Nutanix NCP-NS-7.5 valid study dumps : Nutanix Certified Professional - Network and Security (NCP-NS) 7.5

An administrator has a VPC with a single active gateway node that successfully peers with an external router using a single BGP GW and session. To eliminate a single point of failure, the administrator deploys a second BGP gateway to the VPC. After the second gateway is added and shows a healthy state, the external router still only sees a single BGP session. What is the most likely reason for the second session not being established on the external router?

• A. The second BGP gateway requires a BGP session configured to peer with the external router.
• B. Network Security Groups are blocking BGP traffic from the second gateway's IP address.
• C. The BGP Hold-down timer on the external router is set too high.
• D. The external router needs BGP peering configuration pointing to the IP address of the first gateway node.

When creating a VPC, enabling the Transit VPC toggle changes the role of the VPC. What does the Transit VPC toggle do?

• A. Forces NAT for all external subnets
• B. Creates a hub-and-spoke VPC for routing
• C. Converts all Overlay subnets into VLAN subnets
• D. Enables DHCP relay for routed subnets

During a security review, the administrator confirms that the existing security policy does not explicitly allow traffic from Environment: Development to Environment: Production. A VM in the Development category was still able to reach a Production VM over IPv6. What is the most likely cause of this behavior?

• A. The policy was misconfigured and allowed all Layer 2 broadcast traffic.
• B. The Allow All IPv6 option in the policy was selected.
• C. The VM was using a static IPv6 address.
• D. An isolation policy was incorrectly applied instead of an application policy.

An administrator needs to isolate communication between VMs in Production and Development environments. Each VM is categorized by Environment and Site category values. The administrator wants this isolation to apply only to VMs located at Site: Branch-001. Which configuration best meets the requirement?

• A. Create an Isolation Policy between Environment:Production and Environment:Development. Scope the policy to Site: Branch-001.
• B. Create a Quarantine Policy between Environment:Production and Environment:Development. Scope the policy to Site: Branch-001.
• C. Create a Quarantine Policy blocking traffic between (Environment: Production + Site: Branch-001) and (Environment: Development + Site: Branch-001).
• D. Create an Isolation Policy blocking traffic between (Environment: Production + Site: Branch-001) and (Environment: Development + Site: Branch-001).

Refer to Exhibit:

An organization uses an FNS-NG Service Chain to steer application traffic through a pair of third-party firewall Network Function VMs operating in Active/Standby mode. Users suddenly report that all application access is blocked. The administrator reviews Prism Central - > Network & Security - > Network Functions, where the summary shown in the exhibit is displayed. Additional information: Alert: "Network Function
'PANW Service Insertion' virtual NIC pair(s) are unhealthy." Both firewall VMs are powered on and reachable. The security policy using the service chain has not been changed. Based on the exhibit and findings, what is the most likely cause of the traffic outage?

• A. The service-chain health check failed to reroute sessions to the healthy firewall.
• B. One of the Network Function vNIC pairs lost dataplane connectivity, interrupting traffic until health is stabilized.
• C. The inbound vNIC on SE-PA-VM Firewall-2 failed, preventing redirected packets from reaching the firewall.
• D. Firewall policy synchronization was not configured when the standby firewall became active.