NCP-MCI-6.5 Exam Dumps - Nutanix Certified Professional - Multicloud Infrastructure (NCP-MCI) v6.5 exam

"An administrator has been tasked with increasing security on Nutanix cluster by disabling password authentication when accessing the CVM and AHV hosts and instead moving to key-based SSH, What is the easiest way for the administrator to meet these needs? Enable Cluster Lockdown and provide an RSA key."

 Cluster Lockdown mode disables password authentication when accessing the CVM and AHV hosts and instead requires key-based SSH. To enable Cluster Lockdown mode, you need to provide an RSA key.

Therefore, by enabling Cluster Lockdown mode and providing an RSA key, you can increase security on Nutanix cluster by disabling password authentication when accessing the CVM and AHV hosts and instead moving to key-based SSH with minimal effort.

https://next.nutanix.com/how-it-works-22/streamlined-login-and-increase-security-key-based-ssh-login-37397

According to the Nutanix Support & Insights, in a two-node ROBO cluster with a witness VM, if one node goes down, the other node sends a leadership request to the witness VM and goes into single-node mode. The cluster remains available and can tolerate another failure of either the witness VM or the network link.

According to the web search results, the two actions that the administrator should perform to determine if the current cluster can accommodate the new VMs are:

• Utilize Optimize Resources for VM efficiency: Optimize Resources is a feature in Prism Central that helps the administrator improve the efficiency and performance of their VMs by identifying and resolving issues such as overprovisioning, inactivity, constraints, or bullying3. By using Optimize Resources, the administrator can reclaim unused resources and optimize the resource allocation for their VMs3.
• Determine utilization with Cluster Runway: Cluster Runway is a feature in Prism Central that helps the administrator estimate how long their cluster can continue to run normally based on the current consumption rate of CPU, memory, and storage resources4. By using Cluster Runway, the administrator can see how adding more VMs will affect the resource utilization and capacity of their cluster4.

According to the Nutanix Support & Insights web search result3, shadow clones are vDisk copies that are created by the cluster when a vDisk is read by multiple VMs. Shadow clones are immutable copies of a vDisk that are stored in different nodes in the cluster, and are used to improve read performance and reduce network traffic. Shadow clones are automatically created and deleted by the cluster, based on the demand and availability of resources.

Deploy the Move appliance and Import the .vmdk into the Image Service. These are two methods that can be used to migrate a VM from VMware ESXi to AHV2. The Move appliance is a tool that automates the migration process by converting the VM disks and configuration to AHV format and transferring them to the Nutanix cluster3. The Image Service is a feature that allows users to upload and manage disk images that can be used to create or clone VMs on AHV4. By importing the .vmdk file of the VMware VM into the Image Service, users can create a new AHV VM from that image.

According to the web search results, the policy that should be used to meet this requirement is an Isolation Environment Policy. An Isolation Environment Policy is a type of security policy that can be created in Prism Central using Flow Network Security, which is a feature that provides microsegmentation and network security for Nutanix environments1. An Isolation Environment Policy allows the administrator to isolate a group of VMs from another group of VMs based on their categories, and block all traffic between them regardless of direction2. This policy can be useful for creating isolated environments for testing, development, or compliance purposes2.

Curator is the process that runs on every node in a Nutanix cluster and is responsible for data management tasks such as deduplication, compression, erasure coding, and replication factor compliance. Curator also handles disk failure recovery by scanning Cassandra to find all data previously hosted on the failed disk, and all disks in that node. Curator then rebuilds the data on other nodes in the cluster using the distributed storage fabric1.

First Preference:

• Policy is applied to a specific entity

2nd Preference:

• Policy is applied to an entity type in a category

3rd Preference:

• Policy is applied to an entity type in a cluster

4th Preference:

• Policy is applied to all entities of an entity type

Comprehensive Detailed Explanation with References:In Nutanix Prism, when multiple alert policies are created and applied to the same entities, the policies are evaluated based on their specificity. The order of precedence from highest to lowest is as follows:

• Policy is applied to a specific entity: Custom alert policies that are applied to specific entities take precedence over those applied to broader categories. This is because the more specific policy is usually created with a particular context or requirement in mind for that entity.
• Policy is applied to an entity type in a category: The next level of precedence is given to policies that are applied to all entities of a certain type within a specific category. Categories allow grouping of entities based on certain criteria, and policies applied here are more specific than to an entire cluster or entity type.
• Policy is applied to an entity type in a cluster: This refers to policies that are applied to all entities of a certain type within a specific cluster. This is more general than the above two but still targets a specific cluster environment.
• Policy is applied to all entities of an entity type: The lowest precedence is given to policies that are broadly applied to all entities of a particular type across the entire Nutanix environment.

This order ensures that the most specifically targeted policies are given priority, which allows for fine-tuned control and customization of alert policies. The details of alert policy precedence are typically covered in the Nutanix Prism Central Guide and the documentation related to Prism Central's alerting and policies.