Nutanix NCP-MCI-6.10 Nutanix Certified Professional - Multicloud Infrastructure (NCP-MCI v6.10) Exam Practice Test

When diagnosing CPU performance issues, CPU Ready Time and CPU Usage are the key indicators of whether more vCPUs are needed.

Option A (VM CPU Ready Time) is correct:

High CPU Ready Time means the VM is waiting for CPU resources, indicatingCPU contention.

Option B (VM CPU Usage) is correct:

If CPU usage isconsistently high, adding more vCPUsmay improve performance.

Option C (Host CPU Usage) is incorrect:

Host-wide CPU usage does not indicate whether a specific VM needs more vCPUs.

Option D (Host Memory Swap Out Rate) is incorrect:

Memory swappingaffects RAM performance, not CPU allocation.

In a dark site deployment, LCM does not automatically fetch updates from the internet. The administrator must manually upload compatibility bundles.

Option B (The latest compatibility bundle has not been uploaded) is correct:

Thecompatibility bundlecontainsfirmware mappings, allowing LCM to detect the correct BIOS version.

Option A is incorrect:

AOSdoes not need to be upgraded firstfor a BIOS update.

Option C is incorrect:

TheBMC firmware does not always need updatingbefore BIOS updates.

Option D is incorrect:

In a dark site deployment,LCM does not rely on an internet connection, so webserver access is not required.

Before performing any LCM (Life Cycle Manager) updates on a Nutanix cluster, it is essential to ensure that the AOS (Acropolis Operating System) is updated to the required or recommended version. AOS updates provide foundational enhancements, security patches, and compatibility improvements, which are critical for the successful execution of LCM updates.

From theNutanix Enterprise Cloud Administration (ECA)course materials:

“LCM updates depend on the underlying AOS version. Before proceeding with any hardware or software updates through LCM, administrators must ensure that the cluster is running a supported AOS version. This step ensures compatibility and prevents issues that can arise from dependencies between AOS and the update components.”

Additionally:

“AOS upgrades should be performed first to bring the cluster to a version that supports the desired LCM updates for components like BIOS, firmware, and hypervisors. This aligns the management stack with the latest features and security enhancements.”

Therefore, updating AOS before performing LCM updates is a mandatory prerequisite to ensure stability and supportability for the entire cluster lifecycle management process.

Nutanix Multicloud Infrastructure documentation explains that Recovery Plans and Protection Policies are designed to scale using Categories rather than per-VM assignments. Categories provide metadata that allows grouping of VMs by purpose, business unit, application tiers, boot order, and network requirements. The documentation states that Recovery Plans "consume categories so that VMs matching those categories are automatically included in the DR workflow." Categories also allow automatic updates so that when a VM is added, removed, or changed, the DR plan does not require modification. This method is specifically recommended for environments with numerous workloads and variable application tiers. Scripts, naming conventions, and static ratios do not provide the dynamic grouping and automation that categories provide.

Application discovery in Prism Central requires sufficient Prism Central resources and an active internet connection to retrieve application signatures.

Option A (Sufficient Prism Central VM resources) is correct:

Prism Central needsadequate CPU and memoryto process application signatures and discovery data.

Option B (Internet connection) is correct:

Application discovery depends on Nutanix’scloud databaseto recognize application patterns.

Option C (API key and key ID) is incorrect:

API keys are not requiredfor automatic application discovery.

Option D (Network controller enabled) is incorrect:

Application discoverydoes not depend on a network controller feature.

Nutanix High Availability (HA) determines the order in which VMs are restarted after a host failure or during host start sequences. Documentation states:

“VM restart priority levels defined in the High Availability policy determine which VMs are restarted first during node recovery or host power-on events.”

Nutanix HA allows administrators to assign priority levels such as High, Medium, or Low. The system ensures VMs with higher priority power on before other workloads.

Host affinity simply pins VMs to physical hosts and does not control boot order. Agent VMs are infrastructure components and not involved in workload priority. Recovery plans apply only to DR workflows, not standard host restart behavior.

Thus, the correct answer is High Availability.

Nutanix LCM architecture supports firmware, BIOS, BMC, disk controller, and drive updates only when the environment includes multiple nodes that can provide redundancy during the upgrade process. The LCM documentation specifies that firmware upgrades require node evacuation and rolling upgrade sequencing so that workloads remain available. A single-node cluster does not have node-level redundancy and therefore cannot support firmware upgrade operations that require putting a node into maintenance automatically. The guidance clearly states that “firmware upgrades are not supported for single-node clusters because the host cannot be safely placed into a maintenance mode during the LCM workflow.” LCM is supported for software inventory, but not for firmware activation on single-node clusters. This explains why no firmware updates appear in the LCM interface.

NutanixIntelligent Operations Reports(Option D) provideweekly summariesof cluster health, performance, and resource consumption.

These reports includerecommendations for optimization, alerts, and forecasted resource usage trends.

Option A (Admin Center LCM)managesfirmware and software upgradesbut does not generate weekly performance reports.

Option B (Prism Central Syslog)is used forlogging and event tracking, not performance summaries.

Option C (Infrastructure VMs List)provides astatic list of VMsbut does not generate periodic reports.

To ensureVM high availability (HA) in the event of a node failure, the administrator mustenable HA Reservation (Option B)in Prism Element.

High Availability (HA) in Nutanix ensures that VMs restart on another available node if the host they are running on fails.

Option A (Redundancy Factor 3)affectsstorage redundancy, not VM failover.

Option C (Protection Domains)is related todisaster recovery (DR), not local HA failover.

Option D (RF1 Storage Container)would reduce fault tolerance and is not recommended for production environments.

Nutanix documentation explains that Reserved Capacity for a storage container allocates a guaranteed amount of physical space exclusively for that container. The internal description is:

“Reserved Capacity is space carved out from the storage pool for guaranteed use by a container. When a container’s reserved allocation approaches exhaustion, alerts are raised even if the overall cluster has ample free space.”

This means that although the physical cluster capacity may be sufficient, the container itself may hit its reserved limit, triggering an out-of-space forecast. Advertised Capacity determines an upper usage limit but does not produce this behavior. Replication Factor affects total usage but cannot explain container-only exhaustion when the cluster is fine. Compression levels influence data reduction but not capacity alerting mechanisms.

Thus, an oversized Reserved Capacity value is responsible for the alert.

The requirement states:

• Custom apps use Volume Groups

• VM + VG must remain consistent together

• Lowest possible RPO is required (RPO → 0)

• Must survive cluster failure

Nutanix data protection documentation clearly states:

“Synchronous replication provides an RPO of zero by ensuring every write is committed on both sites before acknowledgement.”

Additionally:

“When protecting application VMs using Volume Groups, both the VM and the Volume Group must be placed in the same Consistency Group to ensure write-order fidelity and to preserve database or application integrity during failover.”

This is critical because Volume Groups operate at the block layer, and placing them in separate groups breaks atomic write-order correctness.

Option analysis:

A. Metro AHV provides HA-style zero RPO but is not the required mechanism here because the question specifically references protection policies and VGs, which Metro does not orchestrate in the same way.

B. Synchronous replication alone is not sufficient unless VMs and VGs are inside the same consistency group.

C. This is the correct and complete solution: synchronous replication + consistency grouping ensures RPO0 and atomic updates.

D. NearSync has RPO 1–15 minutes, not the lowest possible RPO.

Therefore, placing both VMs and VGs in the same consistency group under Synchronous Replication is the correct method.

In Nutanix AHV-based clusters, when you want to ensure that a specific VM (e.g., a critical VM like a domain controller) is powered on before other VMs during a host startup or failover scenario, you use the Agent VM configuration setting.

Here’s the exact explanation from the Nutanix ECA course:

“Agent VMs are special VMs that are automatically powered on before other user VMs during host startup or recovery. This ensures that critical VMs, such as those that provide essential services, are always available first.”

In contrast:

✅Recovery Plan (A) — This is used in the context of DR and failover, typically with Nutanix Leap.

✅Host Affinity (B) — Host affinity rules control placement policies of VMs but not startup priority.

✅High Availability (C) — HA ensures VMs are restarted on surviving hosts but does not control startup order.

Therefore, setting the VM as an Agent VM guarantees that it is powered on before the other VMs during host start-up. Let me know if you’d like steps on how to configure an Agent VM within Prism Central or Prism Element!

Nutanix Life Cycle Manager (LCM) relies on validated firmware and driver bundles for hardware components. For GPU-enabled hosts, LCM documentation states:

“GPU-enabled AHV hosts require GPU driver bundles to be uploaded manually via the Direct Uploads mechanism so that LCM can validate and upgrade the necessary GPU components during workflow execution.”

GPU drivers are vendor-specific and not always available in the standard catalog, so the administrator must upload them before LCM can orchestrate the upgrade.

Running in dark site mode does not provide missing GPU bundles. Creating agent VMs is unrelated to GPU driver operations. Updating NCC improves validations but does not provide GPU support files.

Therefore, Direct Uploads of GPU driver bundles is required.

When using Metric or Entity Charts in Prism Central for performance monitoring, the most granular preset time interval that can be selected is1 hour.

From theNutanix Enterprise Cloud Administration (ECA)course materials:

“Prism Central provides performance data visualization with customizable time intervals. The smallest preset interval for metric and entity charts is 1 hour, providing highly detailed performance information over short periods.”

This allows administrators to monitor performance fluctuations at a fine-grained level, aligning with best practices for troubleshooting and optimization.

In Nutanix Prism Central, if anadministrator is also an approverfor an approval policy, it can result in repeated prompts for approvals even after the original request is approved. This occurs because the system requires the approver (who is also the requester) to explicitly confirm actions involving protected snapshots to maintain compliance and avoid accidental deletion.

From theNutanix ECA documentation:

“When an administrator is configured as an approver in the approval policy, repeated approval requests may occur because the same user must explicitly confirm actions they initiated, such as deleting protected snapshots. This ensures administrative actions are fully deliberate.”

The Nutanix ECA course covers storage optimization techniques for Nutanix storage containers, particularly for workloads like persistent desktops, which require efficient capacity utilization due to their repetitive data patterns. Persistent desktops typically store user-specific data and configurations, making them ideal candidates for storage optimization techniques like compression, deduplication, or erasure coding. The question asks for the setting that provides thebest possible capacity savings.

Extract from Nutanix Enterprise Cloud Administration (ECA) Course Documents:

Module: Storage Management, Section: Storage Optimization"Erasure Coding provides the highest capacity savings for workloads with large amounts of data, such as persistent desktops. By distributing data and parity across nodes, Erasure Coding reduces storage overhead compared to replication factor (RF) while maintaining fault tolerance."

Module: Storage Configuration, Section: Optimization for Virtual Desktops"For persistent desktop workloads, Erasure Coding is recommended to maximize capacity savings. It is more efficient than compression or deduplication alone, as it reduces the storage footprint by encoding data across nodes, making it ideal for environments with high data redundancy."

Explanation of Options:

A. Erasure CodingThis is the correct answer. Erasure Coding (EC-X) is a storage optimization technique in Nutanix AOS that distributes data and parity information across nodes, reducing the storage overhead compared to traditional replication factor (RF) settings. For persistent desktops, which often have large datasets with redundant patterns, Erasure Coding provides significant capacity savings by encoding data efficiently while maintaining fault tolerance. The ECA course highlights that Erasure Coding is particularly effective for workloads with cold or less frequently accessed data, which aligns with persistent desktop storage.

Supporting Extract:"Erasure Coding can achieve up to 50% or more capacity savings compared to RF=2 for workloads like virtual desktops, making it the most effective optimization for capacity-constrained environments."

B. Inline compression with a delay of 0 minutesThis is incorrect. Inline compression reduces data size in real-time as it is written to storage, but it provides less capacity savings compared to Erasure Coding for persistent desktops. Compression is effective for reducing the size of compressible data, but persistent desktops often benefit more from Erasure Coding due to their larger datasets and redundancy. Additionally, a delay of 0 minutes means compression occurs immediately, which may increase write latency without maximizing savings. The ECA course notes:"Inline compression is useful for general workloads but is less effective than Erasure Coding for high-capacity workloads like persistent desktops."

C. Inline Deduplication of Read CachesThis is incorrect. Deduplication removes duplicate data blocks, but “Inline Deduplication of Read Caches” is not a standard Nutanix feature for storage containers. Nutanix supports inline and post-process deduplication, but these apply to data writes, not specifically to read caches. Even if deduplication were applied, it would provide less capacity savings than Erasure Coding for persistent desktops, as deduplication depends on data similarity, whereas Erasure Coding optimizes storage across all data types. The ECA course states:"Deduplication is effective for workloads with high data similarity, but Erasure Coding provides broader capacity savings for large-scale desktop deployments."

D. Post Process DeduplicationThis is incorrect. Post-process deduplication analyzes and removes duplicate data after it is written, which can save capacity but is less efficient than Erasure Coding for persistent desktops. Deduplication requires significant data similarity to achieve savings, and its post-process nature delays optimization, potentially leading to temporary storage overuse. The ECA course clarifies:"Post-process deduplication is suitable for specific workloads, but Erasure Coding is preferred for persistent desktops due to its superior capacity efficiency and immediate applicability across nodes."

Additional Context from ECA:

Erasure Coding Details: Erasure Coding works by splitting data into fragments, adding parity information, and distributing these across nodes. For a storage container with persistent desktops, enabling Erasure Coding (e.g., with a stripe width of 4+2) can significantly reduce the storage footprint compared to RF=2 or RF=3. The ECA course notes:"Erasure Coding is ideal for containers with large datasets, such as VDI environments, where capacity savings are critical."

Persistent Desktops: These desktops store user data and configurations, leading to large, redundant datasets. Erasure Coding’s ability to optimize storage across nodes makes it the best choice for capacity savings, as confirmed by the ECA materials.

Supporting Reference from Web Results:

The Nutanix Bible (https://www.nutanix.com/go/the-nutanix-bible) supports the ECA documentation: "Erasure Coding (EC-X) provides the highest capacity efficiency for workloads like persistent desktops, reducing storage overhead by distributing data and parity across nodes, outperforming compression and deduplication in capacity-constrained environments."

Metro Availability in Nutanix requires that the primary and secondary storage containers be configured identicallyto ensuredata replication consistency.

Option C (The destination storage container is not empty) is correct:

Theremote storage container must be emptybefore Metro Availability can be enabled.

Existing data can cause conflictsand prevent it from appearing in the "Compatible Remote Sites" list.

Option D (Both storage containers must have the same name) is correct:

Metro Availability requires thatstorage containers have identical names across clusters.

If namesdo not match, thestorage container will not be listed as compatible.

Option A is incorrect: Metro Availability works regardless of hardware vendor differences.

Option B is incorrect:Compression does not affect compatibilitybut may impact performance.

The Nutanix ECA course provides detailed procedures for performing hardware upgrades, such as adding host memory, to ensure cluster stability and data availability. Upgrading host memory requires safely preparing the node to avoid disrupting running VMs or cluster operations.

Extract from Nutanix Enterprise Cloud Administration (ECA) Course Documents:

Module: Cluster Management, Section: Hardware Upgrades"Before performing hardware upgrades, such as adding host memory, the node must be placed into maintenance mode. This ensures that all VMs are migrated to other nodes and the host is safely isolated from cluster operations."

Module: Host Maintenance, Section: Maintenance Mode"Placing a node into maintenance mode is the first step for hardware upgrades. Maintenance mode migrates all VMs to other nodes, stops the Controller VM (CVM), and prepares the host for safe shutdown or hardware changes."

Explanation of Options:

A. Gracefully stop the host by using the out of band management interfaceThis is incorrect. Stopping the host via the out-of-band management interface (e.g., IPMI or iLO) without first entering maintenance mode risks disrupting running VMs and cluster services. The ECA course warns:"Shutting down a host without maintenance mode can cause VM crashes and data unavailability, as VMs are not migrated."

B. Remove node from the clusterThis is incorrect. Removing a node from the cluster is a permanent action that detaches it from the cluster’s metadata and storage pool, requiring re-imaging to rejoin. It is not appropriate for a temporary hardware upgrade like adding memory. The ECA course states:"Removing a node is not required for hardware upgrades and should be avoided, as it disrupts cluster configuration."

C. Execute "shutdown -h now" from the AHV command line interfaceThis is incorrect. Running shutdown -h now on the AHV host without entering maintenance mode will abruptly stop the host, potentially crashing VMs and disrupting cluster operations. The ECA course notes:"Directly shutting down a host via CLI without maintenance mode risks data loss and service disruption."

D. Place node into maintenance modeThis is the correct answer. Placing the node into maintenance mode is the first step for hardware upgrades, as it safely migrates all VMs to other nodes, stops the CVM, and prepares the host for shutdown or hardware changes. The ECA course emphasizes that maintenance mode ensures cluster stability during upgrades.

Supporting Extract:"To upgrade host memory, place the node into maintenance mode using Prism Element or the CLI command ncli host maintenance_mode. This ensures safe VM migration and host isolation."

Additional Context from ECA:

Maintenance Mode Process: In Prism Element, maintenance mode can be enabled underHardware > Host > Enter Maintenance Mode. The process automatically migrates VMs using live migration, stops the CVM, and isolates the host. For AHV, the CLI command is ncli host maintenance_mode id= enable=true.

Memory Upgrade: After entering maintenance mode, the host can be safely powered off to add memory, then powered back on and exited from maintenance mode.

Supporting Reference from Web Results:

The Nutanix Bible (https://www.nutanix.com/go/the-nutanix-bible) confirms: "Maintenance mode is the required first step for host hardware upgrades, ensuring VMs are migrated and the node is isolated before changes like memory upgrades."

Question 155 [Manage Nutanix clusters]

Which Nutanix feature allows administrators to expand a cluster by adding new nodes without downtime?

A. AHV Protection Domains

B. Prism Central

C. Scale-out Architecture

D. Metro Availability

Answer: C

For Disaster Recovery to function correctly, the source and destination storage containers must have identical names.

Option C (Storage container name mismatch) is correct:

If thestorage container name at the DR site does not match, Nutanix cannot mapsnapshots and replication data.

This causesfailover operations to fail, even though data exists.

Option A (NGT not installed) is incorrect:

NGT is needed for application-consistent snapshots, butnot required for crash-consistent snapshots.

Option B (Windows updates) is incorrect:

OS updates do not affect replication availability.

Option D (Storage RF factor mismatch) is incorrect:

Replication works across different RF factors, but performance may vary.

In a Nutanix cluster, Replication Factor 2 (RF2) means that each piece of data has two copies: a primary and a replica. To safely remove a node while ensuring data redundancy and cluster health, the system must have enough nodes to maintain the RF2 protection and complete the removal.

From the Nutanix Enterprise Cloud Administration (ECA) documentation:

“The minimum number of nodes required for a safe host removal in an RF2 cluster is four. This ensures that even after removing a node, there are enough remaining nodes to continue hosting the primary and replica data copies, meeting the RF2 requirement.”

The logic is:

In a 3-node RF2 cluster, there isn’t enough redundancy to safely remove a node without impacting data availability.

A 4-node RF2 cluster allows safe removal of one node while still ensuring two copies of all data remain.

Thus, the minimum number of nodes required for a safe host removal in an RF2 cluster is 4

Data-in-Transit Encryption ensures that replication traffic is encrypted while being sent over the internet.

Option D (Enable Data-in-Transit Encryption) is correct:

This encryptsreplicated data between clusters, ensuring security againstman-in-the-middle attacks.

Option A (Self-encrypting drive) is incorrect:

This protects data at rest, not during transmission.

Option B (UEFI Secure Boot) is incorrect:

Secure Boot prevents unauthorized OS modifications, but doesnot encrypt network traffic.

Option C (Data-at-Rest Encryption) is incorrect:

This encryptsstored data but does not secure replication traffic.

RF3 (Replication Factor 3) clusters require sufficient reserved capacity to tolerate failures without data loss.

Option C (Set Reserve Capacity for Failure to Auto Detect) is correct:

Auto Detect dynamically calculates the necessary reserved spacebased on cluster size and RF settings.

It ensures thatenough storage remains available in case of a node failure.

Option A (Set Reserve Storage Capacity to 20%) is incorrect:

The required storage reservationdepends on the number of nodes and RF level, not a fixed percentage.

Option B (Set Reserve Capacity for Failure to None) is incorrect:

Without reserved capacity,a node failure could lead to data unavailability.

Option D (Set Reserve Memory Capacity to 20%) is incorrect:

This setting applies toRAM, notstorage resiliency.

Nutanix performance troubleshooting guidelines emphasize the importance of adequate vCPU resources when diagnosing single-VM performance issues. The documentation states that “under-provisioned CPU is a primary cause of perceived storage latency and throughput limitations, as storage I/O processing and VirtIO-SCSI operations depend heavily on VM compute resources.”

Running a Windows Server VM with only one vCPU significantly constrains its ability to queue and process disk I/O, handle interrupts, and run kernel-level services. This is especially true when multiple disks are attached. Adding a second controller does not solve underlying CPU bottlenecks. Adjusting br0 TCP settings is not applicable to storage. Increasing CVM resources is unnecessary because the problem is isolated to a single VM while the cluster and other VMs perform normally.

Therefore, increasing vCPU allocation is the required corrective action.

To automate the deployment of a large number of Linux VMs (such as 100), each with similar base configurations but unique hostnames, local configurations, and additional package installations,Cloud-Initis the most appropriate approach. Cloud-Init is a widely supported industry-standard tool for automating the initialization and configuration of Linux instances at first boot.

From theNutanix Enterprise Cloud Administration (ECA)course materials:

“Cloud-Init is the recommended method for configuring Linux virtual machines during deployment in Prism Central. It allows administrators to inject configuration scripts and user data that customize the VM at boot time, including hostname, network settings, user creation, and package installations.”

Specifically:

“Using Cloud-Init, you can create a template or base image for the Linux VMs and then customize each VM deployment by passing individualized configuration parameters, ensuring that while the base configuration remains consistent, each VM has unique settings such as hostname or installed software.”

This method is far superior to manual configuration, which is impractical for 100 VMs, and it’s not suitable to use SysPrep (which is for Windows-based customization). VM templates alone would provide only the base image; they do not address unique per-VM settings.

Therefore,Cloud-Initensures a repeatable, scalable, and fully automated deployment process that aligns with the Nutanix best practices for deploying large numbers of Linux VMs with unique configurations.

Active-Active bonding allows multiple network interfaces to be used simultaneously, improving bandwidth and redundancy.

Option B (Active-Active) is correct:

This mode enablesload balancing across all available adapters, providinghigher throughput and fault tolerance.

Option A (No Uplink Bond) is incorrect:

Without a bond, VMscannot benefit from multiple adapters.

Option C (Active-Active with MAC pinning) is incorrect:

MAC pinningbinds traffic to a single NIC, limiting bandwidth distribution.

Option D (Active-Backup) is incorrect:

This modeonly provides failover, not increased bandwidth.

vGPU-enabled VMs can only be migrated if the destination host has a compatible GPU and sufficient resources.

Option A (Target host must have sufficient resources) is correct:

The target hostmust have the same GPU model and enough available resourcesto support the VM.

vGPUcannot be live-migrated across incompatible hardware.

Option B (vGPU profile change) is incorrect:

The profiledoes not need to be changedas long as the target host has the same configuration.

Option C (Agent VM required) is incorrect:

Agent VMs are not necessaryfor vGPU migration.

Option D (Host affinity) is incorrect:

Host affinitylimits movement, butis not a prerequisite for migration.

Understanding the Exhibit & the Alert

The alert states:

"The cluster is using password-based SSH access for the CVM."

"Password-based remote login is enabled on the cluster."

"It is recommended to use key-based SSH access instead of password-based SSH access for better security."

This means that the nutanix user can log in to Controller VMs (CVMs) using a password, which is a security risk.

Corrective Action: Enabling Cluster Lockdown

✅(C) Enable Cluster Lockdown. (Correct Answer)

Cluster Lockdown Mode restricts password-based SSH access and forces key-based authentication.

This prevents users from logging into CVMs using passwords, enhancing cluster security.

To enable Cluster Lockdown:

Go to Prism Central or Prism Element.

Navigate to Settings → Security → Cluster Lockdown.

Enable Cluster Lockdown Mode.

Evaluating the Other Answer Choices

❌(A) Rename the nutanix user. (Incorrect)

The nutanix user is a built-in system account required for cluster operations.

Renaming the user will not prevent SSH access via password.

❌(B) Block port 22 on the CVM firewall. (Incorrect)

Blocking port 22 (SSH) will completely disable SSH access, including key-based authentication.

This may break cluster management and troubleshooting operations.

❌(D) Delete the nutanix user. (Incorrect)

The nutanix user is a critical system account required for cluster functionality.

Deleting the account will cause serious issues with cluster management.

Multicloud Infrastructure References & Best Practices

Nutanix Security Best Practices:

Always use key-based SSH authentication instead of password-based logins.

Enable Cluster Lockdown Mode to enforce security policies.

Regularly audit user access to ensure security compliance.

Cluster Lockdown Benefits:

Prevents unauthorized SSH access via passwords.

Enforces public key authentication, reducing brute-force attack risks.

Strengthens CVM security against potential exploits.

Categories in Nutanix are used to group resources and require only a name and a value for definition.

Option A (A name and a value) is correct:

Categoriesrequire a name (e.g., "Production VMs")and a value (e.g., "Tier 1").

These are then applied to VMs, storage, and other resources forpolicy-based management.

Option B (Policy and Entity) is incorrect:

Policiesuse categories but are not required to define a category.

Option C (Service and Scope) is incorrect:

Categoriesdo not require servicesor a defined scope.

Option D (Catalog and Template) is incorrect:

These apply toself-service provisioning, not categories.

Snapshots that are part of an active recovery operation cannot be deleted until the process is completed or manually canceled.

Option A (Active recovery in progress) is correct:

Nutanix does not allow deletion of snapshots ifthey are being used in an ongoing recovery process.

The administrator shouldverify whether the snapshot is currently part of a Protection Domain or Disaster Recovery (DR) plan.

Option B (Ransomware encryption) is incorrect:

Nutanix snapshots are immutable by defaultandcannot be encrypted by external threats.

Option C (Approval policy denial) is incorrect:

Snapshot deletionsdo not require manual approval, unless controlled by an external workflow system.

Option D (Snapshot corruption) is incorrect:

Nutanixuses checksums to prevent corruption, so snapshots cannot besilently damaged.

Windows Defender Credential Guard requires UEFI firmware and Secure Boot to function properly.

Option B (Enable UEFI with Secure Boot) is correct:

Credential Guardrequires a UEFI-based boot moderather thanLegacy BIOS.

Secure Boot ensures only trusted OS components load, reducing attack surface for credential theft.

Option A (Update vCPU to 8) is incorrect:

Increasing vCPUs does not impactCredential Guard compatibility.

Option C (Use Windows Server 2022) is incorrect:

Windows Server 2019supports Credential Guard; upgrading to 2022 isnot required.

Option D (Update Memory to 16GB) is incorrect:

Credential Guard has no minimum RAM requirementbeyond general OS needs.

Storage Policies in Nutanix allow administrators to configuredata protection and performance settingsat thestorage container level.

Replication Factor (RF)definesthe number of copies of datastored across nodes for fault tolerance.

Encryptionensures thatdata at rest is protectedvia Nutanix-native encryption methods.

Option A (Storage Containers and Volume Groups)refers tostorage organization, not policies.

Option C (Shares and Object Stores)applies tofile and object storage services, not VM storage policies.

Option D (Data Protection and Security)is a broad term but does not definespecific policy attributes.

The Nutanix ECA course provides guidance on performance monitoring and troubleshooting for VMs, including metrics to analyze when determining whether additional vCPUs are needed. The scenario involves a VM experiencing performance issues, with the cluster performing well overall, suggesting the issue is VM-specific.

Extract from Nutanix Enterprise Cloud Administration (ECA) Course Documents:

Module: Performance Monitoring, Section: VM Performance Metrics"To determine if a VM requires additional vCPUs, analyze VM CPU Usage and VM CPU Ready Time. High CPU Usage indicates the VM is under heavy load, while high CPU Ready Time suggests the VM is waiting for CPU resources, both justifying additional vCPUs."

Module: Troubleshooting, Section: VM Performance Issues"When a VM experiences performance issues, VM CPU Usage and VM CPU Ready Time are critical metrics. CPU Usage shows demand, while CPU Ready Time indicates contention or scheduling delays, helping determine if more vCPUs are warranted."

Explanation of Options:

A. VM CPU UsageThis is correct. VM CPU Usage measures the percentage of CPU resources the VM is consuming. High CPU Usage (e.g., consistently above 80–90%) indicates that the VM is under heavy load and may benefit from additional vCPUs to handle the workload. The ECA course emphasizes:"VM CPU Usage is the primary metric to assess whether a VM’s CPU allocation is sufficient for its workload."

B. VM CPU Ready TimeThis is correct. VM CPU Ready Time measures the time a VM is ready to run but waiting for CPU resources from the hypervisor due to contention or oversubscription. High CPU Ready Time (e.g., above 5–10%) suggests that the VM is not getting enough CPU cycles, and adding vCPUs could alleviate the issue. The ECA course notes:"High VM CPU Ready Time indicates CPU contention, often resolved by adding vCPUs or optimizing resource allocation."

C. Host Memory Swap Out RateThis is incorrect. Host Memory Swap Out Rate indicates memory pressure on the host, causing memory pages to be swapped to disk. While this can affect VM performance, it is unrelated to CPU performance and does not justify adding vCPUs. The ECA course states:"Host Memory Swap Out Rate is relevant for memory-related issues, not CPU allocation decisions."

D. Host CPU UsageThis is incorrect. Host CPU Usage measures the overall CPU utilization of the host, not the specific VM. Since the cluster is performing well overall, high Host CPU Usage is unlikely, and it does not directly indicate whether the VM needs more vCPUs. The ECA course clarifies:"Host CPU Usage is a cluster-wide metric and less relevant for diagnosing VM-specific CPU performance issues."

Additional Context from ECA:

Performance Monitoring Tools: In Prism Element or Prism Central, VM CPU Usage and CPU Ready Time can be monitored underVM > Monitoror through dashboards. These metrics provide insight into the VM’s CPU demand and contention.

Adding vCPUs: The ECA course advises caution when adding vCPUs, as over-allocation can increase CPU Ready Time due to scheduling overhead. However, if both CPU Usage and Ready Time are high, adding vCPUs is justified.

Supporting Reference from Web Results:

The Nutanix Bible (https://www.nutanix.com/go/the-nutanix-bible) supports: "For VM performance issues, analyze VM CPU Usage and CPU Ready Time to determine if additional vCPUs are needed, as these metrics directly indicate CPU demand and contention."

Nutanix Capacity Planning and Runway calculations analyze CPU, memory, and storage growth trends independently. The “Overall Runway” metric reflects the shortest runway across these three resources. The Capacity Planning documentation explains that “the scenario result may show the cluster in a healthy state if the most critical resource remains sufficiently available, even when the overall runway falls below longer-term thresholds.”

Storage is often the dominant factor in determining long-term viability. If the storage runway remains strong, the system may indicate that the environment is in good shape even though the overall runway appears shorter due to CPU or memory projections. Because the question refers to the scenario still indicating a good cluster state, the most accurate interpretation is that storage runway remains healthy, and thus the system does not consider the cluster at risk.