Nutanix NCP-MCI-7.5 Nutanix Certified Professional - Multicloud Infrastructure (NCP-MCI) 7.5 Exam Practice Test

Nutanix documentation for Performing Failover in PD-based DR includes the exact error message quoted in the question: “Protection domain is already active on source site ... Please trigger migrate from source site to activate the protection domain.” Nutanix shows this message when the protection domain is still active on the source cluster and the proper action is a planned migrate from the source, not an activate at the target. In other words, the source cluster is still reachable and authoritative, so trying to activate the protection domain on the other side is the wrong operation. That makes D the correct answer. ( Nutanix Portal )

This is a classic Nutanix DR distinction between planned migration and unplanned failover/activation. If the primary cluster is still available, Nutanix expects the administrator to use migrate from the source site. Activation at the destination is reserved for failover conditions when the source cannot safely coordinate the move. The error itself tells you the reason if you read it carefully: the protection domain is still active on the source site. Therefore the root cause is that the administrator is trying to activate the PD while the primary cluster is still reachable and still owns the active copy, which is exactly option D. ( Nutanix Portal )

Nutanix security documentation is clear that vTPM data includes crucial encryption keys and that those keys must be protected through the Nutanix-supported mechanisms. Nutanix also states that encryption keys must be backed up, and third-party-style backup approaches do not protect vTPM device data correctly. If the required key backup material is missing during recovery, the restored environment cannot reconstruct the vTPM-backed trust context for those VMs. In practical terms, that means the VMs cannot be started successfully in the expected protected state because the vTPM keys cannot be recovered without the backup file. That makes D the best answer. ( Nutanix Portal )

This is why Nutanix treats vTPM-enabled workloads as a special class in protection and recovery planning. The issue is not that a new blank vTPM can simply be attached during restore, and it is not that the external KMS alone automatically recreates the VM’s vTPM identity. The trust chain depends on the protected key material. Without that backup information, Windows BitLocker and other vTPM-dependent security features cannot be restored to their original usable state. So even though the environment uses an external KMS for software encryption, the Nutanix-documented principle still applies: without the necessary key backup, the vTPM-enabled VMs cannot be recovered successfully, which is exactly what option D states. ( Nutanix Portal )

When the requirement is to deploy multiple remote clusters efficiently from a central point, Nutanix’s intended tool is Foundation Central. Nutanix documentation describes Foundation Central as a way to manage several Foundation instances from a single pane of glass, allowing administrators to create clusters of remote nodes. That design matches the scenario perfectly: five newly purchased clusters, remote deployment, and a need for efficiency and centralized control. ( Nutanix Portal )

The other tools are more limited in scope. Foundation for Windows/Mac and a standalone Foundation VM are useful for imaging and cluster creation, but they do not provide the same centralized, multi-cluster orchestration model that Foundation Central provides. Phoenix ISO is a recovery or re-imaging tool and is not the normal answer for greenfield mass deployment. In short, this question is less about “which tool can build a cluster” and more about “which tool is purpose-built for remote, scaled deployment across many clusters.” Nutanix positions Foundation Central exactly for that use case, so B is the best answer. ( Nutanix Portal )

In Prism Central VM efficiency and behavioral-learning views, Nutanix groups inefficient VMs into categories such as over-provisioned, inactive, bully, and constrained. A constrained VM is one that does not have enough resources for its workload and is therefore experiencing pressure. Nutanix documentation ties constrained status to signs such as CPU readiness, memory swapping, or other stress indicators that show the VM is not adequately provisioned for what it is trying to do. That means the best interpretation is that those VMs are lacking sufficient resources, which is option B. ( Nutanix Portal )

This category is different from the other distractors. An inactive VM is mostly idle and not making meaningful use of its assigned resources. An over-provisioned VM is wasting capacity because it was allocated too much. A VM that is merely “consuming too much CPU” could be a bully VM or simply a busy VM, but that alone does not define the constrained classification. Nutanix uses the constrained label to signal a right-sizing opportunity in the direction of adding or adjusting resources, not reclaiming them. Therefore the most accurate answer is B, because constrained VMs are the ones that are short on sufficient resources for their workload behavior. ( Nutanix Portal )

Nutanix documentation for Prism Central point-in-time backup states that Prism Central supports up to 30 days of restore points for recovery. This is documented consistently across Nutanix guidance for backup to Nutanix Objects, AWS S3, and generic S3-compliant storage. Because the platform wording is explicit and repeated, the correct answer is 30 days. ( portal.nutanix.com , portal.nutanix.com , portal.nutanix.com )

This is a retention-boundary question, so it is best answered directly from the official limit rather than from memory. The values 7, 14, and 90 days are exam-style distractors, but Nutanix’s supported restore-point duration for Prism Central recovery is 30 days. In practical terms, that means administrators should plan their backup retention and operational expectations around that documented maximum rather than assuming indefinite or quarterly restore history.

Here the uploaded answer key says C, but current Nutanix documentation says the opposite. Nutanix’s Live vDisk Migration Across Storage Containers documentation explicitly states that during an ongoing vDisk migration you cannot perform operations such as clone the VM, resize the VM, or take a snapshot. Nutanix also states, under DR considerations, that you should remove the VM from the protection domain or protection policy, migrate the vDisks, and then add the VM back afterward. That means the actions listed in option C are specifically blocked during vDisk live migration. ( Nutanix Portal )

Because all four answer choices are problematic against the current documentation, this is one of the questions I would flag as flawed in the source bank. The most accurate real-world Nutanix answer is: you should not perform snapshot, clone, resize, or DR policy/protection-domain operations during the migration. So although the uploaded key marks C, the official docs indicate that C is not actually allowed. For your final study document, this question should ideally be corrected or rewritten because the documented AHV behavior does not cleanly support any listed option as a valid “can perform during migration” task. ( Nutanix Portal )

Nutanix documentation for Active Directory authentication in Prism Element states that the default LDAP port is 389, while port 636 is used for LDAPS, which provides encrypted LDAP traffic. Because the question explicitly says the administrator wants all traffic encrypted, the correct port is 636. That is the standard LDAPS answer and the one Nutanix documents directly.

The missing exhibit is not actually necessary to answer the question because the encryption requirement itself is enough. Ports 443 and 9440 are associated with web interfaces or management access, not LDAP directory authentication transport. Port 389 is unencrypted LDAP unless other mechanisms are layered on top. Nutanix’s own directory-authentication docs make the intended answer clear: use LDAPS on port 636. Therefore C is the authentic Nutanix answer.

Nutanix volume groups support attaching storage to one or more VMs. Nutanix documentation for creating volume groups states that if you want to attach a volume group to multiple VMs, you select the Shared option. That is the key requirement when building an application-level high-availability configuration where two database VMs need shared access to the same block storage construct. ( Nutanix Portal )

The other options either describe different capabilities or are not the documented mechanism for this requirement. External client access is used when exposing the volume group to external iSCSI initiators, which is not what the question asks. Storing vDisks on different containers does not create shared access semantics. “Multi-writer mode via storage policy” is not the standard Nutanix answer here; Nutanix’s documented configuration language for this use case is the Shared setting on the volume group itself. So if the requirement is two VMs, same application data path, and application-level HA, the correct Nutanix configuration is to create the VG in shared mode. ( Nutanix Portal )

Nutanix DR documentation for test failover states that recovered test VMs are brought up in a test virtual network at the recovery AZ, separate from production. Nutanix also documents that when multiple recovery directions or multiple recovery AZs are involved, recovery planning should be created per target direction and the required production and test network mappings need to exist for the recovery plan being tested. If recovery must be tested in both directions between the two clusters, each side effectively needs a production network and a test network. That makes two production networks and two test networks the most complete and correct answer.

This question is really about symmetry. One-direction failover testing can be done with a simpler mapping set, but the moment the requirement says test recovery in both directions, each cluster must be able to act as a recovery site and provide an isolated test-recovery network. That is why a single shared test network is not the best answer here. Nutanix’s recovery-plan structure and test-failover guidance support this interpretation. Therefore C is the correct and most practical answer.

The requirement is straightforward: there is one source site (Site A) and the workload must be replicated to two destination clusters, each with potentially different RPO settings. In Nutanix DR design terminology, that is a one-to-many replication pattern. Nutanix documentation for multisite disaster recovery explains that a single protection policy can include replication schedules to multiple recovery clusters, which is how a source can protect workloads to more than one target with different schedule definitions. That makes D the correct answer.

The other choices describe different topologies. Many-to-One means multiple sources targeting one destination. Many-to-Many is broader bidirectional or multiple-source/multiple-target logic than the question requires. Two-Way-Mirroring is not the correct pattern for one source sending copies outward to two other sites. Nutanix’s protection-policy model is specifically flexible enough to define different replication schedules toward separate destinations, which is why this exact scenario is best labeled One-to-Many. So for an exam-aligned and documentation-consistent answer, D is the right choice.

The uploaded source file shows the answer key as B, but the supporting exhibit or calculation context is missing from the provided document, so a full mathematical derivation cannot be verified from the question bank itself. Because of that missing context, the safest exam-faithful response is to preserve the source answer of 1125 IOPS while being transparent that the exact intermediate values used to reach that number are not visible in the provided material.

From a Nutanix policy perspective, IOPS throttling is implemented through storage policies to control or cap workload consumption and prevent noisy-neighbor impact. The conceptual goal is to set a value high enough to accommodate the intended steady-state workload while still enforcing policy boundaries. In practice, administrators usually choose a value above the observed average to allow normal variance, bursts, and scheduler overhead rather than matching the average exactly. That design logic is consistent with an answer larger than 800 IOPS. Given the choices and the source key, 1125 is the preserved answer for this batch, but this is one of the questions where the missing exhibit should ideally be restored before using it as a final study reference. ( Nutanix )

Nutanix documents Logbay as the preferred and supported mechanism for efficient platform log collection. The AHV administration guide states that you can use Logbay only after the CVM is installed on the node or the AHV compute node has been added to the cluster, which directly matches the wording in option A. Nutanix’s web-console guidance also points administrators toward Logbay as the preferred collection method rather than relying only on manual UI collection.

The other options describe tools or behaviors that do not match Nutanix’s documented collection path for this scenario. Panacea is not the standard answer for supported cluster log-bundle collection in the way described. Storage policy reports are not substitutes for host/CVM diagnostic logs, and ADS does not function as an automatic diagnostic bundle exporter for arbitrary contention events. Because the question asks for both the supported approach and a key prerequisite, Logbay with the documented availability condition is the most precise Nutanix answer. Therefore A is correct.

This workload stores MP4 video files, which are typically large, sequential, and already compressed. For data with those characteristics, additional compression work often provides little benefit and can create unnecessary processing overhead. The best optimization is to disable compression for that workload through a storage policy so cluster resources are not wasted trying to compress data that is unlikely to shrink meaningfully. ( Nutanix Portal )

The other choices are weaker for this scenario. Capacity deduplication is generally most beneficial for repeated blocks or common-image patterns, not unique media streams. Erasure Coding is a capacity-efficiency feature, but on a small 3-node cluster and for a write-heavy recording pattern, it is not the primary performance optimization answer. Moving the data to Files changes the access method, but it does not address the specific inefficiency already identified in the storage settings. Nutanix exams often test whether the administrator can match the data service to the workload profile. Since MP4 content is already compressed, removing unnecessary compression overhead is the most targeted and sensible answer, making D correct. ( Nutanix Portal )

Nutanix documentation confirms that a Prism Element cluster can be registered with only one Prism Central at a time, so option B is false. Nutanix also documents support for deploying multiple Prism Central instances on the same Prism Element cluster, so option A is false as well. The presence of a dedicated Nutanix doc for deploying multiple Prism Central instances on one PE cluster directly disproves option A. ( Nutanix Portal )

That leaves C and D. Nutanix documentation does not position Marketplace as the standard mechanism described in this context for deploying additional Prism Central instances. By contrast, Nutanix clearly documents registration and unregistration workflows, including the fact that clusters can be unregistered when no longer needed and later registered again. Since a cluster can only be attached to one Prism Central at a time, repeating register/unregister operations is a valid administrative action in supported workflows. Therefore D is the best valid statement among the given options. This question is mostly testing whether you know the difference between deployment support and registration exclusivity. Multiple PC instances may exist on the cluster, but registration to management is still one-at-a-time. ( Nutanix Portal )

For Prism Central–based DR between on-prem Availability Zones, Nutanix documentation states that the clusters participating in the protection workflow must be registered with Prism Central. In the standard same-management-plane deployment model, the primary and recovery clusters need to be available to the Prism Central instance orchestrating the policy and recovery objects. That is why B is the expected exam answer for successfully configuring asynchronous replication with a protection policy in this scenario. ( Nutanix )

The other options reflect common misconceptions. Identical storage-container naming is not a mandatory prerequisite because Nutanix supports vStore mapping to map source and destination containers when names differ. The strict less than 5 ms RTT requirement is associated with synchronous-style designs such as Metro Availability, not ordinary asynchronous replication. Matching Prism Central versions is good practice but is not the core requirement expressed in the documented prerequisites. Since the protection policy workflow depends on managed registration within the Prism Central DR architecture, B is the best answer. ( Nutanix )

Nutanix documentation states that the default erasure coding window for write-cold data is seven days. That means newly written or recently modified data is not immediately converted into erasure-coded stripes. If there was a large increase in data usage over a weekend, the administrator might not yet see the expected space savings because the new data has not aged long enough to fall within the EC processing window. That is why D is the correct answer.

This is a timing question more than a configuration question. The issue is not that EC has failed or deactivated automatically; it is that the data may still be considered too “hot” for the erasure-coding policy to process under the default window. DSIP and Prism Central health are irrelevant to whether EC space savings appear on a storage container. Nutanix separates the eligibility window from the fact that EC is enabled. Therefore, after a sudden growth event, lower-than-expected savings are best explained by the default erasure coding window settings, which is option D.

When Prism Central is scaled out for resiliency, the design goal is not only to have multiple Prism Central VMs, but also to ensure they are not placed together in a way that creates a common point of failure. Nutanix documentation around anti-affinity policies explains that VM-VM anti-affinity is used to keep selected VMs from running on the same host. In a scaled-out Prism Central deployment, this placement separation is the logical next step to strengthen resiliency, because it prevents the Prism Central instances from collapsing onto the same physical host and failing together during a node outage. ( Nutanix )

The other options are either unrelated or not the primary required follow-up. Witness Service is associated with Metro Availability and DR designs, not with the baseline requirement of distributing Prism Central VMs after scale-out. Protection Domain protection may be useful in some cases, but it does not solve co-location risk. HA reservations on the hosting Prism Element cluster address restart capacity, not placement diversity. The most direct resiliency improvement after scaling out Prism Central is to enforce separation between the Prism Central VMs. That is why D is the best answer. ( Nutanix )

Nutanix does support exposing storage containers for hypervisor access patterns, but Nutanix also clearly recommends not using an AOS storage container as a general-purpose NFS or SMB share. For a temporary exception such as a migration host, the safer and more controlled approach is to whitelist only the exact host that needs access. Using a single host IP with a 255.255.255.255 netmask is the most restrictive option listed and follows the principle of least privilege. That reduces risk during the migration window and avoids broad, unnecessary exposure of the container to an entire subnet. ( Nutanix Portal )

This question is really about administration discipline, not just raw connectivity. Opening the whole subnet might be convenient, but it creates more attack surface and more chance of accidental mounting from unauthorized systems. Nutanix documentation steers administrators toward purpose-built file services, such as Nutanix Files, when they need true shared file access. Since this is only for a temporary migration, the best practice is a tightly scoped NFS allowlist entry for one external host. That makes B the strongest operational and security choice. ( Nutanix Portal )

Nutanix security guidance is explicit on this point. After adding an SSH public key and verifying connectivity, Nutanix recommends disabling password authentication for all CVMs and AHV hosts to reduce interactive access risk. The Security Guide notes that after the SSH key inclusion and connectivity validation are complete, password authentication should be disabled as the next hardening step. That makes B the correct answer.

This is a straightforward hardening sequence question. The administrator has already completed the prerequisite—public-key access is working—so the next step is to remove the weaker interactive method. Core dumps, login banners, and UI session settings do not address SSH authentication exposure. Nutanix’s security model favors moving from password-based remote shell access to key-based access only. Therefore B is the authentic and recommended next step.

Nutanix documentation explains that Projects in Prism Central provide logical groupings of infrastructure resources and user access, and that you can add users and user groups to a project while also allowing clusters and subnets in that project. That is exactly the mechanism used when a user group needs controlled access to resources drawn from multiple clusters. The project becomes the governance boundary that ties users, roles, and infrastructure scope together. Therefore A. Configure Nutanix Projects is the correct answer. ( Nutanix Portal )

The other choices are unrelated to access scoping across clusters. Advanced Network Controller deals with networking services and policy capabilities, not user resource assignment. Micro Services Platform is not the RBAC/governance feature for multi-cluster access. Availability Zone is relevant for placement and DR topologies, not for delegating cluster resources to user groups. Nutanix’s governance guidance is clear that Projects are the construct used to organize infrastructure resources and assign them to users or groups with the proper RBAC controls. So for a user group that needs access to resources from multiple clusters, the authentic Prism Central action is A. ( Nutanix Portal )

Nutanix documentation states that when you perform an LCM inventory, Life Cycle Manager first checks and updates its own framework before presenting other upgrade options. Nutanix’s guidance for framework updates and recommended upgrade order repeatedly references Perform Inventory as the step that ensures the system discovers and updates the LCM framework itself. That is why A is the correct answer when the goal is specifically to guarantee LCM is upgraded to the latest version. ( Nutanix )

The other actions may be valid parts of broader maintenance, but they do not ensure the LCM framework itself is brought to the latest version. Upgrading AHV or AOS addresses platform components, not the LCM service logic. Running NCC is good pre-upgrade hygiene, but it is not the mechanism that causes LCM to update. Nutanix intentionally ties framework currency to the inventory process, so the correct operational answer is to perform an inventory first. ( Nutanix )

Here the uploaded answer key says B, but the current Nutanix documentation for post-restoration considerations says that after restoring Prism Central, administrators should reset the credentials, and it explicitly lists that as a post-restore action. The same Nutanix page also mentions other follow-up tasks such as reconfiguring the proxy server or FQDN if needed, but resetting credentials is directly named as a required post-restoration consideration. Because the question asks what should be done once Prism Central is restored, the most documentation-faithful answer is D. Reset the credentials. ( Nutanix Portal )

The confusion probably comes from related Nutanix guidance that after a restore, some services may continue with self-signed certificates or rotate certificates as part of Microservices Infrastructure behavior. That can make certificate replacement necessary in some environments, but it is not the clearest universal immediate post-restore action documented in the restoration considerations. By contrast, reset the credentials is explicitly listed in the post-restoration guidance. So for an authentic study guide grounded in Nutanix docs rather than only the source key, D is the correct answer. ( Nutanix Portal )

In Nutanix Elastic VM Storage and shared-storage workflows, the container used across clusters must be created as a Shared storage container. Nutanix documentation for storage container management and container creation in Prism Central explicitly references Creating a Shared Storage Container and Creating a VM with Shared Storage from another HCI Cluster. If the container is not defined as Shared, it will not be eligible for the remote-storage VM placement workflow, so it will not appear as a valid target in the dropdown. ( Nutanix Portal )

The distractors are there to pull attention toward naming and capacity details, but those are not the gating requirement for remote shared-storage presentation. A reservation setting affects capacity planning, not whether the container is exposed as a remote shared-storage option. Hyphens in names and the specific length shown are not the documented reason the container would be absent from this workflow. Nutanix treats shared cross-cluster storage as a specific container type and workflow. Therefore, if the remote container is missing during provisioning, the most likely explanation is that the container type was not configured as Shared. ( Nutanix Portal )

Moving a running VM between hosts in the same cluster without downtime is the exact purpose of live migration in AHV. Nutanix AHV administration guidance treats live migration as the supported mechanism for relocating active workloads between hosts while maintaining service continuity, subject to any migration restrictions such as passthrough devices or CPU compatibility constraints. Because the VM must remain powered on and operating during the move, D. Live migrate within the cluster is the correct answer.

The other options are all recovery or duplication workflows, not mobility workflows. Restoring from a backup or recovery point creates interruption and changes the task from migration to recovery. Cloning from a snapshot creates another copy rather than moving the currently running VM. Nutanix intentionally distinguishes VM recovery operations from VM mobility operations. Since the requirement is in-place movement of a live workload within the cluster, the correct and most direct method is live migration. Therefore D is the authentic Nutanix answer.

The wording “security drift” points to SCMA rather than AIDE. In Nutanix security hardening guidance, SCMA scheduling is the control that determines how often SCMA runs, with schedule options such as hourly, daily, weekly, and monthly. That makes the SCMA schedule the setting that changes the cadence of security drift checking without changing the underlying controls themselves. ( Nutanix Portal )

AIDE is a file-integrity mechanism and has its own role, but the question is specifically asking about how often the platform checks for drift in a broader security-configuration sense. Changing the list of entities inspected or baseline enforcement behavior would alter scope or enforcement semantics, not merely frequency. The most direct administrative answer is to change the schedule for SCMA. From an exam perspective, Nutanix often separates what runs, how it is enforced, and when it runs into different settings. Here the requirement is only about “how often,” so option B is the precise match. ( Nutanix Portal )

Foundation Central is about deployment centralization, not backup, lifecycle upgrades, or automatic registration workflows as its main value proposition. Nutanix documentation describes Foundation Central as a tool that can manage several Foundation instances from a single pane of glass, allowing administrators to create clusters of remote nodes. That statement maps directly to option D. ( Nutanix Portal )

The subtle point here is that the question mentions Marketplace only as the method used to deploy Foundation Central, not as the capability being tested. Once deployed, Foundation Central’s job is to simplify remote cluster creation at scale. It does not replace LCM for software upgrades, nor is its primary role to perform backup and recovery of cluster configurations. Automatic cluster registration may happen as part of broader operational workflows, but it is not the core capability Nutanix emphasizes in the product description. In the context of imaging and deploying many branch-office clusters from a central team, the defining capability is centralized cluster creation and management visibility. That is why D is the right answer. ( Nutanix Portal )

Nutanix security hardening guidance explains that SSH Whitelisted Addresses control which client IPs are allowed to reach the CVM over SSH. If IP restriction is enabled and the new jump box is not on the allowlist, the SSH connection is expected to be refused. In that locked-down state, the correct recovery path is to access the CVM through a local or serial console and update the whitelist to include the new jump box IP. That makes C the correct answer. ( portal.nutanix.com , portal.nutanix.com )

Cluster Lockdown disabling password-based SSH is not the same setting as the SSH allowlist. Prism Central security views can help with visibility, but the key documented mechanism is the whitelist itself. Restarting the CVM does not reset the hardened configuration. Nutanix’s intent is that trusted-source access must be explicitly permitted, and once it is blocked, you need console-level access to make the change safely.

Nutanix security and network-segmentation documentation clearly states that the segmented DSIP and the regular cluster DSIP are different entities, and that Prism Central needs a cluster DSIP in the same subnet to upgrade. In other words, placing the DSIP only in a secondary non-routable segment can break Prism Central’s ability to perform upgrades if Prism Central cannot reach the cluster using the expected subnet path. The documented fix is to maintain or configure a DSIP in the original communication subnet that Prism Central can use. That makes C the correct answer.

The other options are not the Nutanix-documented solution. Proxy ARP is not the prescribed remedy here, and disabling segmentation is unnecessary if the communication requirement can be satisfied by adding the proper DSIP. Uplink redundancy has nothing to do with the management-plane reachability issue in the question. So the authentic fix is to configure an additional DSIP in the original subnet used for Prism Central communication, which is C.

Nutanix AHV documentation for Windows Defender Credential Guard support states that the VM must be configured with UEFI and Secure Boot enabled, and Nutanix security guidance for vTPM explains that vTPM is used to protect Windows credentials and is part of the trusted platform features required by modern Windows security functions. Together, these requirements map directly to option D: enable UEFI firmware, enable Secure Boot, and add a vTPM device.

The other options each contain a flaw. IDE is not the correct secure-boot bus choice in these workflows, legacy BIOS does not satisfy the modern secure boot requirement, and “Generation 2 firmware” is Hyper-V-oriented wording rather than the standard AHV requirement stated in Nutanix docs. The policy in the question explicitly mentions rootkit resistance and credential isolation, both of which are tied to Secure Boot and TPM-backed trust. Therefore Nutanix’s documented VM configuration that satisfies those requirements is exactly what is described in D.

Here the uploaded answer key says D, but official Nutanix documentation supports B. Nutanix documents that for enhanced security of ROBO environments (typically 1- or 2-node clusters), administrators should select Native KMS (remote) for software-based encryption. Nutanix also states in KMS considerations that software encryption using Native KMS is supported for ROBO deployments using the Native KMS (remote) KMS type. Because the question explicitly describes a 2-node ROBO cluster and requires the keys to be stored outside the cluster, the Nutanix-authentic answer is B. Native KMS (remote).

An external KMS is valid in many enterprise encryption designs, but this question is more specific: it asks for the KMS type Nutanix supports and recommends for software encryption on a ROBO cluster. On that narrow requirement, the official docs point to Native KMS (remote) rather than External KMS. So for an authentic study guide aligned to Nutanix documentation, B is the correct answer.

Nutanix documentation for enabling Marketplace in Prism Central explicitly states that a unique data services IP address (DSIP) must be configured on the Prism Element cluster that hosts Prism Central. This is a hard prerequisite for Marketplace enablement and application deployment workflows. In exam terms, the presence of DSIP is not optional convenience; it is a setup requirement Nutanix calls out directly before Marketplace can be used. ( Nutanix )

The other answers are not Marketplace prerequisites in the same direct sense. SMTP is useful for email notifications, LDAP for external authentication, and LACP for network design, but none of those is the documented enabling requirement for Marketplace. Nutanix separates platform application management prerequisites from general infrastructure best practices, and DSIP falls into the former category. So when the exam asks what must already be in place on the Prism Element cluster before enabling Marketplace, the correct answer is A: Data services IP must be configured. ( Nutanix )

The requirement is not to keep the mission-critical VMs together or apart from each other; it is to prevent them from running on a specific set of older hosts. In Nutanix Prism Central policy terms, that is a VM-Host Anti-Affinity Policy. Anti-affinity at the VM-host level allows administrators to mark selected hosts as unsuitable targets for selected VMs, which is exactly what the scenario requires. Therefore C is the correct answer.

The distractors all target the wrong relationship. VM-VM affinity and anti-affinity control how VMs are placed relative to other VMs, not whether they can run on particular hosts. VM-Host Affinity would express a positive preference or requirement to run on a chosen host group, but the question is framed negatively: the VMs must never run on the older hosts. Nutanix’s policy model supports this exact exclusion use case through VM-Host Anti-Affinity. In a long refresh delay scenario, this is the safest operational control to keep sensitive workloads off weaker or undesirable hardware without removing those hosts from the cluster immediately. Therefore C is the authentic answer.

To receive an alert earlier, the administrator must lower the threshold at which the alert’s warning state is triggered. Nutanix alerting works by comparing utilization against configured warning and critical thresholds. If the threshold is lowered, the system reaches it sooner, which gives the administrator more lead time before the environment becomes capacity-constrained. Among the given options, the one that directly performs that function is decreasing the Storage Container Space Usage Exceeded alert Warning threshold, which is option C.

The other choices are weaker or misaligned. There is no meaningful “increase frequency” adjustment that changes when capacity is considered low; it would only change how often checks occur, not the trigger point. Changing the critical threshold does not provide earlier warning notice, which is what the question asks for. The wording also points more naturally to a threshold-based action rather than enabling a different alert family. In Nutanix monitoring, earlier warnings come from making the warning trigger more conservative. Therefore C is the best answer because it causes the alert to fire at a lower usage percentage and provides earlier operational notice.