based authentication.

This prevents users from logging into CVMs using passwords, enhancing cluster security.

To enable Cluster Lockdown:

Go to Prism Central or Prism Element.

Navigate to Settings → Security → Cluster Lockdown.

Enable Cluster Lockdown Mode.

Evaluating the Other Answer Choices

❌(A) Rename the nutanix user. (Incorrect)

The nutanix user is a built-in system account required for cluster operations.

Renaming the user will not prevent SSH access via password.

❌(B) Block port 22 on the CVM firewall. (Incorrect)

Blocking port 22 (SSH) will completely disable SSH access, including key-based authentication.

This may break cluster management and troubleshooting operations.

❌(D) Delete the nutanix user. (Incorrect)

The nutanix user is a critical system account required for cluster functionality.

Deleting the account will cause serious issues with cluster management.

Multicloud Infrastructure References & Best Practices

Nutanix Security Best Practices:

Always use key-based SSH authentication instead of password-based logins.

Enable Cluster Lockdown Mode to enforce security policies.

Regularly audit user access to ensure security compliance.

Cluster Lockdown Benefits:

Prevents unauthorized SSH access via passwords.

Enforces public key authentication, reducing brute-force attack risks.

Strengthens CVM security against potential exploits.

By default, Nutanix Prism Central retains the last 10 instances of a report if no retention policy is configured.

Option B (10) is correct:

Nutanixstores up to 10 reports, after which older reports areautomatically deleted.

Options A (5), C (15), and D (20) are incorrect:

Whileretention policies can be customized, thedefault setting is 10 reports.