2026 Latest NCP-NS dumps – Instant Download PDF [Q38-Q62]

NO.38 Which statement best describes the function of an External Network in Flow Virtual Networking?

NO.39 What does placing a policy in Monitor mode accomplish?

NO.40 An administrator has deployed a microsegmentation policy in Nutanix Flow that allows certain VM traffic based on Active Directory (AD) user group membership.
Users in a specific AD group report they are unable to access the VMs, while other users can connect without issues. The administrator suspects the problem is related to identity-based policy mapping.
What should the administrator do to troubleshoot and resolve the access issue related to the identity-based policy?

NO.41 An administrator plans to upgrade the Network Controller in a Flow Virtual Networking deployment. The environment includes multiple AHV clusters managed by Prism Central.
Which prerequisite must be verified before upgrading the Network Controller?

NO.42 Refer to th exhibit.

An administrator needs to setup a Syslog server to capture the Flow Network Security Hit logs. Which module name should be selected?

NO.43 An administrator has created a VPC with the following subnets:
10.1.1.0/24
10.1.2.0/24
10.1.3.0/24
What action must be taken for these networks to be externally routable?

NO.44 Which policy mode records traffic without enforcing rule actions?

NO.45 Which step is required before placing the Flow Network Security software bundle on a local web server?

NO.46 An administrator is deploying a multi-tier (web, app, database) application on a Nutanix cluster using AHV. The administrator needs to allow internal communication between tiers and provide external access to the web tier.
How should the administrator satisfy this requirement?

NO.47 Refer to the exhibit.

An organization uses an FNS-NG Service Chain to steer application traffic through a pair of third-party firewall Network Function VMs operating in Active/Standby mode. Users suddenly report that all application access is blocked. The administrator reviews Prism Central -> Network & Security -> Network Functions, where the summary shown in the exhibit is displayed. Additional information: Alert: “Network Function ‘PANW Service Insertion’ virtual NIC pair(s) are unhealthy.” Both firewall VMs are powered on and reachable. The security policy using the service chain has not been changed. Based on the exhibit and findings, what is the most likely cause of the traffic outage?

NO.48 An administrator has been tasked with configuring virtual switches and setting the appropriate MTU size for a Nutanix cluster to optimize network performance.
The cluster needs to support high-throughput traffic between VMs and ensure compatibility with external networks. The administrator needs to configure the virtual switches and MTU size to enable jumbo frames while ensuring that all nodes and network components are properly aligned to prevent packet loss or fragmentation.
What is the first step to configure the virtual switches and MTU size in a Nutanix cluster for optimal network performance?

NO.49 An administrator plans to upgrade a Nutanix cluster running AHV and Prism Central. The current cluster is on AOS 6.10, and the administrator wants to move to AOS 7.3 while ensuring all components remain compatible.
What is the correct upgrade order to minimize downtime and maintain cluster functionality?

NO.50 Which policy mode blocks all traffic that is not explicitly allowed by the policy?

NO.51 An enterprise has deployed a VPC called FinanceVPC using Nutanix Flow Virtual Networking. The Finance team needs the following connectivity:
Internal servers in the VPC must reach an on-premises corporate data-center via a point-to-point encrypted link.
Some servers in the VPC must also access the public internet with source NAT and receive inbound access via floating IPs.
The corporate network uses overlapping IP space with other VPCs in the environment, so address translation is necessary for those workloads.
The networking design must support routing via BGP for future site expansions and provide low-latency north-south connectivity.
Which actions should the administrator take to satisfy this requirement?

NO.52 A new multi-tier application is being deployed across several subnets in a Nutanix environment. The security team wants to create a Flow Network Security Policy to restrict traffic between the tiers, but the complete matrix of required network ports and protocols is not fully documented.
Which strategy should the team employ first to accurately capture the necessary communication patterns without risking application outage?

NO.53 In a Nutanix deployment, when is the Network Controller automatically enabled?

NO.54 When setting up a Network Function VM for Service Insertion, an administrator needs to configure the vNICs that will be used for redirecting traffic.
What is the correct configuration for the vNICs on the Network Function VM?

NO.55 An administrator needs to delegate the management of security policies to a dedicated SecOps team. To enforce the principle of least privilege, the administrator assigns the predefined Flow Policy Author role to a user on the team.
The user confirms they can create, monitor, and enforce security policies. However, when attempting to build a new application security policy for a set of newly deployed VMs, the user reports they are unable to create a new category to group these VMs. The option is not available in the Prism Central UI.
Which statement explains this behavior?

NO.56 An administrator is designing a Transit VPC to provide shared corporate services (e.g., DNS) for two tenant VPCs:
VPC-A requires WAN access using NAT.
VPC-B requires WAN access without NAT.
Both VPCs connect to the Transit VPC for shared services hosted on the corporate network.
Shared services residing in the Transit VPC use routed IP addressing for WAN connectivity.
Which two configuration elements should the administrator implement on the Transit VPC? (Choose two.)

NO.57 An administrator is tasked with configuring an application policy for a two-tier public website with Web and DB components. The database servers need to communicate with each other for replication, but the web servers should not be able to communicate with each other. The administrator configures the policy… and sets it to Enforce mode.
Later testing reveals that the web servers are able to communicate with each other.
What should the administrator do to resolve this?

NO.58 Before creating a new Application Security Policy in Prism Central, what prerequisite must exist?

NO.59 What is the additional resource requirement for each Prism Central VM when enabling Flow Virtual Networking on a Small Prism Central deployment?

NO.60 An administrator has a VPC with a single active gateway node that successfully peers with an external router using a single BGP GW and session.
To eliminate a single point of failure, the administrator deploys a second BGP gateway to the VPC. After the second gateway is added and shows a healthy state, the external router still only sees a single BGP session.
What is the most likely reason for the second session not being established on the external router?

NO.61 An administrator needs to allow communication between several VPCs without requiring to configure routes in the physical network or using a dynamic routing protocol like BGP.
How should the administrator satisfy this requirement?

NO.62 A VDI policy in Flow Network Security allows access to specific resources only when users from the Admins Active Directory group log into a VM.
Some administrators report that when they log in to certain VMs, access is blocked (default deny applies), while the same user accounts work correctly when logged on to other VMs.
When checking the VM details in Prism Central, operations observes that the expected dynamic category based on the logged-in AD user is not assigned on the affected VMs.
What is the most likely reason for this behavior?