QUESTION 14
Which action allows an administrator to reuse a single existing policy in a different scope?

QUESTION 15
Refer to Exhibit:

An administrator is tasked with configuring an application policy for a two-tier public website with Web and DB components. The database servers need to communicate with each other for replication, but the web servers should not be able to communicate with each other. The administrator configures the policy… and sets it to Enforce mode. Later testing reveals that the web servers are able to communicate with each other. What should the administrator do to resolve this?

QUESTION 16
What happens when a monitored policy is enforced?

QUESTION 17
Which statement is correct about cloning Application Security Policies?

QUESTION 18
An administrator has been tasked with upgrading the Nutanix cluster to a newer version of AOS. The cluster is running a mix of different versions across nodes… What is the recommended first step when upgrading a Nutanix cluster with different AOS versions across nodes?

QUESTION 19
Users have recently reported intermittent connectivity issues and slower-than-usual application performance for a Nutanix cluster to an administrator. The administrator needs to identify the root cause of these issues by analyzing the health of the infrastructure components. What action should the administrator take first to diagnose the root cause of the problem?

QUESTION 20
When configuring an Application policy, an administrator defines a VM Category Application:MySQL as a Secured Entity. The administrator wants to ensure that traffic between VMs in the Secured Entity is kept to only required replication traffic on the default mysql service port. How should the administrator best accomplish this?

QUESTION 21
An administrator is building a VPC… VPC CIDR: 10.10.0.0/16 Subnet CIDR: 10.10.10.0/24 “Ext_Net_Ext” (NAT): 192.168.1.0/24 “Ext_Net_Internal” (Routed): 172.16.1.0/24 The on-premises application server has an IP address of 172.16.2.50/24. A VM (10.10.10.100) in the VPC Subnet can reach the internet but cannot reach the on-premises server. Which static route needs to be added to the VPC route table to resolve this?

QUESTION 22
An administrator creates a new VPC in No NAT mode to allow VMs in a web tier to reach an external firewall. After deployment… none of the VMs can reach external IP addresses… Which action should the administrator take to restore routed north-south connectivity from the VPC?

QUESTION 23
An administrator needs to ensure all web traffic (HTTP/HTTPS) from a specific subnet (10.100.20.0/24) is redirected through a third-party virtual firewall inside the VPC for Layer 7 inspection before reaching the internet. The firewall VM has an IP of 10.100.30.5 and is connected to a different subnet. What should be done to enforce this specific traffic path?

QUESTION 24
The alert details mention a specific external network. Attempts to assign new Floating IPs to VMs fail, but existing Floating IPs continue to work. What is the cause of this alert?

QUESTION 25
Refer to Exhibit:

An organization uses an FNS-NG Service Chain to steer application traffic through a pair of third-party firewall Network Function VMs operating in Active/Standby mode. Users suddenly report that all application access is blocked. The administrator reviews Prism Central – > Network & Security – > Network Functions, where the summary shown in the exhibit is displayed. Additional information: Alert: “Network Function
‘PANW Service Insertion’ virtual NIC pair(s) are unhealthy.” Both firewall VMs are powered on and reachable. The security policy using the service chain has not been changed. Based on the exhibit and findings, what is the most likely cause of the traffic outage?

QUESTION 26
Which two statements are true with respect to Flow Network Security Policies? (Choose two.)

QUESTION 27
An administrator has deployed a VPC for a multi-tier application on Nutanix AHV. The Web tier requires public internet access, while the App and Database tiers must remain private and isolated. Which steps should the administrator take to configure the external network correctly?

QUESTION 28
An administrator must delegate management of a single tenant VPC to a junior engineer. The engineer should be able to modify that VPC but must not see or change any other VPCs or networking configurations in Prism Central. The administrator wants to meet this requirement using RBAC. Which action should the administrator take to meet this requirement?

QUESTION 29
Which policy mode records traffic without enforcing rule actions?

QUESTION 30
Which step is required before placing the Flow Network Security software bundle on a local web server?

QUESTION 31
An administrator has configured a VPC and associated a NAT external network. A virtual machine connected to a subnet within this VPC is required to be accessible externally. What action must the administrator take to accomplish this?

QUESTION 32
An administrator has created a VPC with the following subnets: 10.1.1.0/24 10.1.2.0/24 10.1.3.0/24 What action must be taken for these networks to be externally routable?

QUESTION 33
What is the additional resource requirement for each Prism Central VM when enabling Flow Virtual Networking on a Small Prism Central deployment?

QUESTION 34
What entity is automatically created on the cluster hosting Prism Central when Microsegmentation is enabled?

QUESTION 35
Which statement accurately describes the behavior of a Flow Network Security policy operating in Monitor mode?

QUESTION 36
An administrator is responsible for managing user access to a Nutanix cluster… configure custom user roles…
What is the first step in configuring and managing user roles for a Nutanix cluster?