Free Cram & Latest Exams Dumps

NO.45 An administrator recently deployed a new set of virtual machines… 3-tier web application… restricted as follows:
Only application VMs can talk to database VMs on port 3306
Frontend VMs should only communicate with application VMs on port 8080
Which action will correctly create and configure the Security Policies in Nutanix Flow to satisfy this task?

NO.46 An administrator has deployed a microsegmentation policy in Nutanix Flow that allows certain VM traffic based on Active Directory (AD) user group membership.
Users in a specific AD group report they are unable to access the VMs, while other users can connect without issues. The administrator suspects the problem is related to identity-based policy mapping.
What should the administrator do to troubleshoot and resolve the access issue related to the identity-based policy?

NO.47 An administrator has been tasked with creating a security policy to protect specific virtual network interfaces (vNICs) within a VM in a Flow Virtual Networking setup.
How can the administrator ensure that only a specific vNIC is protected by the policy?

NO.48 Which action allows an administrator to reuse a single existing policy in a different scope?

NO.49 Which two options are supported as a Secured Entity in Flow Network Security Application Policies? (Choose two.)

NO.50 In Nutanix Flow, which action transitions a security policy from observing traffic to actively enforcing the rules?

NO.51 Which step is required before placing the Flow Network Security software bundle on a local web server?

NO.52 The alert details mention a specific external network. Attempts to assign new Floating IPs to VMs fail, but existing Floating IPs continue to work.
What is the cause of this alert?

NO.53 An administrator has a VPC with a single active gateway node that successfully peers with an external router using a single BGP GW and session.
To eliminate a single point of failure, the administrator deploys a second BGP gateway to the VPC. After the second gateway is added and shows a healthy state, the external router still only sees a single BGP session.
What is the most likely reason for the second session not being established on the external router?

NO.54 Refer to the exhibit.


An administrator has been tasked with troubleshooting why the servers in the Web Category are not able to ping the servers in the App Category. Why is this issue occurring?

NO.55 Which statement accurately describes the behavior of a Flow Network Security policy operating in Monitor mode?

NO.56 A VDI policy in Flow Network Security allows access to specific resources only when users from the Admins Active Directory group log into a VM.
Some administrators report that when they log in to certain VMs, access is blocked (default deny applies), while the same user accounts work correctly when logged on to other VMs.
When checking the VM details in Prism Central, operations observes that the expected dynamic category based on the logged-in AD user is not assigned on the affected VMs.
What is the most likely reason for this behavior?

NO.57 An administrator uses Nutanix Flow to secure a three-tier application (Web, App, and Database tiers).
After observing the traffic, they find that:
The Web tier communicates with the App tier over HTTP (port 80)
The App tier communicates with the Database tier over TCP port 1433
The Database tier does not initiate connections
The Web tier receives inbound HTTP traffic from the corporate DMZ on port 8080 No other traffic should be allowed What should the administrator do to document and then securely apply these flows in Nutanix Flow?

NO.58 A junior network operator is assigned two predefined roles in Prism Central…
Role A: Prism Viewer
Role B: VPC Admin
The operator reports being able to successfully create, update, and delete Virtual Private Clouds (VPCs). However, the operator is unable to create a VM into the VPC.
How does Prism Central determine the operator’s effective permissions?

NO.59 An administrator is designing a Transit VPC to provide shared corporate services (e.g., DNS) for two tenant VPCs:
VPC-A requires WAN access using NAT.
VPC-B requires WAN access without NAT.
Both VPCs connect to the Transit VPC for shared services hosted on the corporate network.
Shared services residing in the Transit VPC use routed IP addressing for WAN connectivity.
Which two configuration elements should the administrator implement on the Transit VPC? (Choose two.)

NO.60 A newly-deployed Flow Virtual Networking VPC environment is experiencing connectivity issues… A packet capture on the physical switch shows packets are being fragmented.
What is the probable cause of the packet fragmentation and performance issues?

NO.61 An administrator finds that App tier VMs cannot connect to the Database tier on port 3306, and Flow logs show the traffic is being denied by a security policy. The Web tier communicates normally.
What should the administrator do to allow the App tier to access the Database tier?

NO.62 An administrator manages a four-node cluster Each node has a 4 available 10GB uplinks, and all four are configured as an Active/Active bundle.
They want to use Flow Virtual Networking to provide networking to the VMs in the cluster with the following requirements:
VMs should be in a single VPC.
VMs should be reachable by their real IP addresses.
The VPC should have access to the most north/south bandwidth possible.
No changes can be made to the physical infrastructure.
How can this best be achieved?

NO.63 Which statement is correct about cloning Application Security Policies?

NO.64 An administrator creates a new VPC in No NAT mode to allow VMs in a web tier to reach an external firewall.
After deployment… none of the VMs can reach external IP addresses…
Which action should the administrator take to restore routed north-south connectivity from the VPC?

NO.65 An administrator is building a new VPC in Prism Central to isolate a test environment. The administrator plans to connect it to an external network later, but they want to complete the initial creation first.
Which configuration items are the minimum required to successfully create the VPC?

NO.66 An administrator has configured a VPC with multiple overlay subnets and attached a VPN gateway using IPSec. After enabling Jumbo Frames on the physical network, VMs are still experiencing packet drops.
What is the most likely reason?

NO.67 An administrator plans to upgrade the Network Controller in a Flow Virtual Networking deployment. The environment includes multiple AHV clusters managed by Prism Central.
Which prerequisite must be verified before upgrading the Network Controller?

NO.68 An administrator needs to delegate the management of security policies to a dedicated SecOps team. To enforce the principle of least privilege, the administrator assigns the predefined Flow Policy Author role to a user on the team.
The user confirms they can create, monitor, and enforce security policies. However, when attempting to build a new application security policy for a set of newly deployed VMs, the user reports they are unable to create a new category to group these VMs. The option is not available in the Prism Central UI.
Which statement explains this behavior?

NO.69 What entity is automatically created on the cluster hosting Prism Central when Microsegmentation is enabled?