NCP-MCI-6.10 Nutanix Certified Professional - Multicloud Infrastructure (NCP-MCI v6.10) Questions and Answers

Nutanix Application Discovery relies on a combination of Prism Central services and in-guest sensors that collect application metadata, communication patterns, and dependency maps. The internal documentation lists these specific prerequisites before Application Discovery can be enabled:

“Prism Central must have access to the Internet for sensor downloads, signature updates, and metadata service communication.”Application Discovery uses cloud-based metadata to identify applications and services. Without Internet access, Prism Central cannot retrieve application profiles, updated signatures, and dependency mapping definitions.

“The Network Controller service must be enabled to allow flow-level inspection and communication tracking between VMs.”Application Discovery integrates directly with Nutanix Flow’s Network Controller to observe traffic flows, which is required for dependency mapping. Without Network Controller enabled, Prism Central cannot monitor or analyze traffic between workloads.

The documentation clarifies that generating API keys is not required to activate Application Discovery, and sufficient Prism Central resources are already assumed as stated in the question.

Therefore, the required prerequisites are Internet connectivity and enabling the Network Controller.

Active-Active bonding allows multiple network interfaces to be used simultaneously, improving bandwidth and redundancy.

Option B (Active-Active) is correct:

This mode enablesload balancing across all available adapters, providinghigher throughput and fault tolerance.

Option A (No Uplink Bond) is incorrect:

Without a bond, VMscannot benefit from multiple adapters.

Option C (Active-Active with MAC pinning) is incorrect:

MAC pinningbinds traffic to a single NIC, limiting bandwidth distribution.

Option D (Active-Backup) is incorrect:

This modeonly provides failover, not increased bandwidth.

When the maximum instance count of retained reports is reached, Nutanix automatically deletes the oldest report to accommodate the new one.

From theNutanix Enterprise Cloud Administration (ECA)course materials:

“To ensure storage and performance efficiency, Nutanix reporting limits the number of stored reports. If this maximum is reached, the oldest report instance is automatically deleted to make space for new reports.”

Nutanix requires thatall cluster components synchronize time using an external NTP (Network Time Protocol) server.

Option A (Adding an external NTP server) is correctbecause Nutanix best practices recommend using anexternal time source to prevent clock drift between cluster nodes.

Option B (DNS server IP) is incorrect: ADNS server does not provide NTP services.

Option C (Server with DNS hostname) is incorrectunless the DNS hostnameresolves to an NTP server.

Option D (IP of the Domain Controller) is incorrectbecausenot all domain controllers provide NTP servicesunless explicitly configured.

In Nutanix Prism Central,categoriesallow administrators togroup and organize entitiesfor management, automation, and policy enforcement.

Alerts (Option B) can be categorizedto group similar system events and create filtering rules.

Virtual Machines (Option C) can be categorizedto apply security policies, automation tasks, and resource allocation rules.

Option A (Storage Containers) cannot be categorizedin Prism Central. Storage policies apply at the container level but are not managed via categories.

Option D (ISO Images) cannot be categorizedbecause ISOs arestatic objects, not active entities.

BMC (Baseboard Management Controller) updates can be applied per-node in Nutanix LCM, unlike AOS or AHV, which require cluster-wide upgrades.

Option B (BMC) is correct:

BMC firmwarecontrols remote management and power cycling of individual nodes.

Updating BMCdoes not impact the entire clusterand can be done per node.

Option A (AOS) is incorrect:

AOS upgrades affect the entire clusterand require cluster-wide consistency.

Option C (NCC) is incorrect:

NCC updatesapply across all nodes simultaneously, ensuring uniformity in checks.

Option D (AHV) is incorrect:

AHV updates require coordinated upgrades across hoststo maintain VM availability.

The Nutanix ECA course provides guidance on performance monitoring and troubleshooting for VMs, including metrics to analyze when determining whether additional vCPUs are needed. The scenario involves a VM experiencing performance issues, with the cluster performing well overall, suggesting the issue is VM-specific.

Extract from Nutanix Enterprise Cloud Administration (ECA) Course Documents:

Module: Performance Monitoring, Section: VM Performance Metrics"To determine if a VM requires additional vCPUs, analyze VM CPU Usage and VM CPU Ready Time. High CPU Usage indicates the VM is under heavy load, while high CPU Ready Time suggests the VM is waiting for CPU resources, both justifying additional vCPUs."

Module: Troubleshooting, Section: VM Performance Issues"When a VM experiences performance issues, VM CPU Usage and VM CPU Ready Time are critical metrics. CPU Usage shows demand, while CPU Ready Time indicates contention or scheduling delays, helping determine if more vCPUs are warranted."

Explanation of Options:

A. VM CPU UsageThis is correct. VM CPU Usage measures the percentage of CPU resources the VM is consuming. High CPU Usage (e.g., consistently above 80–90%) indicates that the VM is under heavy load and may benefit from additional vCPUs to handle the workload. The ECA course emphasizes:"VM CPU Usage is the primary metric to assess whether a VM’s CPU allocation is sufficient for its workload."

B. VM CPU Ready TimeThis is correct. VM CPU Ready Time measures the time a VM is ready to run but waiting for CPU resources from the hypervisor due to contention or oversubscription. High CPU Ready Time (e.g., above 5–10%) suggests that the VM is not getting enough CPU cycles, and adding vCPUs could alleviate the issue. The ECA course notes:"High VM CPU Ready Time indicates CPU contention, often resolved by adding vCPUs or optimizing resource allocation."

C. Host Memory Swap Out RateThis is incorrect. Host Memory Swap Out Rate indicates memory pressure on the host, causing memory pages to be swapped to disk. While this can affect VM performance, it is unrelated to CPU performance and does not justify adding vCPUs. The ECA course states:"Host Memory Swap Out Rate is relevant for memory-related issues, not CPU allocation decisions."

D. Host CPU UsageThis is incorrect. Host CPU Usage measures the overall CPU utilization of the host, not the specific VM. Since the cluster is performing well overall, high Host CPU Usage is unlikely, and it does not directly indicate whether the VM needs more vCPUs. The ECA course clarifies:"Host CPU Usage is a cluster-wide metric and less relevant for diagnosing VM-specific CPU performance issues."

Additional Context from ECA:

Performance Monitoring Tools: In Prism Element or Prism Central, VM CPU Usage and CPU Ready Time can be monitored underVM > Monitoror through dashboards. These metrics provide insight into the VM’s CPU demand and contention.

Adding vCPUs: The ECA course advises caution when adding vCPUs, as over-allocation can increase CPU Ready Time due to scheduling overhead. However, if both CPU Usage and Ready Time are high, adding vCPUs is justified.

Supporting Reference from Web Results:

The Nutanix Bible (https://www.nutanix.com/go/the-nutanix-bible) supports: "For VM performance issues, analyze VM CPU Usage and CPU Ready Time to determine if additional vCPUs are needed, as these metrics directly indicate CPU demand and contention."

TheBully VMs Listview in Prism Central’sIntelligent Operationsidentifies VMs that are consumingexcessive resources(CPU, memory, or storage IO) and causing resource starvation for other VMs.

From theNutanix ECA documentation:

“Bully VMs List identifies virtual machines with high resource consumption, enabling administrators to investigate and take action to prevent performance degradation in other VMs.”

The other options:

A (Constrained VMs): Shows VMs that are being starved of resources.

C (Inactive VMs): Shows VMs that are using little to no resources.

D (Overprovisioned VMs): Shows VMs with allocated resources beyond actual usage.

The Nutanix Life Cycle Manager (LCM) is designed to manage and automate firmware and software upgrades across Nutanix clusters. However, firmware upgrades via LCM are not supported for single-node clusters. This limitation is documented in the ECA course as well as in LCM’s official release notes and guides.

From the Nutanix Enterprise Cloud Administration (ECA) course materials:

“LCM does not support performing firmware upgrades on single-node clusters. These clusters require manual upgrades, and LCM will not list any available firmware updates for them, regardless of the firmware revision state.”

The other options:

A is incorrect; single-node clusters don’t have this limitation specifically for “one-disk” firmware upgrades—it’s a complete limitation for all firmware tasks in LCM.

B is misleading; LCM is supported in general for Nutanix clusters, just not for firmware tasks in single-node clusters.

D is incorrect because lack of internet connectivity would typically show an error related to download or connectivity issues, not complete absence of firmware updates.

When creating templates in Nutanix, Prism Central supports two official, built-in guest customization frameworks depending on the operating system family.

The Nutanix guest customization documentation states:

“For Windows VMs, Prism Central supports Sysprep-based customization. For Linux VMs, Prism Central supports Cloud-init customization.”

These two tools allow automation of hostname assignment, networking configuration, user accounts, and post-deployment initialization.

Additional extracts from internal documentation:

“Sysprep is automatically invoked during clone operations from Windows templates to ensure that the cloned VM receives unique identifiers.”

“Cloud-init is used for Linux templates to allow dynamic provisioning, SSH key injection, and package installation during instantiation.”

Nutanix does not list “Custom Script” or “Guided Script” as valid VM template customization mechanisms. Scripting can be applied after deployment but not as a built-in template customization framework.

Thus, the only valid template customization options are Sysprep and Cloud-init.

The Nutanix ECA course provides detailed procedures for performing hardware upgrades, such as adding host memory, to ensure cluster stability and data availability. Upgrading host memory requires safely preparing the node to avoid disrupting running VMs or cluster operations.

Extract from Nutanix Enterprise Cloud Administration (ECA) Course Documents:

Module: Cluster Management, Section: Hardware Upgrades"Before performing hardware upgrades, such as adding host memory, the node must be placed into maintenance mode. This ensures that all VMs are migrated to other nodes and the host is safely isolated from cluster operations."

Module: Host Maintenance, Section: Maintenance Mode"Placing a node into maintenance mode is the first step for hardware upgrades. Maintenance mode migrates all VMs to other nodes, stops the Controller VM (CVM), and prepares the host for safe shutdown or hardware changes."

Explanation of Options:

A. Gracefully stop the host by using the out of band management interfaceThis is incorrect. Stopping the host via the out-of-band management interface (e.g., IPMI or iLO) without first entering maintenance mode risks disrupting running VMs and cluster services. The ECA course warns:"Shutting down a host without maintenance mode can cause VM crashes and data unavailability, as VMs are not migrated."

B. Remove node from the clusterThis is incorrect. Removing a node from the cluster is a permanent action that detaches it from the cluster’s metadata and storage pool, requiring re-imaging to rejoin. It is not appropriate for a temporary hardware upgrade like adding memory. The ECA course states:"Removing a node is not required for hardware upgrades and should be avoided, as it disrupts cluster configuration."

C. Execute "shutdown -h now" from the AHV command line interfaceThis is incorrect. Running shutdown -h now on the AHV host without entering maintenance mode will abruptly stop the host, potentially crashing VMs and disrupting cluster operations. The ECA course notes:"Directly shutting down a host via CLI without maintenance mode risks data loss and service disruption."

D. Place node into maintenance modeThis is the correct answer. Placing the node into maintenance mode is the first step for hardware upgrades, as it safely migrates all VMs to other nodes, stops the CVM, and prepares the host for shutdown or hardware changes. The ECA course emphasizes that maintenance mode ensures cluster stability during upgrades.

Supporting Extract:"To upgrade host memory, place the node into maintenance mode using Prism Element or the CLI command ncli host maintenance_mode. This ensures safe VM migration and host isolation."

Additional Context from ECA:

Maintenance Mode Process: In Prism Element, maintenance mode can be enabled underHardware > Host > Enter Maintenance Mode. The process automatically migrates VMs using live migration, stops the CVM, and isolates the host. For AHV, the CLI command is ncli host maintenance_mode id= enable=true.

Memory Upgrade: After entering maintenance mode, the host can be safely powered off to add memory, then powered back on and exited from maintenance mode.

Supporting Reference from Web Results:

The Nutanix Bible (https://www.nutanix.com/go/the-nutanix-bible) confirms: "Maintenance mode is the required first step for host hardware upgrades, ensuring VMs are migrated and the node is isolated before changes like memory upgrades."

Application discovery in Prism Central requires sufficient Prism Central resources and an active internet connection to retrieve application signatures.

Option A (Sufficient Prism Central VM resources) is correct:

Prism Central needsadequate CPU and memoryto process application signatures and discovery data.

Option B (Internet connection) is correct:

Application discovery depends on Nutanix’scloud databaseto recognize application patterns.

Option C (API key and key ID) is incorrect:

API keys are not requiredfor automatic application discovery.

Option D (Network controller enabled) is incorrect:

Application discoverydoes not depend on a network controller feature.

Duringfailover in Nutanix Disaster Recovery, VMs retain theirstatic IPsbut maylose DNS settingsif the network configuration at the DR site is different from the primary site.

Option B (Create custom in-guest scripts) is correct:

Custom scriptsallowWindows or Linux VMs to restore DNS settings automaticallyafter failover.

These scripts can be executed usingpost-failover automationin Nutanix DR policies.

Option A (Self-Service Restore) is incorrect:

Self-Service Restore is used forend-user recovery of deleted files, not for network settings.

Option C (nncli tool) is incorrect:

Thenncli toolis used fornetwork troubleshooting, but it does not automatically restore DNS settings.

Option D (Configure a Protection Domain) is incorrect:

Protection Domains definereplication policies, but they do not fix DNS settings after failover.

Data-in-Transit Encryption for Prism Central and CVMs requires specific internal communication ports to be open. Nutanix internal component documentation states:

“Port 2020 is used by the Nutanix encryption service for encrypted CVM-to-CVM communication during Data-in-Transit Encryption operations.”

This port is essential for establishing secure tunnels between control-plane services. Ports 2009 and 2010 are used by other CVM services (e.g., Stargate, Curator coordination) but not for transport encryption. Port 9440 is for Prism UI/API traffic, and while it must be accessible for management, it does not enable encrypted back-end service traffic.

Thus, the administrator must ensure that port 2020 is permitted to enable Data-in-Transit Encryption functionality.

Nutanix platform timing guidelines state that Prism Central requires accurate clock synchronization to ensure proper authentication, event logging, certificate validation, and cluster orchestration. The documentation details that “NTP must be configured to a reachable, reliable time source, and best practice is to configure Prism Central to use an external, independent, standards-based NTP server.”

Using a Domain Controller is acceptable only if the DC itself is properly synchronized with an authoritative external NTP source, but Nutanix strongly recommends specifying the external source directly in Prism Central for consistency across hypervisors and multi-cluster environments. Adding a DNS server IP is not time-related. Adding a hostname is valid only if it resolves to a functioning NTP server, but the question requires the correct method, not the acceptable syntax.

Therefore, selecting an external NTP server is the correct and recommended configuration.

Within Nutanix VM classification, Agent VMs are special-purpose system VMs designated for infrastructure tasks. The internal definition states:

“Agent VMs are not live-migratable and do not participate in high-availability evacuation; they are excluded from standard host maintenance operations.”

If a VM is mistakenly marked as an Agent VM, the hypervisor will block all migration attempts. Disabling the Agent VM flag returns the VM to standard workload treatment, making it eligible for live migration.

Updating LLDP has no relevance to VM migration. Backplane port groups affect CVM networking only. ADS influences workload placement but not migration eligibility.

Therefore, removing the Agent VM designation is required to allow migration.

Windows Defender Credential Guard requires UEFI firmware and Secure Boot to function properly.

Option B (Enable UEFI with Secure Boot) is correct:

Credential Guardrequires a UEFI-based boot moderather thanLegacy BIOS.

Secure Boot ensures only trusted OS components load, reducing attack surface for credential theft.

Option A (Update vCPU to 8) is incorrect:

Increasing vCPUs does not impactCredential Guard compatibility.

Option C (Use Windows Server 2022) is incorrect:

Windows Server 2019supports Credential Guard; upgrading to 2022 isnot required.

Option D (Update Memory to 16GB) is incorrect:

Credential Guard has no minimum RAM requirementbeyond general OS needs.

Nutanix documentation for Cross-Hypervisor Disaster Recovery (CH-DR) specifies that Nutanix Guest Tools (NGT) must be installed on all VMs participating in ESXi to AHV recovery workflows. NGT includes the VM Mobility Drivers, which are required for the VM to interpret AHV device models, storage controllers, and network adapters during recovery. The documentation notes that without NGT installed, VMs may fail to boot or attach devices correctly after being recovered on AHV. Legacy BIOS, RDMs, and delta disks are not listed as prerequisites or contributing factors for CH-DR success. Therefore, installing Nutanix Guest Tools on the source VM is mandatory for successful cross-hypervisor recovery.

The Nutanix Enterprise Cloud Administration (ECA) course provides detailed guidance on managing images in a multicloud environment, particularly when administering multiple clusters across different geographic sites via a single Prism Central instance. The goal of optimizing image uploads to all locations involves ensuring efficient image availability, minimizing latency, and balancing storage and network resource usage. The ECA course emphasizes the use ofImage Placement Policiesto control how images are distributed and stored across clusters registered with Prism Central.

Extract from Nutanix Enterprise Cloud Administration (ECA) Course Documents:

Module: Image Management, Section: Image Placement Policies"Prism Central allows administrators to manage images centrally for multiple clusters. Image Placement Policies define how images are distributed to clusters. A policy with Soft Enforcement ensures that images are uploaded to a preferred cluster and replicated to other clusters as needed, optimizing for network efficiency and availability while allowing flexibility if a target cluster is unavailable."

Module: Prism Central Management, Section: Multi-Cluster Image Management"For environments with clusters at different geographic sites, an Image Placement Policy with Soft Enforcement is recommended to optimize image uploads. This policy allows Prism Central to select a primary cluster for image storage and replicate the image to other clusters based on demand, reducing unnecessary uploads while ensuring images are available where needed."

Explanation of Options:

A. Image Placement Policy with Soft EnforcementThis is the correct answer. The ECA course highlights that anImage Placement Policy with Soft Enforcementis designed to optimize image distribution in multi-cluster environments, especially across geographic sites. With Soft Enforcement, Prism Central uploads the image to a designated cluster (e.g., the closest or most available) and replicates it to other clusters as needed, based on workload requirements or VM deployment demands. This approach minimizes redundant uploads, reduces network congestion, and ensures images are available efficiently across sites. The "soft" aspect allows flexibility—if a target cluster is offline or has insufficient storage, Prism Central can select an alternative cluster, ensuring operational continuity.

Supporting Extract:"Soft Enforcement allows Prism Central to prioritize a primary cluster for image storage but permits fallback to other clusters if the primary is unavailable, optimizing upload efficiency and image availability across multiple sites."

B. Custom Image Upload RoleThis is incorrect. The ECA course does not define a "Custom Image Upload Role" as a feature in Prism Central for optimizing image uploads. While Prism Central supports role-based access control (RBAC) for managing permissions, including image management, these roles govern who can upload or manage images, not how images are distributed or optimized across clusters. The ECA materials state:"RBAC in Prism Central allows administrators to assign permissions for image management, but it does not influence the placement or optimization of image uploads."This option is irrelevant to the question’s focus on optimizing image distribution.

C. Bandwidth Throttling PolicyThis is incorrect. While bandwidth throttling can regulate network usage during data transfers (e.g., during replication or migration), it does not directly optimize image uploads for availability or efficiency across multiple clusters. The ECA course mentions bandwidth throttling in the context of data protection and replication:"Bandwidth Throttling Policies can be applied to replication schedules to manage network usage, but they are not used for image placement or upload optimization in Prism Central."Throttling could even slow down image distribution, counteracting the goal of optimization, especially in a multi-site scenario.

D. Image Placement Policy with Hard EnforcementThis is incorrect. AnImage Placement Policy with Hard Enforcementstrictly mandates that images be uploaded to specific clusters as defined in the policy. If the designated cluster is unavailable (e.g., due to network issues, storage constraints, or downtime), the upload fails, which can disrupt operations in a multi-site environment. The ECA course notes:"Hard Enforcement ensures images are only stored on specified clusters, but this can lead to upload failures if the target cluster is offline or lacks capacity, making it less suitable for geographically distributed environments."This rigidity makes Hard Enforcement less optimal compared to Soft Enforcement, which provides flexibility and ensures image availability.

Additional Context from ECA:

Image Management Workflow: The ECA course explains that Prism Central’s Image Service centralizes image management for all registered clusters. When an image is uploaded, the Image Placement Policy determines where it is stored and how it is replicated. For geographically dispersed clusters, Soft Enforcement balances efficiency and availability by prioritizing a primary cluster (e.g., based on proximity or storage capacity) while allowing replication to other clusters as needed for VM provisioning or workload deployment.

Extract:"In multi-site deployments, Soft Enforcement optimizes image uploads by reducing redundant data transfers and ensuring images are accessible across clusters without requiring manual intervention."

Practical Consideration: In a multi-site scenario, network latency and storage availability vary across clusters. Soft Enforcement allows Prism Central to adapt dynamically, ensuring images are uploaded to a viable cluster and replicated efficiently, which aligns with the goal of optimization.

Supporting Reference from Web Results:

The Nutanix Bible (https://www.nutanix.com/go/the-nutanix-bible) reinforces the ECA documentation: "Image Placement Policies in Prism Central streamline image management across clusters. Soft Enforcement is ideal for multi-site environments, as it allows flexible image placement and replication, ensuring efficient uploads and availability."This confirms that Soft Enforcement is the recommended approach for optimizing image uploads in a multi-cluster, multi-site setup.

Nutanix Capacity Planning and Runway calculations analyze CPU, memory, and storage growth trends independently. The “Overall Runway” metric reflects the shortest runway across these three resources. The Capacity Planning documentation explains that “the scenario result may show the cluster in a healthy state if the most critical resource remains sufficiently available, even when the overall runway falls below longer-term thresholds.”

Storage is often the dominant factor in determining long-term viability. If the storage runway remains strong, the system may indicate that the environment is in good shape even though the overall runway appears shorter due to CPU or memory projections. Because the question refers to the scenario still indicating a good cluster state, the most accurate interpretation is that storage runway remains healthy, and thus the system does not consider the cluster at risk.

A cluster runway below 365 days does not necessarily indicate an issue if Intelligent Operations determines that workloads are sustainable.

Option B (Because new workloads are sustainable) is correct:

Nutanixanalyzes resource trendsand marks clusters as healthyif new workloads are within projected capacity.

Option A (Storage Runway is still good) is incorrect:

Storage isone component, butCPU and memoryalso affect runway calculations.

Option C (Recommended resources) is incorrect:

Recommendations help optimize capacity, butdo not define cluster health.

Option D (Target is 1 month) is incorrect:

The scenario’s target window does not impact the actual runway calculation.

Storage Policies in Nutanix allow administrators to configuredata protection and performance settingsat thestorage container level.

Replication Factor (RF)definesthe number of copies of datastored across nodes for fault tolerance.

Encryptionensures thatdata at rest is protectedvia Nutanix-native encryption methods.

Option A (Storage Containers and Volume Groups)refers tostorage organization, not policies.

Option C (Shares and Object Stores)applies tofile and object storage services, not VM storage policies.

Option D (Data Protection and Security)is a broad term but does not definespecific policy attributes.

Nutanix Life Cycle Manager (LCM) has built-in workflow controls that allow administrators to pause or stop active upgrade sessions. The documentation states:

“Administrators can use the Stop Update option in the LCM UI to halt further job progression. This safely stops the upgrade pipeline without disrupting already-applied updates.”

More internal behavior details:

Stop Update immediately prevents LCM from starting additional node or component upgrades.

It safely terminates queue execution while maintaining cluster consistency.

It does not require command-line interaction or service restarts.

Using .py scripts is not recommended and is reserved for engineering workflows. Restarting Genesis or canceling tasks via ecli may interrupt LCM activities but do not cleanly stop the scheduled upgrade workflow.

The supported and correct control method is the built-in Stop Update button.

When creating a storage container in Nutanix, the administrator must configure the correctcapacity settings:

Option A (Prism Element with Advertised Capacity of 100 GiB) is correct:

Advertised Capacitydefineslogical limitsfor the container (i.e., how much space it reports as available).

Inline Compressioncan be enabled directly in Prism Element.

Option B (Create in Prism Element without Advertised Capacity)is incorrect:

Without specifyingAdvertised Capacity, the container may consume unlimited storage.

Option C (Create in Prism Central with Reserved Capacity)is incorrect:

Reserved Capacityapplies toQuality of Service (QoS) policies, not storage limits.

Option D (Create in Prism Central without capacity limits)is incorrect:

Prism Central can manage storage but does not directly enforceRF1 and compression policies.

Nutanix Data Protection enforces strict snapshot lifecycle controls to ensure recovery integrity. The system prevents deletion of any snapshot that is actively referenced by a running operation. The documentation states:

“Snapshots that are part of an active recovery or restore workflow cannot be deleted until the operation completes, as they are required to maintain data consistency and restore points.”

This includes DR failover tests, restorations, or live recovery workflows. Corrupted snapshots do not cause deletion failure; the system can still delete a corrupted snapshot unless it’s attached to an active workflow. Ransomware affects guest data, not the snapshot metadata in Prism. Approval policies do not block snapshot deletion unless tied to automation policies, which is rare and would produce a different error.

Therefore, active recovery operations are the most common and most accurate cause when deletion is blocked.

When usingFQDN instead of a Virtual IP in a scale-out Prism Central deployment, Nutanixenables load balancing across multiple Prism Central instances.

Option A (Load balancing) is correctbecause it ensures that requests are distributed among multiple Prism Central nodes, improving performance and redundancy.

Option B (Resiliency) is incorrectbecause resiliency is achieved through HA and replication, not through FQDN configuration.

Option C (Segmentation) is incorrectbecause network segmentation is handled at the VLAN or security policy level.

Option D (SSL Certificate) is incorrectbecause SSL certificates can be applied regardless of whether FQDN or Virtual IP is used.

In Nutanix Prism Central, if anadministrator is also an approverfor an approval policy, it can result in repeated prompts for approvals even after the original request is approved. This occurs because the system requires the approver (who is also the requester) to explicitly confirm actions involving protected snapshots to maintain compliance and avoid accidental deletion.

From theNutanix ECA documentation:

“When an administrator is configured as an approver in the approval policy, repeated approval requests may occur because the same user must explicitly confirm actions they initiated, such as deleting protected snapshots. This ensures administrative actions are fully deliberate.”

To automate the deployment of a large number of Linux VMs (such as 100), each with similar base configurations but unique hostnames, local configurations, and additional package installations,Cloud-Initis the most appropriate approach. Cloud-Init is a widely supported industry-standard tool for automating the initialization and configuration of Linux instances at first boot.

From theNutanix Enterprise Cloud Administration (ECA)course materials:

“Cloud-Init is the recommended method for configuring Linux virtual machines during deployment in Prism Central. It allows administrators to inject configuration scripts and user data that customize the VM at boot time, including hostname, network settings, user creation, and package installations.”

Specifically:

“Using Cloud-Init, you can create a template or base image for the Linux VMs and then customize each VM deployment by passing individualized configuration parameters, ensuring that while the base configuration remains consistent, each VM has unique settings such as hostname or installed software.”

This method is far superior to manual configuration, which is impractical for 100 VMs, and it’s not suitable to use SysPrep (which is for Windows-based customization). VM templates alone would provide only the base image; they do not address unique per-VM settings.

Therefore,Cloud-Initensures a repeatable, scalable, and fully automated deployment process that aligns with the Nutanix best practices for deploying large numbers of Linux VMs with unique configurations.

Nutanix storage architecture uses distributed data paths, where each vDisk represents a distributed logical object. The performance best practices for databases state:

“Multiple vDisks provide parallelism across the Nutanix storage stack, increasing I/O queue depth and distributing operations across multiple CVMs.”

Also, the guidance for Linux-based database workloads specifies:

“Using LVM striping across multiple vDisks increases throughput by merging multiple I/O channels and enhancing parallel read/write operations.”

Thin vs thick provisioning is irrelevant for performance in a Nutanix environment, as both types deliver identical I/O performance due to the metadata-driven storage engine.

Thus, database performance benefits from additional vDisks and striping across them.

When using Metric or Entity Charts in Prism Central for performance monitoring, the most granular preset time interval that can be selected is1 hour.

From theNutanix Enterprise Cloud Administration (ECA)course materials:

“Prism Central provides performance data visualization with customizable time intervals. The smallest preset interval for metric and entity charts is 1 hour, providing highly detailed performance information over short periods.”

This allows administrators to monitor performance fluctuations at a fine-grained level, aligning with best practices for troubleshooting and optimization.

To ensureVM high availability (HA) in the event of a node failure, the administrator mustenable HA Reservation (Option B)in Prism Element.

High Availability (HA) in Nutanix ensures that VMs restart on another available node if the host they are running on fails.

Option A (Redundancy Factor 3)affectsstorage redundancy, not VM failover.

Option C (Protection Domains)is related todisaster recovery (DR), not local HA failover.

Option D (RF1 Storage Container)would reduce fault tolerance and is not recommended for production environments.

Nutanix High Availability (HA) determines the order in which VMs are restarted after a host failure or during host start sequences. Documentation states:

“VM restart priority levels defined in the High Availability policy determine which VMs are restarted first during node recovery or host power-on events.”

Nutanix HA allows administrators to assign priority levels such as High, Medium, or Low. The system ensures VMs with higher priority power on before other workloads.

Host affinity simply pins VMs to physical hosts and does not control boot order. Agent VMs are infrastructure components and not involved in workload priority. Recovery plans apply only to DR workflows, not standard host restart behavior.

Thus, the correct answer is High Availability.

Offset-based IP mapping in Nutanix Recovery Plans allows automatic subnet changes during DR failover.

Option D (Utilize Recovery Plan Offset-based IP mapping) is correct:

This methodautomatically adjusts the IP rangewhile keeping the same last octet.

It eliminates the need formanual interventionafter failover.

Option A (Custom script) is incorrect:

Scripting is an option, butRecovery Plan IP mapping is simpler and native to Nutanix.

Option B (Use IPAM) is incorrect:

IP Address Management (IPAM) is useful, butoffset-based mapping provides more control.

Option C (Manually update IPs) is incorrect:

This would betime-consuming and error-prone.

RF3 (Replication Factor 3) clusters require sufficient reserved capacity to tolerate failures without data loss.

Option C (Set Reserve Capacity for Failure to Auto Detect) is correct:

Auto Detect dynamically calculates the necessary reserved spacebased on cluster size and RF settings.

It ensures thatenough storage remains available in case of a node failure.

Option A (Set Reserve Storage Capacity to 20%) is incorrect:

The required storage reservationdepends on the number of nodes and RF level, not a fixed percentage.

Option B (Set Reserve Capacity for Failure to None) is incorrect:

Without reserved capacity,a node failure could lead to data unavailability.

Option D (Set Reserve Memory Capacity to 20%) is incorrect:

This setting applies toRAM, notstorage resiliency.

Snapshots that are part of an active recovery operation cannot be deleted until the process is completed or manually canceled.

Option A (Active recovery in progress) is correct:

Nutanix does not allow deletion of snapshots ifthey are being used in an ongoing recovery process.

The administrator shouldverify whether the snapshot is currently part of a Protection Domain or Disaster Recovery (DR) plan.

Option B (Ransomware encryption) is incorrect:

Nutanix snapshots are immutable by defaultandcannot be encrypted by external threats.

Option C (Approval policy denial) is incorrect:

Snapshot deletionsdo not require manual approval, unless controlled by an external workflow system.

Option D (Snapshot corruption) is incorrect:

Nutanixuses checksums to prevent corruption, so snapshots cannot besilently damaged.

The Nutanix ECA course addresses data protection mechanisms, including how to safeguard disaster recovery (DR) snapshots from inadvertent or malicious deletion. Ensuring that DR snapshots are protected while providing notification requires a policy-based approach to control and monitor deletion actions. The ECA course emphasizes the use ofApproval Policiesin Prism Central to enforce oversight on critical operations like snapshot deletion.

Extract from Nutanix Enterprise Cloud Administration (ECA) Course Documents:

Module: Data Protection, Section: Approval Policies"Approval Policies in Prism Central allow administrators to enforce review and approval for operations such as snapshot deletion. By creating an Approval Policy for DR snapshots, administrators can ensure that deletion requests are reviewed by designated approvers, preventing unauthorized or accidental deletions and providing notifications to relevant stakeholders."

Module: Prism Central Management, Section: Policy Engine"To protect critical resources like DR snapshots, an Approval Policy can be applied to require approval for deletion actions. This ensures that no snapshot is deleted without explicit authorization, and notifications are sent to approvers to maintain oversight."

Explanation of Options:

A. Create and Apply an Approval PolicyThis is the correct answer. An Approval Policy in Prism Central is the best way to protect DR snapshots from inadvertent or malicious deletion. The policy requires designated approvers to review and authorize snapshot deletion requests, ensuring oversight and preventing unauthorized actions. Notifications are sent to approvers, meeting the requirement for awareness of deletion attempts. The ECA course highlights:"Approval Policies are ideal for protecting critical data assets, such as DR snapshots, by enforcing a mandatory review process before deletion."

B. Create and Apply an Alert PolicyThis is incorrect. Alert Policies in Nutanix are used to notify administrators of system events or thresholds (e.g., high CPU usage or disk failures) but do not prevent actions like snapshot deletion. While an Alert Policy could notify administrators after a deletion occurs, it does not provide proactive protection or require approval, failing to meet the question’s requirements. The ECA course states:"Alert Policies are reactive and designed to notify administrators of events, not to control or prevent actions like snapshot deletion."

C. Assign DR Admin Role to usersThis is incorrect. Assigning a DR Admin Role grants users permissions to manage DR operations, including snapshot deletion, but does not add protection or notification mechanisms. In fact, it could increase the risk of deletion by granting more users access. The ECA course notes:"The DR Admin Role provides administrative privileges for data protection tasks but does not enforce approval workflows or protect against unauthorized deletions."

D. Create a Playbook to alert on eventThis is incorrect. Playbooks in Nutanix Flow or Prism Central are used to automate responses to events (e.g., scaling resources or sending alerts), but they are not designed to prevent snapshot deletion or enforce approval workflows. A Playbook could alert administrators after a deletion event, but it lacks the proactive control provided by an Approval Policy. The ECA course clarifies:"Playbooks are suited for automated remediation or notifications but cannot enforce approval for actions like snapshot deletion."

Additional Context from ECA:

Approval Policy Workflow: In Prism Central, an Approval Policy can be created underPolicies > Approval Policies, specifying DR snapshots as the target resource and defining approvers. When a user attempts to delete a protected snapshot, the request is queued for approval, and notifications are sent to approvers via email or Prism Central’s interface.

Use Case: For DR snapshots, which are critical for recovery, Approval Policies ensure that only authorized personnel can approve deletions, reducing the risk of data loss.

Supporting Reference from Web Results:

The Nutanix Bible (https://www.nutanix.com/go/the-nutanix-bible) supports the ECA documentation: "Approval Policies in Prism Central provide granular control over operations like snapshot deletion, ensuring critical DR resources are protected through mandatory approval workflows."