NCP-MCI-6.10 Dumps with Practice Exam Questions Answers

Understanding the Exhibit & the Alert

The alert states:

"The cluster is using password-based SSH access for the CVM."

"Password-based remote login is enabled on the cluster."

"It is recommended to use key-based SSH access instead of password-based SSH access for better security."

This means that the nutanix user can log in to Controller VMs (CVMs) using a password, which is a security risk.

Corrective Action: Enabling Cluster Lockdown

✅(C) Enable Cluster Lockdown. (Correct Answer)

Cluster Lockdown Mode restricts password-based SSH access and forces key-based authentication.

This prevents users from logging into CVMs using passwords, enhancing cluster security.

To enable Cluster Lockdown:

Go to Prism Central or Prism Element.

Navigate to Settings → Security → Cluster Lockdown.

Enable Cluster Lockdown Mode.

Evaluating the Other Answer Choices

❌(A) Rename the nutanix user. (Incorrect)

The nutanix user is a built-in system account required for cluster operations.

Renaming the user will not prevent SSH access via password.

❌(B) Block port 22 on the CVM firewall. (Incorrect)

Blocking port 22 (SSH) will completely disable SSH access, including key-based authentication.

This may break cluster management and troubleshooting operations.

❌(D) Delete the nutanix user. (Incorrect)

The nutanix user is a critical system account required for cluster functionality.

Deleting the account will cause serious issues with cluster management.

Multicloud Infrastructure References & Best Practices

Nutanix Security Best Practices:

Always use key-based SSH authentication instead of password-based logins.

Enable Cluster Lockdown Mode to enforce security policies.

Regularly audit user access to ensure security compliance.

Cluster Lockdown Benefits:

Prevents unauthorized SSH access via passwords.

Enforces public key authentication, reducing brute-force attack risks.

Strengthens CVM security against potential exploits.

For optimal Disaster Recovery performance, new nodes must match or exceed the storage performance of existing nodes.

Option A (New node must have at least 2 SSDs) is correct:

Since the G7 nodes havetwo SSDs, replacing G5 nodes withat least 2 SSDsensuresconsistent SSD cache and performance.

Option B is incorrect:

G7 or G8 nodes may help, but storage performance is more critical for DR.

Option C is incorrect:

CPU core count does not impact DR storage performance as much as SSD capacity.

Option D is incorrect:

Hybrid nodes are already in use, but SSDs must match for performance balance.

Moving vDisks to a storage container with compression enabled ensures better data efficiency without downtime.

Option A (Migrate vDisks) is correct:

vDisk migration is non-disruptiveand allows compression settings to be applied dynamically.

Option B (Recreate the VM) is incorrect:

Rebuilding the VM is unnecessaryand would causedowntime.

Option C (Migrate the VM) is incorrect:

VM migration does not guarantee that only vDisks move, and it may disrupt performance.

Option D (Recreate vDisk) is incorrect:

This method ismanual and time-consuming, while Nutanix provides anautomated approach.

In a Nutanix cluster, Replication Factor 2 (RF2) means that each piece of data has two copies: a primary and a replica. To safely remove a node while ensuring data redundancy and cluster health, the system must have enough nodes to maintain the RF2 protection and complete the removal.

From the Nutanix Enterprise Cloud Administration (ECA) documentation:

“The minimum number of nodes required for a safe host removal in an RF2 cluster is four. This ensures that even after removing a node, there are enough remaining nodes to continue hosting the primary and replica data copies, meeting the RF2 requirement.”

The logic is:

In a 3-node RF2 cluster, there isn’t enough redundancy to safely remove a node without impacting data availability.

A 4-node RF2 cluster allows safe removal of one node while still ensuring two copies of all data remain.

Thus, the minimum number of nodes required for a safe host removal in an RF2 cluster is 4

Themost efficient wayto allow team leads to manage aspecific set of VMsis bycreating a Project (Option C)in Prism Central and assigning the team leads to that Project.

Nutanix Projects allow administrators to control VM accessbased on groups and permissions, ensuring that users only manage VMs assigned to their project.

Option A (Role Mapping)applies more broadly to roles but does not restrict access to specific VM groups.

Option B (VPC Admin)is related to network segmentation, not VM access control.

Option D (Security Policies)are used for network and firewall rules, not VM access control.