Nov-2025 Pass Your NCP-CN Exam at the First Try with 100% Real Exam
Get Real Exam Questions for NCP-CN with New Questions
Nutanix NCP-CN Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 4 |
|
NEW QUESTION # 51
A Platform Engineer is deploying NKP into a highly secure vSphere environment. The NKP cluster will be air-gapped, and must also be FIPS compliant. The OS platform to be used for NKP cluster nodes is RHEL.
What must the engineer do to properly prep an OS image and have it be deployed as a FIPS compliant NKP cluster node?
- A. Verify the OS itself has been placed in fips mode.When performing the NKP image build operation, be sure to include the offline fips override.When performing the NKP cluster deploy operation, be sure to include the FIPS version references for kubernetes and etcd.
- B. Verify the OS itself has been placed in fips mode.When performing the NKP cluster deploy operation, be sure to include the FIPS version references for kubernetes, kubectl and etcd.
- C. Verify the OS itself has been placed in fips mode.When performing the NKP image build operation, be sure to include the offline fips and fips overrides.When performing the NKP cluster deploy operation, be sure to include the FIPS version references for kubernetes, kubectl and etcd.
- D. Verify the OS itself has been placed in fips mode.When performing the NKP image build operation, be sure to include the offline fips and fips overrides.When performing the NKP cluster deploy operation, be sure to include the FIPS version references for kubernetes and etcd.
Answer: D
NEW QUESTION # 52
A Platform Engineer is deploying a new Kubernetes application in Amazon Web Services (AWS) Elastic Container Service for Kubernetes (EKS) and Azure Kubernetes Service (AKS). The engineer's team has decided to use a custom image instead of the default images provided by AWS or Azure for their clusters. What functionality will the engineer lose in both AWS EKS and Azure AKS by choosing to use a custom image?
- A. Ability to use GPUs and persistent storage
- B. Cluster networking and load balancing
- C. Built-in autoscaling and security capabilities
- D. Native monitoring tools, logging, and alerting
Answer: C
NEW QUESTION # 53
A Platform Engineer needs to create an NKP cluster on vSphere infrastructure, using the vSphere provisioning method. The cluster needs to have 3 worker node pools:
First node pool should consist of 6 worker nodes
Second node pool should consist of 3 worker nodes
Third node pool should consist of 3 worker nodesAdditionally, the worker nodes in the first node pool should be set to 10 CPUs, the second node pool workers should be set to 8 CPUs, and the third node pool workers should be set to 6 CPUs. What is the proper way to create the NKP cluster using the NKP CLI?
- A. First, execute the nkp create cluster vsphere command, including the following parameters:--worker-replicas 6--worker-cpus 10Then, execute the nkp create nodepool vsphere command, including the following parameters:--replicas 3--cpus 6
- B. First, execute the nkp create cluster vsphere command, including the following parameters:--worker-replicas 6--worker-cpus 10Then, execute the nkp create nodepools vsphere command, including the following parameters:--replicas 3,3--cpus 8,6
- C. First, execute the nkp create cluster vsphere command, including the following parameters:--worker-replicas 6--worker-cpus 10Then, execute the nkp create nodepool vsphere command, including the following parameters:--worker-replicas 3--worker-cpus 8Then, execute the nkp create nodepool vsphere command, including the following parameters:--worker-replicas 3--worker-cpus 6
- D. When executing the nkp create cluster vsphere command, include the following parameters:--node-pools 3--worker-replicas 6,3,3--worker-cpus 10,8,6
Answer: C
NEW QUESTION # 54
An ecommerce company decides to apply an autoscaling configuration in its NKP cluster due to the fact that on holidays, they experience service drops due to a huge increase of simultaneous traffic.
Which statement best describes the configuration shown in the exhibit?
- A. The autoscaler could increase the number of nodes up to 3, but never reduce it below 15.
- B. The autoscaler could increase the number of nodes as needed, but never reduce it below 3.
- C. The autoscaler could have 15 or 3 nodes.
- D. The autoscaler could increase the number of nodes up to 15, but never reduce the number below 3.
Answer: D
NEW QUESTION # 55
A Platform Engineer is attaching existing Kubernetes clusters to NKP, but some of them have network restrictions, so there is a need to use Secure Tunnel. The Platform Engineer needs to ask the Security Engineer to modify the firewall rules.
What must the firewall rules allow on the attached cluster network?
- A. NTP Service (UDP/123)
- B. iSCSI (TCP/860 & 3260)
- C. HTTPS (TCP/443)
- D. Secured LDAP (TCP/636)
Answer: C
NEW QUESTION # 56
A Platform Engineer is deploying an NKP workload cluster using the nkp create cluster vsphere command. The cluster will be utilized by the company's code-green team and the engineer has already created a code-green NKP workspace on the NKP management cluster.
After issuing the deploy command, the engineer monitored the build using the nkp describe cluster command and confirmed it completed successfully. However, a few hours later, after logging into the NKP UI, the engineer checked the code-green NKP workspace and saw that the NKP workload cluster was not there.
What is the likely reason the NKP workload cluster is not in the code-green NKP workspace?
- A. The vSphere cluster cannot be displayed in the NKP UI unless its Kubernetes version is within 'N - 1' versions of the NKP management cluster's Kubernetes version.
- B. The vSphere service account credentials had expired prior to the engineer's attempt to view the cluster in the NKP UI. Once the credentials are refreshed, the vSphere cluster will reappear in the NKP workspace.
- C. The engineer did not supply the --namespace code-green parameter as part of the nkp create cluster vsphere command, therefore it was created in the default workspace and needs to be manually attached.
- D. NKP vSphere clusters cannot be assigned NKP workspaces and instead are assigned the default NKP workspace. The cluster can be viewed from this workspace instead.
Answer: C
NEW QUESTION # 57
A Platform Engineer is deploying an NKP cluster within an air-gapped AWS environment. However, after an infrastructure planning session with the network team, it's been determined that the default CIDR block range that is used by pods on NKP clusters is already in use in their environment.
How can the engineer ensure there are no collisions between NKP pod traffic and the existing network using that subnet range?
- A. Create an NKP infrastructure provider for AWS in the NKP UI.Select the Advanced Options button from the Network section of the Create Cluster page and specify a unique CIDR block range within the pod network field.
- B. Create an NKP infrastructure provider for AWS in the NKP UI.When deploying the NKP cluster through the UI, specify a unique CIDR block range for the pod network field in the Network section of the Create Cluster page.
- C. Create the NKP cluster's manifest using the nkp create cluster command set and include the pod CIDR block range parameter when generating the cluster manifest.Deploy the NKP cluster manifest.
- D. Because the environment is air-gapped, there will be no network traffic collision concerns and no adjustment needs to be made to the pod network CIDR block range.
Answer: C
NEW QUESTION # 58
A developer asked a Platform Engineer to review a deployment in the cluster called iot-1 in the workspace iot-plant-3, but the engineer does not have the kubeconfig file. Which command is valid for generating the kubeconfig file to review the Kubernetes cluster?
- A. kubectl get secret iot-1 -n kommander > iot-1.conf
- B. nkp get kubeconfig -c iot-1 -w iot-plant-3 > iot-1.conf
- C. nkp get configmaps -n iot-plant-3 -c iot-1 > iot-1.conf
- D. kubectl get kubeconfig --cluster-name=iot-1 -w iot-plant-3 > iot-1.conf
Answer: B
NEW QUESTION # 59
When deploying an NKP cluster onto air-gapped, pre-provisioned servers, Konvoy Image Builder is utilized to prepare the servers to become NKP cluster nodes.
What does the konvoy-image upload command do as a part of this preparation process?
- A. The command is used to upload OS hardening scripts to the server (must be client supplied).
- B. The command uploads artifacts to the servers such as the container runtime, the OS bundle, and Kubernetes components, including optional OS hardening scripts (must be client supplied).
- C. The command uploads artifacts to the servers such as the container runtime, the OS bundle, and Kubernetes components.
- D. The command is used to create a konvoy userid on the servers, as well as upload artifacts to them such as the container runtime, the OS bundle, and Kubernetes components.
Answer: C
NEW QUESTION # 60
A Platform Engineer has deployed NKP and wants to utilize its OOB data storage feature.
What should the engineer enable to support backups within the NKP environment?
- A. Objects S3
- B. Rook Ceph
- C. Volumes iSCSI
- D. MinIO
Answer: B
NEW QUESTION # 61
Which two statements are true regarding deploying NKP on an Azure Kubernetes Service (AKS) Infrastructure? (Choose two.)
- A. Existing AKS clusters must be attached to the Management cluster.
- B. NKP Management cluster with the Kommander component must be installed before installing NKP on AKS cluster.
- C. AKS clusters can be deployed as Management or Pro NKP clusters.
- D. AKS best practices encourage building customized images.
Answer: A,B
NEW QUESTION # 62
After loading the NKP bundles to a private registry in an air-gapped environment, a Platform Engineer now needs the Konvoy bootstrap image to create the bootstrap cluster. The Konvoy image has not been loaded into the registry. Which is the most viable command to load the Konvoy bootstrap image on the bastion host?
- A. nkp load image -f konvoy-bootstrap-image-<version>.tar --to-registry=<REGISTRY_URL>
- B. docker image tag konvoy-bootstrap-image-<version>.tar version docker.io/konvoy-bootstrap version
- C. nkp push bundle --bundle konvoy-bootstrap-image-<version>.tar --to-registry=<REGISTRY_URL>
- D. docker load -i konvoy-bootstrap-image-<version>.tar
Answer: D
NEW QUESTION # 63
A development team is working on a new application that requires access to certain cluster resources. The team needs to ensure that they have limited permissions to avoid unauthorized changes in other environments. Among the tasks they will perform are the following:
Deploy new versions of the application to their specific namespace.
Scale deployments according to demand.
View logs and metrics of their applications to monitor performance.When using the NKP GUI, what type of access should the team configure?
- A. Cluster Role
- B. Kommander Role
- C. NKP Role
- D. Cluster Admin
Answer: C
NEW QUESTION # 64
A Platform Engineer needs to do an air-gapped installation of NKP. This environment needs to run without Internet access and be fully operational, including updates. Docker has been installed, and the NKP bundle exists on a bastion host. What is the first command that the engineer must run to begin the process?
- A. nkp create cluster nutanix
- B. tar -xzvf nkp-air-gapped-bundle_v2.12.0_linux_amd64.tar.gz
- C. nkp push bundle --bundle
- D. docker load -i konvoy-bootstrap-image-v2.12.0.tar
Answer: B
NEW QUESTION # 65
After a finished project, three Kubernetes clusters within a workspace were deleted, so the workspace is empty. Now a Platform Engineer needs to delete the workspace. How should the engineer delete the workspace in NKP?
- A. Run kubectl delete workspace <workspace-name>
- B. From NKP UI, on top menu bar select Global, then select Workspaces in the menu, select the three-dot button for the workspace to delete, and then click Delete.
- C. Ask a workspace user to delete the workspace. The user has the Delete option in their workspace home page.
- D. Run kubectl delete workspace <workspace_name>
Answer: B
NEW QUESTION # 66
An administrator has been trying to deploy an initial AHV-based NKP cluster in a dark site (no Internet connectivity) environment using the command shown in the question.
nkp create cluster nutanix \
--cluster-name=$CLUSTER_NAME \
--control-plane-prism-element-cluster=$PE_NAME \
--worker-prism-element-cluster=$PE_NAME \
--control-plane-subnets=$SUBNET_ASSOCIATED_WITH_PE \
--worker-subnets=$SUBNET_ASSOCIATED_WITH_PE \
--control-plane-endpoint-ip=$AVAILABLE_IP_FROM_SAME_SUBNET \
--csi-storage-container=$NAME_OF_YOUR_STORAGE_CONTAINER \
--endpoint=$PC_ENDPOINT_URL \
--control-plane-vm-image=$NAME_OF_OS_IMAGE_CREATED_BY_NKP_CLI \
--worker-vm-image=$NAME_OF_OS_IMAGE_CREATED_BY_NKP_CLI \
--registry-url=${REGISTRY_URL} \
--registry-mirror-username=${REGISTRY_USERNAME} \
--registry-mirror-password=${REGISTRY_PASSWORD} \
--kubernetes-service-load-balancer-ip-range $START_IP-$END_IP \
--self-managed
Which missing attribute needs to be added in order for the deployment?
- A. --registry-url
- B. --airgapped
- C. --registry-username
- D. --insecure
Answer: B
NEW QUESTION # 67
A company is required by NIST to follow FIPS guidelines for compliance.
What is the first step for enabling FIPS in NKP?
- A. Run the command nkp cluster create <provisioner> <options> --fips
- B. Follow the OS vendor's instructions to ensure that the OS or OS images are prepared for operating in FIPS mode.
- C. Click Enable in the NKP Kommander Web UI, Global Workspace -> Settings -> FIPS menu.
- D. Run the command export FIPS_ENABLED=true
Answer: B
NEW QUESTION # 68
Which NKP tier is required for the FIPS Compliant Build feature?
- A. Advanced
- B. Starter
- C. Enterprise
- D. Pro
Answer: C
NEW QUESTION # 69
......
Updated NCP-CN Certification Exam Sample Questions: https://www.itexamdownload.com/NCP-CN-valid-questions.html
Get Unlimited Access to NCP-CN Certification Exam Cert Guide: https://drive.google.com/open?id=1qLtC8-uJQxDlCBN7R29ALURygOKaJVM-