NCP-MCI-7.5 Nutanix Certified Professional - Multicloud Infrastructure (NCP-MCI) 7.5 Questions and Answers

The requirement is very specific: the organization wants a single place to review security posture and compliance across on-prem Nutanix plus public cloud environments, and the output should support security operations workflows, not just basic cluster health views. Nutanix documents Security Central as the product designed for exactly this purpose. The official guide states that Security Central provides a unified view of security posture across Nutanix private cloud and AWS and Azure public clouds, and it is positioned as a multi-cloud security and compliance capability rather than just a local Prism view.

The other answers are narrower than what the question asks. Flow Network Security policy views focus on segmentation and policy state, not full multi-cloud posture management. Prism Central alerts and events are useful operational signals, but they do not replace a posture-and-compliance platform. The standard Prism Central security dashboard is not the same as Security Central’s broader cloud-security scope. Because Nutanix explicitly documents Security Central as covering Nutanix, AWS, and Azure with posture and compliance visibility, D is the authentic answer.

Nutanix documentation explains that Projects in Prism Central provide logical groupings of infrastructure resources and user access, and that you can add users and user groups to a project while also allowing clusters and subnets in that project. That is exactly the mechanism used when a user group needs controlled access to resources drawn from multiple clusters. The project becomes the governance boundary that ties users, roles, and infrastructure scope together. Therefore A. Configure Nutanix Projects is the correct answer. ( Nutanix Portal )

The other choices are unrelated to access scoping across clusters. Advanced Network Controller deals with networking services and policy capabilities, not user resource assignment. Micro Services Platform is not the RBAC/governance feature for multi-cluster access. Availability Zone is relevant for placement and DR topologies, not for delegating cluster resources to user groups. Nutanix’s governance guidance is clear that Projects are the construct used to organize infrastructure resources and assign them to users or groups with the proper RBAC controls. So for a user group that needs access to resources from multiple clusters, the authentic Prism Central action is A. ( Nutanix Portal )

In PD-based DR, Nutanix distinguishes between planned migration and unplanned failover/activation. When the source side is unstable or unreachable, the administrator cannot rely on a clean migration workflow initiated from the source. In that case, the correct recovery action is to activate the protection domain on the destination cluster. This is the classic unplanned failover behavior: bring the replicated workload online at the target because the source cannot be trusted to participate in a coordinated handoff. That makes A the correct answer. ( portal.nutanix.com , portal.nutanix.com )

The exam distinction is simple: Migrate is for planned movement when both sides cooperate; Activate is for disaster-style recovery at the target. Since the question explicitly says the source has intermittent network issues, it is pointing you toward the unplanned-failover path. Therefore the administrator should perform Activate on the destination.

Nutanix documentation for PD-based DR remote-site configuration states that if vStore mapping is not configured, replication occurs to the remote container with the same name as the source container. Nutanix further explains that this fallback relies on the existence of that matching destination container. Therefore, if same-name containers do not exist on the two sites and no explicit vStore mapping is defined, the replication target cannot be resolved correctly and the replication will fail. That makes A the correct answer.

This behavior is intentional. Nutanix does not randomly pick a destination container, nor does it silently force all replications into the default container. When administrators want different container names between source and target, the supported mechanism is vStore mapping. Skipping that mapping only works when identical container names already exist at both sites. Because the question explicitly removes that condition, replications fail to complete, which is why A is the authentic answer.

Nutanix documentation is very clear on this point: Secure Boot is not supported if the VM uses IDE disks. Nutanix also states that for AHV, if Secure Boot is enabled for UEFI mode, the IDE interface is not supported and SATA should be used for the VirtIO ISO in that configuration. So an IDE-attached disk is a direct blocker to enabling Secure Boot. ( Nutanix Portal )

This is one of those areas where the exam expects you to know compatibility rules, not just feature names. UEFI is actually part of the supported Secure Boot path, so option D is not the blocker. The CVM’s RAM and node cache storage are unrelated to whether the VM’s firmware and bus configuration can support Secure Boot. The administrative fix is usually to convert the VM to a supported configuration using UEFI and non-IDE bus types where required. Therefore, among the listed options, the condition that prevents completion of the task is the presence of IDE disks, making C correct. ( Nutanix Portal )

When Prism Central is scaled out for resiliency, the design goal is not only to have multiple Prism Central VMs, but also to ensure they are not placed together in a way that creates a common point of failure. Nutanix documentation around anti-affinity policies explains that VM-VM anti-affinity is used to keep selected VMs from running on the same host. In a scaled-out Prism Central deployment, this placement separation is the logical next step to strengthen resiliency, because it prevents the Prism Central instances from collapsing onto the same physical host and failing together during a node outage. ( Nutanix )

The other options are either unrelated or not the primary required follow-up. Witness Service is associated with Metro Availability and DR designs, not with the baseline requirement of distributing Prism Central VMs after scale-out. Protection Domain protection may be useful in some cases, but it does not solve co-location risk. HA reservations on the hosting Prism Element cluster address restart capacity, not placement diversity. The most direct resiliency improvement after scaling out Prism Central is to enforce separation between the Prism Central VMs. That is why D is the best answer. ( Nutanix )

Nutanix Move is primarily a migration platform for virtual machines, but Nutanix also documents adjacent migration capabilities around file shares to Nutanix Files and migration of NSX local-manager constructs to Flow Network Security (FNS) in supported scenarios. Among the listed answers, only A aligns with the documented Nutanix migration direction set and product intent. Option A stays within the realistic Nutanix ecosystem patterns rather than inventing broad cloud-to-cloud and hypervisor-to-hypervisor combinations that Nutanix Move is not presented as supporting.

The other options are not credible when compared with Nutanix Move’s official scope. AHV-to-Azure or AHV-to-ESXi is not how Nutanix Move is typically documented, and some of the listed items mix unrelated technologies in unsupported ways. This question is testing whether the candidate can distinguish Nutanix’s actual migration tooling scope from made-up combinations. Since Nutanix Move is centered on migrating VMs into Nutanix environments and related supported migration paths such as file shares to Files and NSX local manager to FNS, the correct answer is A.

Nutanix documentation for creating a storage container with Replication Factor 1 shows the workflow in the Prism Element web console. The official steps begin with logging on to Prism Element, navigating to storage, and creating the RF1-enabled container there. This makes A the correct answer.

This question is really about administrative scope. RF1 is a specialized storage-container setting that is managed at the cluster level, and Nutanix documents it in Prism Element rather than Marketplace or Self-Service. Prism Central can manage many cluster-wide resources, but the specific documented RF1 container-creation workflow is rooted in Prism Element. For exam prep, when a question asks which interface is required to create an RF1 container, the safe and documentation-aligned answer is Prism Element. Therefore A is the authentic Nutanix answer.

The key clue is the mismatch between the VM being slow under memory overcommit and the guest OS pagefile usage remaining low. If the guest itself were under strong memory pressure, you would expect higher pagefile or swap-file activity inside the OS. Instead, the symptoms suggest memory reclamation is happening outside the guest, which points to hypervisor swapping. In Nutanix AHV terms, that means the platform is reclaiming memory at the virtualization layer, causing performance degradation even though the guest does not show heavy internal paging. Therefore C is the most likely cause.

The distractors are weaker. “CVM swapping” would indicate pressure in the storage/control path VM, not necessarily this guest’s memory experience. Ballooning and swapping are not mutually exclusive, and the question’s evidence does not specifically prove ballooning is disabled. This is a troubleshooting pattern-recognition question: slow VM, full memory use, low guest pagefile use, and overcommit enabled usually indicates the hypervisor is swapping, so C is the best answer.

Nutanix Volumes documentation explains that external iSCSI clients use the iSCSI Data Services IP address for target discovery and connection. Nutanix specifically documents creating or updating the ISCSI Data Services IP Address on the cluster as part of enabling access to Volumes. If that step is missing, an external initiator can fail to discover or connect to the volume group correctly. Therefore B is the correct answer.

The other options are unrelated to the direct connectivity requirement. Microservices Infrastructure and Prism Central registration are not the necessary cluster-side prerequisites for an external iSCSI connection. LDAP directory configuration is also not the primary dependency being tested here. The key Nutanix platform requirement is that the cluster exposes the Volumes service via the configured Data Services IP. Without that, the initiator connection workflow breaks. So B is the authentic answer.

Nutanix documentation states that the default erasure coding window for write-cold data is seven days. That means newly written or recently modified data is not immediately converted into erasure-coded stripes. If there was a large increase in data usage over a weekend, the administrator might not yet see the expected space savings because the new data has not aged long enough to fall within the EC processing window. That is why D is the correct answer.

This is a timing question more than a configuration question. The issue is not that EC has failed or deactivated automatically; it is that the data may still be considered too “hot” for the erasure-coding policy to process under the default window. DSIP and Prism Central health are irrelevant to whether EC space savings appear on a storage container. Nutanix separates the eligibility window from the fact that EC is enabled. Therefore, after a sudden growth event, lower-than-expected savings are best explained by the default erasure coding window settings, which is option D.

Nutanix Move documentation states that when migrating VMs from Hyper-V to AOS/AHV, a Nutanix Move agent service is deployed on the Hyper-V host. Nutanix provides dedicated procedures for deploying the Move Agent on Hyper-V, both manually and automatically. That makes D the correct answer.

This is a common migration-tool distinction. Nutanix Move is the migration platform, but the question asks what specifically must be deployed on the Hyper-V host. The answer is not VirtIO drivers or NGT, because those serve different purposes. Nutanix explicitly documents the Move Agent as the source-host component used for Hyper-V migrations. Therefore the authentic exam answer is D. Nutanix Move Agent.

Nutanix DR documentation for volume groups distinguishes replication types by RPO range. Nutanix documents Asynchronous Replication as the model for 1 hour or more RPO, while NearSync covers 1 minute to 15 minutes, and synchronous/Metro designs target near-zero or zero-RPO behavior with tighter latency expectations. Since the requirement here is 1 hour and the clusters are in different geographic regions, Asynchronous is the correct fit. That makes D the right answer.

The geography in the question is also a clue. Synchronous and Metro Availability are usually associated with low-latency links and more demanding network requirements, which are not implied by “different geographic regions.” NearSync is too aggressive for a 1-hour target and is documented for much shorter RPO windows. Nutanix’s own replication taxonomy places 1 hour or more squarely in the Asynchronous category, so D is the authentic answer.

Nutanix documentation for Prism Central deployment states that single Prism Central VM deployments are supported in Small, Large, or X-Large sizes, and that a single-VM deployment can later be scaled out. Since X-Small is not the supported minimum deployment size in this documented model, the minimum supported size is Small. That makes A correct.

This question is really checking whether the administrator understands the starting point for a scale-out-capable Prism Central design. The existence of larger sizes does not change the minimum supported entry point. Nutanix’s documentation is explicit that a single Prism Central VM can begin at Small and later be expanded if more scale or resiliency is needed. Therefore, for a single-node Prism Central deployment with future scale-out potential, the correct answer is Small.

Nutanix documentation for Prism Central point-in-time backups states that the Recovery Point Objective (RPO) can be configured in values ranging from 1 hour to 24 hours. Since the question asks for the RPO time in hours for Prism Central backups, the expected exam answer is the maximum supported interval of 24 hours, which corresponds to option A.

This is not asking how long recovery takes or how long restore points are retained. Nutanix documents those separately. The RPO defines how often recovery points can be taken, and Prism Central’s backup framework allows choices up to a 24-hour interval. That is why values like 36, 48, or 72 hours are not supported answers in the documented PC backup workflow. So for an authentic Nutanix-aligned study sheet, A. 24 is correct.

Nutanix documentation for service accounts states that authentication is done using a shared secret key generated and managed through IAM. The same service-account framework is designed so the account can perform actions according to assigned privileges rather than inheriting unrestricted administrator rights. In practical terms, that means a service account is meant for automation, API use, and non-interactive authentication, while still being controlled through the RBAC model. That matches D exactly.

The incorrect options reflect common misunderstandings. A service account does not simply log in with the cluster admin password, and it does not automatically inherit full administrator privileges. It is not an external-KMS construct, and certificate-based auth is not how Nutanix documents this service-account mechanism. The exam clue is the phrase “without an interactive user password” combined with “granular permissions.” Nutanix’s answer to that requirement is a service account authenticated by an IAM-managed shared secret with assignable permissions. Therefore D is the authentic Nutanix answer.

Moving a running VM between hosts in the same cluster without downtime is the exact purpose of live migration in AHV. Nutanix AHV administration guidance treats live migration as the supported mechanism for relocating active workloads between hosts while maintaining service continuity, subject to any migration restrictions such as passthrough devices or CPU compatibility constraints. Because the VM must remain powered on and operating during the move, D. Live migrate within the cluster is the correct answer.

The other options are all recovery or duplication workflows, not mobility workflows. Restoring from a backup or recovery point creates interruption and changes the task from migration to recovery. Cloning from a snapshot creates another copy rather than moving the currently running VM. Nutanix intentionally distinguishes VM recovery operations from VM mobility operations. Since the requirement is in-place movement of a live workload within the cluster, the correct and most direct method is live migration. Therefore D is the authentic Nutanix answer.

Nutanix documentation for Updating Capacity Configurations explains that the Reserve Capacity For Failure option determines whether runway analysis should account for the impact of a node failure, and when Auto Detect is selected, Prism Central automatically uses the cluster’s failure assumptions rather than the full unconstrained cluster total. In practical runway terms, that means the calculation reflects the loss of the node whose failure would have the greatest effect on usable capacity. Among the provided options, the best match for that documented logic is D: the runway analysis excludes the resources of the largest node so estimates account for a node failure. ( Nutanix Portal )

This behavior is important because runway is intended to answer “how long until I run out of safe usable capacity,” not just “how long until all raw resources are consumed.” Nutanix therefore lets administrators model capacity while preserving headroom for failure scenarios. The fixed 10% answer is too generic and not how Nutanix documents the option. Storage-only reservation also misses the fact that runway tracks CPU, memory, and storage dimensions. So, based on Nutanix’s Auto Detect wording and the resilience-oriented design of runway planning, D is the most authentic answer. ( Nutanix Portal )

Nutanix documentation confirms that a Prism Element cluster can be registered with only one Prism Central at a time, so option B is false. Nutanix also documents support for deploying multiple Prism Central instances on the same Prism Element cluster, so option A is false as well. The presence of a dedicated Nutanix doc for deploying multiple Prism Central instances on one PE cluster directly disproves option A. ( Nutanix Portal )

That leaves C and D. Nutanix documentation does not position Marketplace as the standard mechanism described in this context for deploying additional Prism Central instances. By contrast, Nutanix clearly documents registration and unregistration workflows, including the fact that clusters can be unregistered when no longer needed and later registered again. Since a cluster can only be attached to one Prism Central at a time, repeating register/unregister operations is a valid administrative action in supported workflows. Therefore D is the best valid statement among the given options. This question is mostly testing whether you know the difference between deployment support and registration exclusivity. Multiple PC instances may exist on the cluster, but registration to management is still one-at-a-time. ( Nutanix Portal )

The uploaded source file shows the answer key as B, but the supporting exhibit or calculation context is missing from the provided document, so a full mathematical derivation cannot be verified from the question bank itself. Because of that missing context, the safest exam-faithful response is to preserve the source answer of 1125 IOPS while being transparent that the exact intermediate values used to reach that number are not visible in the provided material.

From a Nutanix policy perspective, IOPS throttling is implemented through storage policies to control or cap workload consumption and prevent noisy-neighbor impact. The conceptual goal is to set a value high enough to accommodate the intended steady-state workload while still enforcing policy boundaries. In practice, administrators usually choose a value above the observed average to allow normal variance, bursts, and scheduler overhead rather than matching the average exactly. That design logic is consistent with an answer larger than 800 IOPS. Given the choices and the source key, 1125 is the preserved answer for this batch, but this is one of the questions where the missing exhibit should ideally be restored before using it as a final study reference. ( Nutanix )

Nutanix documentation for VM revert behavior in Prism Central states that categories are preserved by default when a VM is reverted to a recovery point. Nutanix further notes that if an administrator wants categories to revert to the state captured in the recovery point, that must be done by using a V4 API override rather than the standard default behavior. That directly rules out choices A and B in the ordinary UI-based revert scenario. The expected default behavior is preservation of current categories, not rollback of categories to historical values.

The same recovery-point workflow also preserves present-day management context such as ownership rather than reconstructing all metadata exactly as it existed at the earlier capture point. The reason is practical: reverting the VM is primarily about workload state recovery, not about undoing every later governance assignment unless explicitly requested through advanced controls. From an administrator’s point of view, this is safer because access-control and ownership context is not unexpectedly rolled backward during a restore operation. Therefore the best answer is C: both the VM’s categories and ownership are preserved at their current state.

Nutanix documentation for updating a VM through Prism Central states explicitly: “BIOS mode: You cannot modify the BIOS mode after the VM is created.” That wording directly answers the question and makes A the correct option. By contrast, vCPU count and memory allocation are common VM settings that administrators can adjust as part of lifecycle management, and boot priority can also be changed in supported conditions. The only one Nutanix calls out as restricted after creation is the BIOS mode. ( Nutanix Portal )

This reflects how foundational firmware mode is to VM identity and boot architecture. Once the VM is created using Legacy BIOS or UEFI, many guest-OS assumptions, boot-device structures, and security options depend on that original firmware model. Nutanix therefore locks this parameter after creation instead of treating it as an ordinary runtime edit. For exam preparation, this is a classic item to memorize: CPU and memory can generally be changed, but BIOS mode cannot be modified after VM creation. So the authentic Nutanix answer here is A. BIOS mode. ( Nutanix Portal )

Incrementing rx_crc_errors usually point to a Layer 1 or physical-path problem, not a CPU or memory issue. CRC errors mean frames are arriving corrupted, and the most common reasons are a faulty cable, damaged transceiver, bad port, or another physical medium issue between the AHV host and the switch. Because the CRC counter is specifically increasing while other counters like missed, FIFO, and general rx errors remain low, this strongly suggests corruption during transmission rather than host overload. That makes B the correct answer.

A duplex mismatch can cause broader link-performance problems, but the pattern of steadily rising CRC errors is much more classically tied to bad physical media. MTU issues usually show fragmentation or packet-handling problems, not CRC corruption itself. CPU saturation does not create on-the-wire checksum corruption. In Nutanix troubleshooting, when CRC counters rise repeatedly, the correct operational response is to inspect and swap the cable or optics, verify switch-port health, and test the NIC path physically. So B is the strongest technical match.

Nutanix documentation describes Multicloud Snapshot Technology (MST/NMST) as a way to replicate native Nutanix snapshots directly to cloud object storage such as AWS S3 or Azure Blob, and specifically positions it as a cost-effective disaster recovery and data mobility approach. Nutanix best-practice content also says MST is especially suitable when an organization does not want to maintain a full secondary DR site and is looking for a low-cost recovery-point location in the cloud. That aligns exactly with the requirement in this question. ( portal.nutanix.com , portal.nutanix.com , portal.nutanix.com )

Adding an NC2 recovery location or full DRaaS design can be valid but usually carries more infrastructure cost than simply replicating snapshots to object storage. A custom runbook to clone recovery points to S3 is not the native Nutanix DR method being tested. So for an external cloud-based recovery point location with cost efficiency as the deciding factor, A is the authentic answer.

The question is asking for the best balance of capacity efficiency, fault tolerance, and cost control. Nutanix documentation explains that erasure coding is the storage-efficiency mechanism that increases usable capacity by using parity instead of full-copy replication overhead, making it a strong fit when data is relatively cold or infrequently modified. Nutanix also documents that erasure coding requires a minimum of six nodes when using replication factor 3, which corresponds to Fault Tolerance 2 designs. That makes Erasure Coding with six nodes the correct answer.

Deduplication is valuable for certain duplicate-heavy data sets such as VDI or repeated blocks, but the question emphasizes business-critical cold data and a tight budget. In that context, erasure coding provides the more directly documented capacity-efficiency benefit. The five-node options are eliminated by Nutanix’s minimum-node requirement for RF3 erasure coding. Since FT2 implies the higher fault-tolerance design and Nutanix requires six nodes for EC with RF3, A is the correct answer.

For a write-intensive, latency-sensitive VM running on a hybrid cluster, the Nutanix feature that most directly improves storage performance at the VM object level is Flash Mode. Nutanix documents describe Flash Mode for VMs, disks, and volume groups as a way to set the storage tier preference to SSD, specifically for workloads that are sensitive to latency. That is exactly the design intent of this setting: instead of depending only on normal tiering behavior, you explicitly bias the workload toward flash storage so hot write data stays on the fast tier more consistently. ( Nutanix Portal )

The other choices are either indirect or aimed at different outcomes. Network segmentation isolates traffic, but it does not by itself pin or prefer the VM’s storage data on flash. Load balancing for volume groups is relevant to externally attached block storage patterns, not a general VM write-intensive optimization. A dedicated RF3 container affects resilience and usable capacity, but it does not inherently outperform Flash Mode for a single VM’s storage path. Nutanix’s own wording for Flash Mode specifically calls out latency-sensitive applications, which is why it is the best fit here. ( Nutanix Portal )

The key requirement here is that the playbook must fire based on a pattern of alert characteristics, not on one fixed alert policy name or ID. Nutanix Intelligent Operations documentation provides a trigger type specifically for this purpose: Alerts Matching Criteria. That trigger lets administrators filter alerts using criteria such as severity, type, title patterns, and similar attributes, which is exactly what is needed when policy identifiers vary across environments but the response logic should stay consistent. It avoids binding the playbook to one alert definition and instead binds it to the alert behavior that matters operationally. ( Nutanix )

A single Alert trigger would be too brittle because it ties the automation to one named alert policy. A Webhook trigger would move the matching logic outside Prism and add unnecessary external dependency when the requirement can already be met natively. An Event trigger is also too broad or mismatched because the question is explicitly about filtering alerts by performance-related characteristics. Nutanix created “Alerts Matching Criteria” to handle precisely this kind of cross-environment, pattern-based automation. Therefore, A is the best answer because it gives the administrator scalable, environment-agnostic remediation logic while still excluding unrelated alerts through filters. ( Nutanix )

Nutanix DR documentation for test failover states that recovered test VMs are brought up in a test virtual network at the recovery AZ, separate from production. Nutanix also documents that when multiple recovery directions or multiple recovery AZs are involved, recovery planning should be created per target direction and the required production and test network mappings need to exist for the recovery plan being tested. If recovery must be tested in both directions between the two clusters, each side effectively needs a production network and a test network. That makes two production networks and two test networks the most complete and correct answer.

This question is really about symmetry. One-direction failover testing can be done with a simpler mapping set, but the moment the requirement says test recovery in both directions, each cluster must be able to act as a recovery site and provide an isolated test-recovery network. That is why a single shared test network is not the best answer here. Nutanix’s recovery-plan structure and test-failover guidance support this interpretation. Therefore C is the correct and most practical answer.

The uploaded answer key lists B, and that is the safest supported choice among the options because it preserves the cluster’s all-NVMe storage profile rather than introducing mixed media tiers or an all-SSD design that changes the storage architecture. In Nutanix cluster expansion planning, keeping node media type aligned with the existing cluster profile is the normal supported design principle, especially when the existing cluster is already Full-NVMe. Nutanix storage documentation also emphasizes a single storage-pool-per-cluster model and consistent cluster design so that performance and capacity are optimized predictably across the nodes.

The alternative answers introduce obvious design mismatches. Mixed NVMe+HDD or SSD+NVMe nodes would materially change latency and tier behavior, while adding an all-SSD node into a Full-NVMe cluster would also break architectural consistency. Although the exact public expansion-matrix wording was not surfaced in the search results, the answer set itself strongly points to the only media-aligned option: one All NVMe node with 96 TiB RAW capacity. So for an exam-prep answer aligned with Nutanix design logic and the provided key, B is the correct choice.

In Prism Central VM efficiency and behavioral-learning views, Nutanix groups inefficient VMs into categories such as over-provisioned, inactive, bully, and constrained. A constrained VM is one that does not have enough resources for its workload and is therefore experiencing pressure. Nutanix documentation ties constrained status to signs such as CPU readiness, memory swapping, or other stress indicators that show the VM is not adequately provisioned for what it is trying to do. That means the best interpretation is that those VMs are lacking sufficient resources, which is option B. ( Nutanix Portal )

This category is different from the other distractors. An inactive VM is mostly idle and not making meaningful use of its assigned resources. An over-provisioned VM is wasting capacity because it was allocated too much. A VM that is merely “consuming too much CPU” could be a bully VM or simply a busy VM, but that alone does not define the constrained classification. Nutanix uses the constrained label to signal a right-sizing opportunity in the direction of adding or adjusting resources, not reclaiming them. Therefore the most accurate answer is B, because constrained VMs are the ones that are short on sufficient resources for their workload behavior. ( Nutanix Portal )