[2026] Practice with these NCP-NS dumps Certification Sample Questions [Q23-Q41]

NO.23 A VM with IP address 172.20.9.5 resides on a subnet with CIDR 172.20.9.0/24. The VPC is successfully peered via BGP with an external router… External networks outside the VPC are unable to reach the VM.
What configuration change should be made to enable reachability for the VM?

NO.24 An administrator needs to configure a security policy that controls VM-to-VM communication within a category defined as secured entity.
Which configuration action should the administrator take to restrict all intra-tier communication between the VMs within a category defined as secured entity?

NO.25 An administrator sets up a VPN between two Nutanix VPCs in different Availability Zones. After deployment, the VPN tunnel shows as Up, but traffic between the VPCs is not flowing.
Which configuration step is most likely missing?

NO.26 A junior network operator is assigned two predefined roles in Prism Central…
Role A: Prism Viewer
Role B: VPC Admin
The operator reports being able to successfully create, update, and delete Virtual Private Clouds (VPCs). However, the operator is unable to create a VM into the VPC.
How does Prism Central determine the operator’s effective permissions?

NO.27 Which step is required to prepare an AHV cluster for Flow Virtual Networking?

NO.28 What must an administrator do before disabling the Network Controller?

NO.29 Which policy type takes highest precedence in Enforce mode?

NO.30 While configuring a new security policy in a Nutanix microsegmentation environment, an administrator wants the policy to remain flexible even if virtual machines change subnets or obtain new IP addresses.
Which configuration approach should the administrator use when defining the policy scope?

NO.31 The alert details mention a specific external network. Attempts to assign new Floating IPs to VMs fail, but existing Floating IPs continue to work.
What is the cause of this alert?

NO.32 Before creating a new Application Security Policy in Prism Central, what prerequisite must exist?

NO.33 An administrator is designing a VPC for a three-tier application. The workloads must communicate with the Internet using source NAT and also communicate with on-premises networks 10.50.0.0/16 and 172.20.32.0/20 with no address translation. In the Create VPC dialog, the administrator can associate external subnets and specify destination prefixes.
Which configuration satisfies the requirements?

NO.34 Users have recently reported intermittent connectivity issues and slower-than-usual application performance for a Nutanix cluster to an administrator. The administrator needs to identify the root cause of these issues by analyzing the health of the infrastructure components.
What action should the administrator take first to diagnose the root cause of the problem?

NO.35 When creating a VPC, enabling the Transit VPC toggle changes the role of the VPC.
What does the Transit VPC toggle do?

NO.36 A VPC admin creates a policy to allow traffic between two IP subnets but forgets to enable reverse direction.
What happens in this scenario?

NO.37 An administrator needs to use Prism Central to identify a subnet belonging to a VPC.
How can the administrator identify networks associated with a VPC within Prism Central?

NO.38 An administrator has deployed a VPC for a multi-tier application on Nutanix AHV. The Web tier requires public internet access, while the App and Database tiers must remain private and isolated.
Which steps should the administrator take to configure the external network correctly?

NO.39 An administrator has configured two VPCs with overlapping externally routable prefixes (ERPs). The two VPCs are associated to separate external networks that are part of the same physical routing domain.
What outcome should the administrator expect?

NO.40 An administrator is setting up a transit VPC to connect two VPCs and enable both internal (on-prem) and Internet connectivity.
Which is the best configuration to meet the requirement?

NO.41 When cloning a Flow Network Security policy, what should be verified before enabling Enforce mode?