Nutanix NCP-MCI-6.10 - Nutanix Certified Professional - Multicloud Infrastructure (NCP-MCI v6.10)

Windows Defender Credential Guard requires UEFI firmware and Secure Boot to function properly.

Option B (Enable UEFI with Secure Boot) is correct:

Credential Guardrequires a UEFI-based boot moderather thanLegacy BIOS.

Secure Boot ensures only trusted OS components load, reducing attack surface for credential theft.

Option A (Update vCPU to 8) is incorrect:

Increasing vCPUs does not impactCredential Guard compatibility.

Option C (Use Windows Server 2022) is incorrect:

Windows Server 2019supports Credential Guard; upgrading to 2022 isnot required.

Option D (Update Memory to 16GB) is incorrect:

Credential Guard has no minimum RAM requirementbeyond general OS needs.

When synchronous replication fails immediately between two clusters, it is often due to blocked communication across the required ports (2009 and 2020). These must be open manually if the clusters are in different subnets or if network policies block traffic.

From theNutanix Enterprise Cloud Administration (ECA)course materials:

“Replication communication relies on specific ports, which must be allowed through the firewall. If the clusters are in different subnets or if there are external firewalls, these ports must be explicitly opened.”

“The modify_firewall command is used to open or close ports on cluster nodes. For replication and remote site communication, eth1 is typically used for external replication traffic.”

Since eth1 is typically used for external connectivity and replication traffic, opening ports on this interface using modify_firewall resolves the communication block.

For workloads requiring new IP addresses and DNS server settings during DR recovery, using custom scripting within the Recovery Plan is the recommended and supported method.

From theNutanix Enterprise Cloud Administration (ECA)course materials:

“Recovery Plans support scripting within the Recovery Sequence to enable administrators to perform post-recovery customization tasks, such as updating IP addresses, configuring DNS, or applying application-specific settings.”

“This scripting capability provides a flexible, automated approach to ensure that VMs are correctly reconfigured to operate within the DR environment’s network and DNS settings.”

This avoids the need for manual reconfiguration post-recovery or adjusting settings in production prior to failover.

Nutanix documentation for Cross-Hypervisor Disaster Recovery (CH-DR) specifies that Nutanix Guest Tools (NGT) must be installed on all VMs participating in ESXi to AHV recovery workflows. NGT includes the VM Mobility Drivers, which are required for the VM to interpret AHV device models, storage controllers, and network adapters during recovery. The documentation notes that without NGT installed, VMs may fail to boot or attach devices correctly after being recovered on AHV. Legacy BIOS, RDMs, and delta disks are not listed as prerequisites or contributing factors for CH-DR success. Therefore, installing Nutanix Guest Tools on the source VM is mandatory for successful cross-hypervisor recovery.

Nutanix LCM architecture supports firmware, BIOS, BMC, disk controller, and drive updates only when the environment includes multiple nodes that can provide redundancy during the upgrade process. The LCM documentation specifies that firmware upgrades require node evacuation and rolling upgrade sequencing so that workloads remain available. A single-node cluster does not have node-level redundancy and therefore cannot support firmware upgrade operations that require putting a node into maintenance automatically. The guidance clearly states that “firmware upgrades are not supported for single-node clusters because the host cannot be safely placed into a maintenance mode during the LCM workflow.” LCM is supported for software inventory, but not for firmware activation on single-node clusters. This explains why no firmware updates appear in the LCM interface.

Nutanix performance troubleshooting guidelines highlight CPU Ready Time as a key indicator of CPU contention. The documentation explains:

“High CPU Ready Time indicates that vCPUs are waiting to be scheduled on physical cores due to host CPU saturation or CPU overcommitment.”

CPU Ready Time doesnotrelate to storage issues or CVM sizing. Instead, it indicates that the hypervisor cannot schedule VM CPU operations promptly.

Internal extracts clearly describe the next diagnostic step:

“When CPU ready metrics rise, the first step is to check physical host CPU utilization to confirm whether the host is oversubscribed or running at high CPU usage.”

If the host is overloaded, remediation includes distributing VMs across hosts, reducing vCPU count on oversized VMs, or adding compute resources.

Other options are irrelevant:

Memory oversubscription is unrelated to CPU Ready Time.

SSD capacity affects storage latency, not CPU scheduling.

CVM CPU counts do not cause VM CPU Ready Time; CVM resource misconfiguration affects cluster services, not guest VM scheduling.

Thus, reviewing host CPU utilization is the correct next step.

Protection Domains (PDs) in Nutanix ensure that entire applications and their associated data are protected during failover.However,Volume Groups (VGs) are not automatically includedunless explicitly configured.

Option A (Select "Auto protect related entities") is correct:

This setting ensures thatassociated Volume Groups, networks, and other dependencies are included in the Protection Domainautomatically.

Without enabling this, only the VM itself would be protected, leading tomissing application data upon failover.

Option B (Manually add Volume Groups to Protected Entities) is correct:

If"Auto protect related entities" is not enabled, the administrator mustmanually add Volume Groups to the Protection Domain.

This ensures that bothVMs and their attached Volume Groupsare replicated and recovered together.

Option C (Place Volume Groups in a separate Protection Domain) is incorrect:

Separating Volume Groups into a different PDdoes not guarantee they failover together with VMs.

It is best practice tokeep related VMs and Volume Groups in the same PD.

Option D (Use application-consistent snapshots) is incorrect:

Whileapplication-consistent snapshots improve data integrity, theydo not fix missing Volume Groups in failover scenarios.

By default, Nutanix Prism Central retains the last 10 instances of a report if no retention policy is configured.

Option B (10) is correct:

Nutanixstores up to 10 reports, after which older reports areautomatically deleted.

Options A (5), C (15), and D (20) are incorrect:

Whileretention policies can be customized, thedefault setting is 10 reports.

Themost efficient wayto allow team leads to manage aspecific set of VMsis bycreating a Project (Option C)in Prism Central and assigning the team leads to that Project.

Nutanix Projects allow administrators to control VM accessbased on groups and permissions, ensuring that users only manage VMs assigned to their project.

Option A (Role Mapping)applies more broadly to roles but does not restrict access to specific VM groups.

Option B (VPC Admin)is related to network segmentation, not VM access control.

Option D (Security Policies)are used for network and firewall rules, not VM access control.