NCP-NS-7.5 試験問題を無料オンラインアクセス

Exhibit:

A VM with IP address 172.20.9.5 resides on a subnet with CIDR 172.20.9.0/24. The VPC is successfully peered via BGP with an external router... External networks outside the VPC are unable to reach the VM.
What configuration change should be made to enable reachability for the VM?

• A.Apply a PBR rule for the VM's address forwarding traffic to the IP of the No-NAT external Gateway address
• B.Apply a default route to the VPC sending all traffic to the NAT External Network
• C.Modify the ERP values within the VPC to advertise a CIDR of 172.20.8.0/22
• D.Associate a NAT external network to the VPC and apply a floating IP address to the VM

An administrator is deploying a multi-tier application on a Nutanix AHV cluster. The Web tier needs to be accessible from the internet, the App tier must communicate only with the Web tier and the Database tier, and the Database tier should accept traffic only from the App tier. The administrator must determine the correct configuration to ensure secure, reliable connectivity for the Web tier while maintaining isolation from the Internet for the App and Database tiers. Which connectivity option should the administrator implement to meet the requirements?

• A.Assign direct external IPs to all VMs in the VPC.
• B.Assign Floating IP assignments to Web tier only.
• C.Connect all tiers directly to the external network with no NAT.
• D.Use overlay networks for the Web tier to provide internet access.

How can the administrator discover the root cause of the issue?

• A.Check if traffic isolation has been configured on the Database tier and ensure that there is no policy preventing App tier communication with the Database tier.
• B.Verify that the port 3306 is open on the external gateway and that SNAT is not being applied for internal communication.
• C.Confirm that Inter-VM connectivity is enabled within the VM networking settings and that VMs in the Database tier are configured correctly to accept inbound traffic.
• D.Check the security policies again to ensure that the rule allowing port 3306 from Web - > Database is applied and active, then check the policy enforcement mode to ensure it is in Enforcement Mode.

An administrator has configured a VPC with multiple overlay subnets and attached a VPN gateway using IPSec. After enabling Jumbo Frames on the physical network, VMs are still experiencing packet drops. What is the most likely reason?

• A.Jumbo frames are not supported on overlay subnets.
• B.Floating IP is missing on the VPN gateway.
• C.MTU on guest VMs exceeds recommended size for IPSec.
• D.DHCP relay is misconfigured.

An administrator manages a four-node cluster Each node has a 4 available 10GB uplinks, and all four are configured as an Active/Active bundle. They want to use Flow Virtual Networking to provide networking to the VMs in the cluster with the following requirements: VMs should be in a single VPC. VMs should be reachable by their real IP addresses. The VPC should have access to the most north/south bandwidth possible.
No changes can be made to the physical infrastructure. How can this best be achieved?

• A.Create a VPC with a single No-NAT External Network with four gateway nodes.
• B.Create a VPC with a single No-NAT External Network with three gateway nodes.
• C.Create a VPC with four No-NAT External Networks, each with a single gateway node.
• D.Create a VPC with a single NAT External Network with three gateway nodes.