A new subnet needs to be created within Flow Virtual Networking to accommodate a new type of workload in the company??s NC2 Azure instance.
Which type of network will satisfy this task?
Correct Answer:B
✑ Flow Virtual Networking: Nutanix Flow Virtual Networking allows for the creation of overlay networks to segment and manage network traffic.
✑ Network Types:
✑ Requirement: Creating a subnet for new workloads within Flow Virtual Networking suggests using an overlay network for logical separation and management.
✑ Conclusion: An overlay network within Flow Virtual Networking will satisfy the task of accommodating a new type of workload in the NC2 Azure instance.
References:
✑ Nutanix Flow Networking Guide
✑ Azure Virtual Network Documentation
An administrator manager a virtual desktop environment running on an NC2 cluster in Azure.
The desktop running on the cluster need to contact resources on-premises through the ExpressRoute that has been setup. The save on bandwidth from the on-premises environment to Azure, the administrator wants the desktops to access the internet through an Azure NAT Gateway.
Which co0nfigruation will best accomplish this task?
Correct Answer:B
✑ Default Route for Internet Traffic:By setting the default route of 0.0.0.0/0 for the Nutanix User VPC pointing to the external-NAT network, all internet-bound traffic from the desktops will be routed through the Azure NAT Gateway, conserving bandwidth on the ExpressRoute connection.
✑ On-Premises Route:Setting a specific route to the on-premises subnet for the Nutanix User VPC pointing to the external-No-NAT network ensures that traffic destined for on-premises resources bypasses the NAT Gateway and utilizes the ExpressRoute connection, optimizing the use of network paths.
References:
✑ Azure NAT Gateway Documentation
✑ Nutanix NC2 Networking Configuration Guide
Native Azure VMs exist in a subnet (10.20.80.0/20) in the Prism Central VNet that need access to the workload running on the Nutanix User.
What needs to be modified to allow access from the native Azure VMs to the workloads running in the Nutanix User VPC?
Correct Answer:D
To allow access from the native Azure VMs to the workloads running in the Nutanix User VPC, the administrator needs to:
✑ Adjust the Inbound Network Security Group (NSG) on the Flow Gateway VM's
Internal NIC.
✑ Specifically, allow traffic from the subnet range of the native Azure VMs (10.20.80.0/20) in the Inbound rules of the NSG associated with the Internal NIC of the Flow Gateway VM.
This configuration change permits the desired network traffic, ensuring that the native Azure VMs can communicate with the workloads in the Nutanix User VPC.References
✑ Azure Network Security Groups Overview
✑ Nutanix Networking and Security Best Practices
An administrator is deploying a new cluster on Azure and would like to ensure the data is encrypted. Due to cost constraints the deployment will leverage the native local key manager (LKM).
What is the minimal number of nodes needed to support the Nutanix native LKM?
Correct Answer:C
✑ Local Key Manager (LKM):The native local key manager in Nutanix requires a minimum number of nodes to function correctly and provide key management services.
✑ Minimum Node Requirement for LKM:To support the Nutanix native LKM, at least three nodes are needed. This configuration ensures that the key management service can achieve the necessary quorum and redundancy for secure operations.
References:
✑ Nutanix Data Encryption Documentation
✑ Nutanix Cluster Configuration Guide
An administrator is tasked with preparing the company's Azure subscription for use with NCZ.
Which two Azure Resource Providers need to be registered? (Choose two.)
Correct Answer:BC
✑ Azure Resource Providers: To prepare an Azure subscription for NC2, specific resource providers must be registered to enable necessary services and resources.
✑ Required Providers:
✑ Other Providers:
✑ Conclusion: Registering both "Microsoft.Network" and "Microsoft.Nutanix" ensures that all necessary network and Nutanix-specific resources are available for NC2 deployment.
References:
✑ Azure Resource Providers Documentation
✑ Nutanix on Azure Setup Guide
Which address must Azure Directory Service be able to resolve when deploying a new NC2 cluster?
Correct Answer:C
✑ Azure Directory Service Role: Azure Directory Service must be able to resolve specific Nutanix URLs to ensure proper communication and functionality during the deployment of an NC2 cluster.
✑ Critical Endpoint: The address "Gateway-external-api.cloud.nutanix.com" is critical for establishing external API communications required for the deployment and management of the NC2 cluster.
✑ DNS Resolution: Proper DNS resolution of this address ensures that the Azure Directory Service can interact with Nutanix services and APIs necessary for cluster operations.
✑ Verification Process:
✑ Importance: Without resolving this address, the deployment process might face connectivity issues, leading to potential deployment failures.
References:
✑ Nutanix NC2 on Azure Setup Guide
✑ Azure Active Directory Integration