NCP-MCI-7.5 Nutanix Certified Professional - Multicloud Infrastructure (NCP-MCI) 7.5 Questions and Answers

Nutanix Self-Service and NCM documentation explains that approval policies are built around defined conditions and approvers, and those policies are part of the broader Policy Engine capability. Nutanix further documents that the Policy Engine is included in NCM and provides the governance framework for conditions-based approvals before deployment actions proceed. Since the question asks specifically about defining conditions and approvers that must be satisfied before deployment, the correct enabling component is Policy Engine.

Marketplace can host deployable items, but it does not by itself provide the approval-governance mechanism being asked about. Nutanix Central and Power Monitor are unrelated to approval workflows. The wording in the question almost mirrors Nutanix’s own approval-policy description, which is why the intended answer is clear. To enforce conditional approvals before provisioning or deployment actions, administrators use Policy Engine. Therefore A is the authentic answer.

Nutanix security guidance is explicit on this point. After adding an SSH public key and verifying connectivity, Nutanix recommends disabling password authentication for all CVMs and AHV hosts to reduce interactive access risk. The Security Guide notes that after the SSH key inclusion and connectivity validation are complete, password authentication should be disabled as the next hardening step. That makes B the correct answer.

This is a straightforward hardening sequence question. The administrator has already completed the prerequisite—public-key access is working—so the next step is to remove the weaker interactive method. Core dumps, login banners, and UI session settings do not address SSH authentication exposure. Nutanix’s security model favors moving from password-based remote shell access to key-based access only. Therefore B is the authentic and recommended next step.

Nutanix documentation describes guest customization profiles as reusable configuration settings that can be applied during VM deployment from a template and also during certain clone operations. For Linux-based cloud-init workflows, Nutanix explicitly shows that when deploying a VM from a template with Cloud-Init guest customization, administrators can apply or override the customization settings at deployment time. That makes option A the cleanest and most documentation-aligned answer. ( portal.nutanix.com , portal.nutanix.com )

Why not the others? Nutanix does support guided setup and clone scenarios, but the wording “create a VM template for reusability” points most strongly to the template deployment workflow rather than one-off cloning. Cloud-init is also the Nutanix-native customization method for Linux initialization at first boot, which makes it especially suitable for standardized reusable templates. So if the goal is simple repeatable management with a template-driven lifecycle, the correct point to apply the guest customization profile is when deploying a VM with Cloud-Init guest customization, which is A. ( portal.nutanix.com )

Nutanix DR documentation for volume groups distinguishes replication types by RPO range. Nutanix documents Asynchronous Replication as the model for 1 hour or more RPO, while NearSync covers 1 minute to 15 minutes, and synchronous/Metro designs target near-zero or zero-RPO behavior with tighter latency expectations. Since the requirement here is 1 hour and the clusters are in different geographic regions, Asynchronous is the correct fit. That makes D the right answer.

The geography in the question is also a clue. Synchronous and Metro Availability are usually associated with low-latency links and more demanding network requirements, which are not implied by “different geographic regions.” NearSync is too aggressive for a 1-hour target and is documented for much shorter RPO windows. Nutanix’s own replication taxonomy places 1 hour or more squarely in the Asynchronous category, so D is the authentic answer.

To receive an alert earlier, the administrator must lower the threshold at which the alert’s warning state is triggered. Nutanix alerting works by comparing utilization against configured warning and critical thresholds. If the threshold is lowered, the system reaches it sooner, which gives the administrator more lead time before the environment becomes capacity-constrained. Among the given options, the one that directly performs that function is decreasing the Storage Container Space Usage Exceeded alert Warning threshold, which is option C.

The other choices are weaker or misaligned. There is no meaningful “increase frequency” adjustment that changes when capacity is considered low; it would only change how often checks occur, not the trigger point. Changing the critical threshold does not provide earlier warning notice, which is what the question asks for. The wording also points more naturally to a threshold-based action rather than enabling a different alert family. In Nutanix monitoring, earlier warnings come from making the warning trigger more conservative. Therefore C is the best answer because it causes the alert to fire at a lower usage percentage and provides earlier operational notice.

Nutanix security documentation for configuring OpenLDAP authentication in Prism Central clearly states that Prism Central uses a service account to query the OpenLDAP directory and that this service account must have the required read permissions on the directory service. That means the correct account type is not a generic admin, root, or Nutanix local account, but a dedicated service account created for the integration. Therefore D is the authentic answer.

This is an important design principle in Nutanix authentication integration. A service account is preferred because it supports controlled, non-interactive access with appropriate least-privilege permissions and stable directory lookup behavior. Using a root or broad admin account would be poor security practice and is not how Nutanix documents the setup. The service account’s role is not to log into Prism as a user but to let Prism Central query the directory safely and consistently. Because the official documentation names that account type directly, D. Service Account is the correct exam answer.

Nutanix documents Logbay as the preferred and supported mechanism for efficient platform log collection. The AHV administration guide states that you can use Logbay only after the CVM is installed on the node or the AHV compute node has been added to the cluster, which directly matches the wording in option A. Nutanix’s web-console guidance also points administrators toward Logbay as the preferred collection method rather than relying only on manual UI collection.

The other options describe tools or behaviors that do not match Nutanix’s documented collection path for this scenario. Panacea is not the standard answer for supported cluster log-bundle collection in the way described. Storage policy reports are not substitutes for host/CVM diagnostic logs, and ADS does not function as an automatic diagnostic bundle exporter for arbitrary contention events. Because the question asks for both the supported approach and a key prerequisite, Logbay with the documented availability condition is the most precise Nutanix answer. Therefore A is correct.

Nutanix separates storage resiliency reservation from compute high availability. For storage, the relevant setting is Rebuild Capacity Reservation, which reserves storage space so the cluster can self-heal and rebuild after node, block, or rack failure. For memory and compute, the relevant concept is High Availability, which reserves or accounts for host resources needed to restart workloads after a host failure. Putting those together gives the combination that best governs the remaining usable storage and memory capacity while preserving fault tolerance. That makes C the most correct answer.

The distractors either use non-standard phrasing or split the concepts incorrectly. “Memory Reservation” by itself is not the standard Nutanix answer when the exam is asking about cluster-wide restart capacity and usable memory after failure accounting. Nutanix administrators think in terms of HA for compute-memory protection and rebuild capacity reservation for storage protection. If the goal is to manage the usable remaining capacity for both storage and memory correctly, the right pair is Rebuild Capacity Reservation and High Availability. Therefore C is the authentic answer.

For database workloads, Nutanix documentation distinguishes between crash-consistent and application-consistent recovery points. If the Take App-Consistent Recovery Points option is not selected, the recovery point may capture storage in a crash-consistent state only. For transactional databases, that can lead to corruption, incomplete writes, or recovery issues after restore. Nutanix specifically documents that selecting the app-consistent option creates application-consistent recovery points; if you do not select it, the recovery points are crash-consistent. That makes D the most likely root cause. ( portal.nutanix.com , portal.nutanix.com )

The mention that NGT was checked is important because NGT participation is commonly part of quiesced and app-consistent protection workflows. A high RPO can increase data loss, but it does not by itself explain logical corruption inside the restored database. Category choice and roll-up schedule are also not the primary issue. Nutanix best practice for databases is to ensure application-consistent protection is enabled wherever supported. Therefore D is the correct answer.

Nutanix’s recommended migration tool for moving VMs into AHV is Nutanix Move. Official Nutanix guidance and migration material specifically recommend Move as the preferred mechanism for migrating VMs to AHV, especially when the goal is to reduce disruption compared with coarse methods like backup-and-restore. Move is purpose-built for this scenario and supports migration workflows from platforms such as VMware into Nutanix AHV with minimized downtime during cutover. ( Nutanix )

The distractors highlight common confusion between the overall product and helper components. Move Agent may be involved in certain source-platform workflows, but the question asks what should be used to minimize downtime at the solution level. The correct answer is the migration platform itself: Nutanix Move. Backup and restore is usually more disruptive and manual. CCLM is unrelated here. Nutanix positioning is very clear that the standard, supported, low-downtime migration path from a third-party virtual environment to AHV is Move, so D is correct. ( Nutanix )

Nutanix documentation for Prism Central point-in-time backups states that the Recovery Point Objective (RPO) can be configured in values ranging from 1 hour to 24 hours. Since the question asks for the RPO time in hours for Prism Central backups, the expected exam answer is the maximum supported interval of 24 hours, which corresponds to option A.

This is not asking how long recovery takes or how long restore points are retained. Nutanix documents those separately. The RPO defines how often recovery points can be taken, and Prism Central’s backup framework allows choices up to a 24-hour interval. That is why values like 36, 48, or 72 hours are not supported answers in the documented PC backup workflow. So for an authentic Nutanix-aligned study sheet, A. 24 is correct.

Nutanix documentation confirms that Prism Element supports both NCC execution and log collection from the web console, so options A and B are incorrect. However, Nutanix also distinguishes running checks from collecting logs as separate actions. Operationally, if the administrator is actively running NCC at that moment, log collection is not available until that task is no longer in progress. That is why the most likely explanation is that logs cannot be collected while NCC is running. ( Nutanix )

This is a classic UI workflow question. Nutanix does allow log bundle collection from the web console, and newer NCC/Logbay capabilities even extend collection options further. But that does not mean every action is available concurrently. The supported mental model is: run checks, review output, then collect logs as needed. Since the question specifically says the administrator is running NCC and is not able to collect logs, the best explanation is the conflict between those two operations at the same time. Therefore, D is the correct answer. ( Nutanix )

Foundation Central is about deployment centralization, not backup, lifecycle upgrades, or automatic registration workflows as its main value proposition. Nutanix documentation describes Foundation Central as a tool that can manage several Foundation instances from a single pane of glass, allowing administrators to create clusters of remote nodes. That statement maps directly to option D. ( Nutanix Portal )

The subtle point here is that the question mentions Marketplace only as the method used to deploy Foundation Central, not as the capability being tested. Once deployed, Foundation Central’s job is to simplify remote cluster creation at scale. It does not replace LCM for software upgrades, nor is its primary role to perform backup and recovery of cluster configurations. Automatic cluster registration may happen as part of broader operational workflows, but it is not the core capability Nutanix emphasizes in the product description. In the context of imaging and deploying many branch-office clusters from a central team, the defining capability is centralized cluster creation and management visibility. That is why D is the right answer. ( Nutanix Portal )

This question is about CPU feature compatibility, not storage or networking uniformity. Nutanix documentation and KB guidance explain that VM migration can fail when clusters contain nodes with different CPU generations or different exposed CPU features. A VM that is already running with features negotiated on a newer-generation CPU may not live-migrate successfully to an older or feature-different node until it is power-cycled or configured with advanced processor compatibility. That makes C the correct answer. ( portal.nutanix.com , portal.nutanix.com , portal.nutanix.com )

The important subtlety is that “same core count, memory, storage, subnet, and software version” does not guarantee CPU-feature equivalency. Firmware or ADS activity is not the primary issue described. Affinity rules can restrict placement, but the classic symptom after mixing repurposed nodes is CPU compatibility. Nutanix also documents that advanced processor compatibility settings persist across migrations and power cycles, reinforcing that CPU exposure is the real gating factor here.

The uploaded source file provides the answer choices and key, but the actual requirement or exhibit needed to calculate this answer is missing from the question bank preview. Because of that, the exact sizing logic cannot be fully validated from the provided source material alone. The uploaded file’s answer key shows C, so that is the preserved answer for this batch.

From a Nutanix cluster-planning perspective, questions like this are usually driven by one or more of the following documented factors: usable versus raw capacity, replication factor, reserved rebuild capacity, storage efficiency settings such as compression or erasure coding, and projected runway requirements. Without the missing stem, it is impossible to state which of those variables controlled the calculation here. So for authenticity, the right thing is to be transparent: the source answer is C, but the calculation cannot be proven from the incomplete question as provided. If you later share the missing exhibit or full requirement text for Q69, I can replace this with a fully derived Nutanix-based explanation.

In Prism Central, Runway Analysis is not a simple reading of current utilization; it is a forecast based on historical consumption trends. Nutanix documentation explains that capacity planning and runway use machine learning and historical resource behavior to estimate when CPU, memory, or storage will run out. That means a cluster can still show only 60% memory used today and yet have a short memory runway if the memory-consumption trend has been climbing steadily and rapidly over recent history. In this scenario, the most likely reason for only 12 days of runway is sustained growth in memory use over the historical observation period. ( Nutanix )

The distractors do not fit the documented behavior as well. Nutanix does support scenario modeling, but a low runway in the standard view is primarily a forecast outcome, not a default penalty for missing history or a result of guaranteed HA mode by itself. HA reservations can reduce available effective capacity, but the wording of the question points to forecasting logic rather than static reservation math. Since Nutanix runway is based on actual consumption trends, the answer that best explains a low runway despite moderate present-day utilization is that memory usage has been continuously increasing, which is option B. ( Nutanix )

Nutanix documentation for enabling Marketplace in Prism Central explicitly states that a unique data services IP address (DSIP) must be configured on the Prism Element cluster that hosts Prism Central. This is a hard prerequisite for Marketplace enablement and application deployment workflows. In exam terms, the presence of DSIP is not optional convenience; it is a setup requirement Nutanix calls out directly before Marketplace can be used. ( Nutanix )

The other answers are not Marketplace prerequisites in the same direct sense. SMTP is useful for email notifications, LDAP for external authentication, and LACP for network design, but none of those is the documented enabling requirement for Marketplace. Nutanix separates platform application management prerequisites from general infrastructure best practices, and DSIP falls into the former category. So when the exam asks what must already be in place on the Prism Element cluster before enabling Marketplace, the correct answer is A: Data services IP must be configured. ( Nutanix )

For CHAP-protected volume groups, Nutanix documentation is explicit that when the target password is changed, the administrator must also update the associated recovery plan. Nutanix states that if the new target password is not updated in the recovery plan, it is not retained after failover. That makes the recovery plan the place where the failover-side credential continuity is preserved. In other words, protection policies create and replicate recovery points, but the recovery plan contains the information needed for the recovered application workflow, including CHAP details needed after recovery. ( Nutanix Portal )

This is an important exam distinction: protection policy controls snapshot and replication behavior, while recovery plan controls recovery orchestration and the settings needed when workloads are actually brought online at the target site. Recovery points themselves are snapshots of protected entities; they are not the administrative mechanism Nutanix documents for persisting an updated CHAP target password through failover. So even though the uploaded file says option D, the official Nutanix guidance supports A. For failover success with CHAP-enabled VGs, always synchronize password changes with the recovery plan. ( Nutanix Portal )

Nutanix documentation for Prism Central backup and restore repeatedly references NCM Self-Service as part of the Prism Central backup and recovery context. Nutanix specifically notes considerations for protecting and restoring NCM Self-Service-related entities when Prism Central is backed up and restored. That makes C the correct answer.

The other options do not fit the documented Prism Central backup scope in the same way. “Objects data” refers to data in the object store itself, not the platform service configuration protected as part of Prism Central backup workflows. LCM is a management service, but Nutanix does not present it as the answer to this specific question. “NUS” is not the documented backup-scope answer here. Since Nutanix explicitly calls out NCM Self-Service in PC backup and restore considerations, C is the authentic choice.

Nutanix documentation explicitly states that in Prism Central, when you are using more than 80% of Prism Central capacity, a red PC Under-provisioned warning icon appears. That means this alert is not describing the managed cluster’s resilient capacity, nor is it about a storage over-provisioning ratio on the Prism Central VM. It is specifically tied to the Prism Central instance itself approaching its own capacity limit. ( Nutanix Portal )

This is a good example of monitoring terminology that can be misleading on the exam. Because the administrator is looking at future resource needs for clusters, it is easy to assume the warning is about the cluster being under-provisioned. However, Nutanix labels this condition as PC Under-provisioned, and the documentation ties it to Prism Central consumption, not the cluster’s resilience threshold or a failed scale-out event. Operationally, the response is to review Prism Central sizing and determine whether scale-out or resizing is required to support the monitored environment. Based on the Nutanix documentation wording, B is the correct answer. ( Nutanix Portal )

Here the uploaded answer key says C, but current Nutanix documentation says the opposite. Nutanix’s Live vDisk Migration Across Storage Containers documentation explicitly states that during an ongoing vDisk migration you cannot perform operations such as clone the VM, resize the VM, or take a snapshot. Nutanix also states, under DR considerations, that you should remove the VM from the protection domain or protection policy, migrate the vDisks, and then add the VM back afterward. That means the actions listed in option C are specifically blocked during vDisk live migration. ( Nutanix Portal )

Because all four answer choices are problematic against the current documentation, this is one of the questions I would flag as flawed in the source bank. The most accurate real-world Nutanix answer is: you should not perform snapshot, clone, resize, or DR policy/protection-domain operations during the migration. So although the uploaded key marks C, the official docs indicate that C is not actually allowed. For your final study document, this question should ideally be corrected or rewritten because the documented AHV behavior does not cleanly support any listed option as a valid “can perform during migration” task. ( Nutanix Portal )

The wording “security drift” points to SCMA rather than AIDE. In Nutanix security hardening guidance, SCMA scheduling is the control that determines how often SCMA runs, with schedule options such as hourly, daily, weekly, and monthly. That makes the SCMA schedule the setting that changes the cadence of security drift checking without changing the underlying controls themselves. ( Nutanix Portal )

AIDE is a file-integrity mechanism and has its own role, but the question is specifically asking about how often the platform checks for drift in a broader security-configuration sense. Changing the list of entities inspected or baseline enforcement behavior would alter scope or enforcement semantics, not merely frequency. The most direct administrative answer is to change the schedule for SCMA. From an exam perspective, Nutanix often separates what runs, how it is enforced, and when it runs into different settings. Here the requirement is only about “how often,” so option B is the precise match. ( Nutanix Portal )

Nutanix documentation is very clear on this point: Secure Boot is not supported if the VM uses IDE disks. Nutanix also states that for AHV, if Secure Boot is enabled for UEFI mode, the IDE interface is not supported and SATA should be used for the VirtIO ISO in that configuration. So an IDE-attached disk is a direct blocker to enabling Secure Boot. ( Nutanix Portal )

This is one of those areas where the exam expects you to know compatibility rules, not just feature names. UEFI is actually part of the supported Secure Boot path, so option D is not the blocker. The CVM’s RAM and node cache storage are unrelated to whether the VM’s firmware and bus configuration can support Secure Boot. The administrative fix is usually to convert the VM to a supported configuration using UEFI and non-IDE bus types where required. Therefore, among the listed options, the condition that prevents completion of the task is the presence of IDE disks, making C correct. ( Nutanix Portal )

For AHV, when enabling LACP, Nutanix documentation specifies the Active-Active bond type, also described as balance-tcp. Nutanix explicitly ties LACP and link aggregation behavior to the Active-Active configuration and notes that this configuration sets LACP fallback to Active-Backup on AHV hosts. That makes C the correct bond type for an LACP-enabled design. ( Nutanix Portal )

It is also important to understand why Active-Active with MAC Pinning is wrong here. Nutanix documentation states that the MAC-pinning / balance-slb style must not be used with link aggregation protocols such as LACP. So even though both options sound like they distribute traffic, only one is compatible with LACP. Active-Backup provides redundancy, but not the LACP behavior being requested. “No Uplink Bond” obviously does not meet the requirement. Even without the missing exhibit from the uploaded file, the Nutanix networking documentation makes the intended answer clear: Active-Active is the bond type used when enabling LACP on AHV. ( Nutanix Portal )

Nutanix’s NCC ec_enablement_check identifies containers where erasure coding could save space, but administrators still need to apply judgment based on workload behavior. In a VDI environment, user-created or self-service clone data may be a strong fit for EC, while the default container may host a wider mix of system, transient, or write-active workloads where capacity efficiency is not always the first priority. Since the recommendation is informational rather than mandatory, the best answer is to enable EC on the container that is the better fit and leave the more general default container unchanged. That makes D the most balanced answer.

This question is testing operational discretion. “Enable EC everywhere NCC mentions” is too simplistic. Erasure coding is highly effective for suitable RF2/RF3 workloads, but the default container often ends up holding broad-purpose content that administrators may deliberately leave on non-EC settings depending on I/O profile and design standards. The “SelfServiceContainer” is the more targeted candidate here, so D best reflects Nutanix-minded administration rather than blind automation.

Nutanix Flow Network Security provides built-in Quarantine category values, including Strict and Forensic. Nutanix documentation states that Strict blocks all inbound and outbound traffic, while Forensic is specifically intended for situations where you want to quarantine the VM but still allow connectivity for forensic access. The documentation also notes that you can configure the allow behavior for forensic mode, which is exactly what this incident-response scenario requires. Therefore A is the correct answer.

This is a strong example of why built-in categories matter operationally. The organization wants a change that can be applied quickly during an incident and does not require redesigning existing policies. Assigning the VM to the Quarantine: Forensic category accomplishes both goals: it uses an existing system-defined control and preserves investigator access. Strict mode would over-isolate the VM and block the forensic tooling too. Thus the most authentic Nutanix response is A.

Nutanix guidance for compression settings and current container behavior aligns with inline compression as the standard default, with an immediate (0-minute) delay model. Nutanix compression FAQ guidance also states that when deploying compression on a container, the recommended default delay for inline compression is 0, reinforcing the expected default posture for new storage containers. That makes A the correct answer. ( Nutanix )

This is one of those questions where older platform knowledge can cause confusion because historical versions and terminology evolved. The safest exam-oriented approach is to follow the current documented behavior and Nutanix’s own recommended default delay. Post-process compression with 60 minutes used to be a common mental model in older storage discussions, but the modern expected answer for a newly created container in Prism Central is inline compression with a 0-minute delay. Therefore A is the right choice. ( Nutanix )

The uploaded answer key lists B, and that is the safest supported choice among the options because it preserves the cluster’s all-NVMe storage profile rather than introducing mixed media tiers or an all-SSD design that changes the storage architecture. In Nutanix cluster expansion planning, keeping node media type aligned with the existing cluster profile is the normal supported design principle, especially when the existing cluster is already Full-NVMe. Nutanix storage documentation also emphasizes a single storage-pool-per-cluster model and consistent cluster design so that performance and capacity are optimized predictably across the nodes.

The alternative answers introduce obvious design mismatches. Mixed NVMe+HDD or SSD+NVMe nodes would materially change latency and tier behavior, while adding an all-SSD node into a Full-NVMe cluster would also break architectural consistency. Although the exact public expansion-matrix wording was not surfaced in the search results, the answer set itself strongly points to the only media-aligned option: one All NVMe node with 96 TiB RAW capacity. So for an exam-prep answer aligned with Nutanix design logic and the provided key, B is the correct choice.

If the organization has changed naming conventions and needs VM disks placed into containers that comply with the new standard, the direct operational method is to move the VM’s virtual disks to the correct container. In Nutanix, that action is done through live vDisk migration. This preserves workload availability while relocating storage placement to the new destination container that matches policy. The question is really about correcting existing placement, not just defining intent for future objects. ( Nutanix Portal )

The other options do not solve the immediate placement problem. A storage policy can influence behavior, but it does not retroactively relocate already placed vDisks unless that policy is tied to an action that changes their storage location. Image placement policy affects images, not existing VM disk residency. Renaming storage containers is not the right operational answer here because naming policy changes usually result in a need to place workloads into the correct containers, and administrators do not rely on renaming alone to change where current VM data lives. Nutanix’s management model supports live movement of VM storage, so A is the practical and technically correct answer. ( Nutanix Portal )

When Prism Central is scaled out for resiliency, the design goal is not only to have multiple Prism Central VMs, but also to ensure they are not placed together in a way that creates a common point of failure. Nutanix documentation around anti-affinity policies explains that VM-VM anti-affinity is used to keep selected VMs from running on the same host. In a scaled-out Prism Central deployment, this placement separation is the logical next step to strengthen resiliency, because it prevents the Prism Central instances from collapsing onto the same physical host and failing together during a node outage. ( Nutanix )

The other options are either unrelated or not the primary required follow-up. Witness Service is associated with Metro Availability and DR designs, not with the baseline requirement of distributing Prism Central VMs after scale-out. Protection Domain protection may be useful in some cases, but it does not solve co-location risk. HA reservations on the hosting Prism Element cluster address restart capacity, not placement diversity. The most direct resiliency improvement after scaling out Prism Central is to enforce separation between the Prism Central VMs. That is why D is the best answer. ( Nutanix )