100% Free Nutanix NCP-NS-7.5 Practice Test Questions and Answers 2026

Start Learning with the Latest and Real 100% Free Nutanix NCP-NS-7.5 Exam Questions

Page: 1 / 22

Total 107 Questions | Updated On: May 22, 2026

Add To Cart

Question 1

An administrator needs to ensure all web traffic (HTTP/HTTPS) from a specific subnet (10.100.20.0) is redirected through a third-party virtual firewall inside the VPC for Layer 7 inspection before reaching the internet. The firewall VM has an IP of 10.100.30.5 and is connected to a different subnet. What should be done to enforce this specific traffic path?

A : Configure a Policy-Based Route (PBR) on the VPC with a re-route IP 10.100.30.5.

B : Create a FNS policy with an allow rule for the FW IP 10.100.30.5.

C : Move the Firewall VM into the same subnet and set the default GW of the web servers to 10.100.30.5.

D : Create a Network Policy with a high priority with the source 10.100.20.0, destination of 10.100.30.5 on port 80 & 443.

Answer: A

Question 2

An administrator creates a new VPC in No NAT mode to allow VMs in a web tier to reach an external firewall. After deployment... none of the VMs can reach external IP addresses... Which action should the administrator take to restore routed north-south connectivity from the VPC?

A : Configure a Flow Security Policy to allow egress traffic from the VPC subnet.

B : Create an Externally Routable Prefix (ERP) entry for the overlay subnet in the VPC.

C : Change the VPC mode to NAT so that outbound traffic is automatically translated.

D : Add a default static route in each VM pointing to the external firewall's IP address.

Answer: B

Question 3

How can the administrator discover the root cause of the issue?

A : Confirm that Inter-VM connectivity is enabled within the VM networking settings and that VMs in the Database tier are configured correctly to accept inbound traffic.

B : Check if traffic isolation has been configured on the Database tier and ensure that there is no policy preventing App tier communication with the Database tier.

C : Check the security policies again to ensure that the rule allowing port 3306 from Web -> Database is applied and active, then check the policy enforcement mode to ensure it is in Enforcement Mode.

D : Verify that the port 3306 is open on the external gateway and that SNAT is not being applied for internal communication.

Answer: C

Question 4

An administrator receives a ticket reporting unwanted traffic between production and development servers. The administrator reviews the Flow Network Security logs and finds the following:How can the administrator resolve the issue?

A : Update the policy to disallow the unwanted traffic.

B : Move the servers to separate IP subnets.

C : Enable the Network Controller for the policy

D : Change the enforcement mode for the policy

Answer: A

Question 5

An administrator needs to configure a security policy that controls VM-to-VM communication within a category defined as secured entity. Which configuration action should the administrator take to restrict all intra-tier communication between the VMs within a category defined as secured entity?

A : Apply the policy with inbound rules that block all inter-VM communication.

B : Configure the security policy with allow-all intra-tier traffic.

C : Set the security policy to allow-specific traffic for intra-tier communication.

D : Use deny-all intra-tier traffic configuration in the policy.

Answer: D

Page: 1 / 22

Total 107 Questions | Updated On: May 22, 2026

Add To Cart