Nutanix NCP-CI-AWS Practice Questions

An administrator is planning an NC2 deployment and wants to connect to AWS Services privately from the corporate VPC without going through the public internet. Which connectivity solution should the administrator use?

A. Point-to-Site VPN

B. Gateway Endpoint

C. VTEP Gateways

D. Site-to-Site VPN

B. Gateway Endpoint

Gateway Endpoint:

A Gateway Endpoint in AWS allows you to connect to supported AWS services privately without going through the public internet. This setup provides secure and efficient connectivity directly from the corporate VPC to the required AWS services.
Gateway Endpoints support services such as Amazon S3 and DynamoDB and are ideal for scenarios where private connectivity to these services is needed.

An administrator is tasked with adding an AWS account to the NC2 console. A requirement is to configure an AWS IAM user with the appropriate permissions. Which permission must be assigned to the user?

A. lAMFullAccess

B. lAMReadOnlyAccess

C. AmazonEC2ReadOnlyAccess

D. AmazonEC2FullAccess

Explanation:
To add an AWS account to the NC2 console, an AWS IAM user needs to be configured with the appropriate permissions to manage the EC2 resources. The required permission for the IAM user includes full access to manage EC2 instances, volumes, and related resources.

AmazonEC2FullAccess:

This permission grants full access to all EC2 resources, including the ability to create, modify, and delete instances, volumes, security groups, and more.
Essential for NC2 operations to manage the lifecycle of EC2 instances and associated components within the AWS environment.

Why Not Other Permissions:

IAMFullAccess: Grants full access to IAM resources but not specifically needed for EC2 operations.
IAMReadOnlyAccess: Only provides read access to IAM resources, insufficient for managing EC2 instances.
AmazonEC2ReadOnlyAccess: Provides read-only access to EC2 resources, insufficient for creating or modifying instances and other resources.

An administrator is deploying an NC2 cluster on AWS in the us-west-2 region. A VPC, management subnet, and a VM subnet are already created in the target region.
The management subnet has a local route and a route to the internet. The subnet has a route and a route to the NAT gateway. During the deployment, the management subnet appears in the drop-down list in the Create Cluster wizard, but cannot be selected.
What is the cause of this problem?

A. The subnet has both an IPv4 CIDR block and an IPv6 CIDR block.

B. The subnet has an IPv4 CIDR block but does not have an IPv6 CIDR block.

C. The subnet has a direct route to an Internet gateway.

D. The subnet does not have route to a Site-to-Site VPN connection through a virtual private gateway.

A. The subnet has both an IPv4 CIDR block and an IPv6 CIDR block.

The Nutanix Create Cluster wizard may not support selecting subnets that have both IPv4 and IPv6 CIDR blocks due to compatibility or configuration constraints.
When a subnet with both CIDR blocks is present, it can cause issues in the selection process during cluster creation, as the system might not be able to properly handle or recognize the dual-stack configuration.
Ensuring that the management subnet has only an IPv4 CIDR block, without an IPv6 CIDR block, could resolve this issue and allow for successful selection in the cluster creation wizard.

An administrator needs the permissions to create and manage multiple organizations and clusters in NC2, as well as manage user access for the entire company. What role should be assigned to meet the minimum requirements of this task?

A. Organization Administrator

B. Customer Administrator

C. Customer Security Administrator

D. Cluster Administrator

B. Customer Administrator

Explanation:
The role of "Customer Administrator" in Nutanix Cloud Integration with AWS (NC2) is designed to meet the requirements of creating and managing multiple organizations and clusters, as well as managing user access for the entire company.

Roles and Permissions:

Customer Administrator: This role has the broadest set of permissions, allowing the user to create and manage organizations, clusters, and user access across the entire company. It encompasses administrative control over multiple aspects of the NC2 environment.

Capabilities:

Organization Management: Ability to create and manage multiple organizations.
Cluster Management: Full control over creating, configuring, and managing clusters.
User Access Management: Manage user roles and permissions, ensuring that the right individuals have access to the necessary resources.

Why Not Other Roles:

Organization Administrator: Limited to managing organizations but not clusters and user access at the company level.
Customer Security Administrator: Focuses on security aspects, lacking broader administrative capabilities.
Cluster Administrator: Limited to managing clusters without the ability to manage organizations and user access comprehensively.

Which statement is true regarding AWS account requirements?

A. IAMFullAccess permission gets configuration details for supported AWS resources.

B. AWSCloudFormationFullAccess role is required to create a CloudFormation stack.

C. An AWS root user can be used for any deployment or operations related to NC2.

D. NC2 on AWS uses AWS Secrets Manager for maintaining any stored secrets.

B. AWSCloudFormationFullAccess role is required to create a CloudFormation stack.

Explanation:
To create a Cloud Formation stack, the AWSCloudFormationFullAccess role is required.
This role grants the necessary permissions to create, update, and delete CloudFormation stacks, which are essential for deploying and managing AWS infrastructure using CloudFormation templates.
Cloud Formation stacks are often used to automate the deployment of complex infrastructures, including those required for NC2 on AWS.
Proper permissions ensure that the deployment process is seamless and adheres to the security and operational policies of the organization.

An administrator is deploying an NC2 cluster into an existing AWS VPC.
The cluster deployment fails, with the following error message:

Why has the deployment failed?

A. The administrator has not created the necessary Security Group.

B. The administrator has not configured the Security Group to manage the shared subnet.

C. Shared subnets are not supported for Nutanix clusters.

D. Outbound Internet access is not configured on the VPC.

A. The administrator has not created the necessary Security Group.

Explanation:
The administrator has not created the necessary Security Group:

The error message indicates that the creation of network interfaces in a shared subnet requires specifying a security group. This means that the necessary security group has not been created or assigned to the network interfaces.
Creating the appropriate security group and ensuring it is associated with the network interfaces during cluster deployment should resolve this issue.