[May-2026] NCP-CN Dumps With 100% Verified Q&As - Pass Guarantee or Full Refund
Pass Nutanix NCP-CN Exam With Practice Test Questions Dumps Bundle
NEW QUESTION # 35
A Platform Engineer is attaching existing Kubernetes clusters to NKP, but a particular Kubernetes Amazon EKS cluster is getting errors with application deployments. These errors are related to persistent volumes. What could be the issue, and what can the engineer do?
- A. The storage appliance is having issues. The storage engineer should be contacted to take a look.
- B. There is no default StorageClass. Storage classes should be reviewed, and only one should be set as default.
- C. There could be a misconfiguration in the ConfigMap. It should be adjusted to NKP requirements.
- D. There is no compatible storage to be attached to the EKS cluster. Ask for compatible storage.
Answer: B
NEW QUESTION # 36
A development team is working on a new application that requires access to certain cluster resources. The team needs to ensure that they have limited permissions to avoid unauthorized changes in other environments. Among the tasks they will perform are the following:
Deploy new versions of the application to their specific namespace.
Scale deployments according to demand.
View logs and metrics of their applications to monitor performance.When using the NKP GUI, what type of access should the team configure?
- A. Kommander Role
- B. NKP Role
- C. Cluster Admin
- D. Cluster Role
Answer: B
NEW QUESTION # 37
A Platform Engineer will be deploying an NKP cluster in a dark site with no Internet access. The Cloud Administrator has provided a Linux VM for this purpose, so the engineer needs to prepare this VM to be used as a bastion host. Which two actions should the engineer take to complete this task? (Choose two.)
- A. Get or create SSH Keys.
- B. Install LDAP Server.
- C. Install Docker.
- D. Enable NTP Service.
Answer: A,D
NEW QUESTION # 38
A Platform Engineer is going to deploy NKP to a Nutanix cluster on-prem as well as Amazon EKS. What is the function of the bootstrap cluster for this architecture?
- A. Uses Cluster API for infrastructure-agnostic provisioning.
- B. Saves cost by minimizing resources required for provisioning.
- C. Simplifies the networking requirements for Kubernetes.
- D. Increases security from a single point of entry.
Answer: A
NEW QUESTION # 39
A Platform Engineer is deploying a new NKP cluster that has internet connectivity. Now, a Cloud Administrator and Security Administrator are discussing the security of communications between the NKP Kubernetes cluster and the container registry. The engineer proposes to have an on-prem private registry.
What is the most significant reason that the engineer should create a private registry instead of configuring a secure connection between the NKP cluster and Github (SaaS)?
- A. Private registry provides security and privacy.
- B. NKP requires specific registry versions.
- C. Private registry license is included with NKP.
- D. NKP cannot connect to public clouds.
Answer: A
NEW QUESTION # 40
A corporate IT team provides Kubernetes clusters for three groups within the company:
Fin VD
Fin Insurance
Fin TravelThe IT group needs to federate policy for all Kubernetes clusters from a single pane of glass, but separate the Kubernetes clusters according to the group that uses them. How should the IT team license and configure their NKP environment to satisfy these requirements?
- A. NKP Pro for workspace management, creating three workspaces and assigning the corresponding Kubernetes cluster to each workspace.
- B. NKP Pro for project management, creating three projects and assigning the corresponding Kubernetes cluster to each project.
- C. NKP Ultimate for fleet management, creating three workspaces and assigning the corresponding Kubernetes cluster to each workspace.
- D. NKP Starter for Kubernetes management, creating Kubernetes clusters for every company.
Answer: C
NEW QUESTION # 41
An infrastructure team has configured a Backup Storage Location on an existing AWS bucket and created a backup named testbackup. What command can the team use to view the backup?
- A. velero backup describe testbackup
- B. kubectl get backupstoragelocations -n ${testbackup} -o yaml
- C. kubectl get backupstoragelocations -n ${WORKSPACE_NAMESPACE} -o yaml
- D. velero backup describe aws-velero-testbackup
Answer: A
Explanation:
The Nutanix Kubernetes Platform (NKP) integrates Velero, an open-source tool, for backup and restore operations as part of its Day 2 operations. The NKPA course explains that after configuring a Backup Storage Location (e.g., an AWS S3 bucket) and creating a backup, administrators can view details of the backup using the Velero CLI. The correct command to view the details of a backup named testbackup is velero backup describe testbackup. This command provides a detailed description of the backup, including its status, resources included, and storage location.
The Nutanix Cloud Native (NCP-CN) 6.10 Study Guide states: "To inspect a Velero backup in NKP, use the velero backup describe <backup-name> command to display detailed information about the backup, such as its creation time, expiration, and included resources." The backup name (testbackup) is specified as created by the team, and no prefix like aws-velero- is indicated in the question, making option C the correct choice.
Incorrect Options:
* A. kubectl get backupstoragelocations -n ${testbackup} -o yaml: This command retrieves Backup Storage Location objects, not backup details. The namespace ${testbackup} is also incorrect, as Velero resources are typically in a specific namespace (e.g., velero).
* B. velero backup describe aws-velero-testbackup: The backup name is testbackup, not aws-velero- testbackup. The NKPA course does not indicate any prefix for the backup name.
* D. kubectl get backupstoragelocations -n ${WORKSPACE_NAMESPACE} -o yaml: This retrieves Backup Storage Locations, not the backup itself, and does not provide backup details.
:
Nutanix Kubernetes Platform Administration (NKPA) Course, Section on Backup and Restore with Velero.
Nutanix Cloud Native (NCP-CN) 6.10 Study Guide, Chapter on Day 2 Operations.
Nutanix Cloud Bible, NutanixKubernetesPlatform Section: https://www.nutanixbible.com Velero Documentation: https://velero.io
NEW QUESTION # 42
A Platform Engineer is preparing an AWS instance using KIB for becoming an NKP cluster node. During the process, the source AMI is successfully cloned, and multiple preparation steps have occurred against the cloned AMI, such as gathering OS-release facts and uploading image bundles to it. However, the process encounters an error and ultimately fails. What is one troubleshooting step the engineer can perform that may help identify the root cause of the issue?
- A. Rerun the KIB command, including the parameter to instruct Ansible not to automatically delete the cloned AMI on error. This way the OS image can be accessed and further inspected.
- B. Rerun the KIB command, including the pause parameter, so that each command in the KIB-prep sequence and its return can be reviewed in detail before allowing the prep process to continue.
- C. Rerun the KIB command, including the parameter to instruct Packer not to automatically delete the cloned AMI on error. This way the OS image can be accessed and further inspected.
- D. Rerun the KIB command, including the parameter to set the verbosity level to debug, so that all issued AWS CLI commands and their returns are included and added to an exported log file for review.
Answer: D
NEW QUESTION # 43
A development team has decided to implement an efficient logging system and use AWS S3 as storage to manage large volumes of logs in a scalable way.
The team followed these steps:
* Set the WORKSPACE_NAMESPACE variable to the namespace copied in the previous step.
* Created a config that overrode ConfigMap to update the storage configuration.
* Updated the grafana-loki AppDeployment to apply the configuration override.However the implementation failed.What should the team do to be able to manage log storage in AWS?
- A. Create a tenant on AWS.
- B. Configure a new IAM role specifically for NKP.
- C. Configure an IP address corresponding to AWS storage.
- D. Create a secret containing the static AWS S3 credentials.
Answer: D
Explanation:
As stated in the NKPA 6.10 documentation, when using external storage (such as AWS S3) with Loki for log storage, AWS credentials must be provided securely. This typically involves creating a Kubernetes Secret containing the static AWS credentials (access key ID and secret access key), which are referenced in the override ConfigMap to authenticate Loki's S3 storage backend.
Key reference from documentation:
"For Loki to store logs in an S3 bucket, AWS credentials must be created as a Kubernetes secret and referenced in the storage configuration." Reference:
Nutanix Kubernetes Platform Administration (NKPA) 6.10 - "Loki External Storage Configuration" NCP-CN 6.10 Study Guide - "Using External Storage Backends with Logging"
NEW QUESTION # 44
A development Kubernetes cluster deployed with NKP is having performance issues. The Cloud Engineer commented that worker VMs are consuming a lot of CPU and RAM. The Platform Engineer took a look at the CPU and RAM statistics with Grafana and confirmed that the worker VMs are running out of CPU and memory. The Kubernetes cluster has 4 workers with 8 vCPUs and 32 GB RAM. What could the Platform Engineer do?
- A. Add more CPU and memory to workers with nkp scale --cpu 16 --memory 64 --cluster-name
${CLUSTER_NAME} - B. Call tech support to take a look at the infrastructure and investigate.
- C. Ask developers to lower the number of application replicas.
- D. Add one more worker with nkp scale nodepools ${NODEPOOL_NAME} --replicas=5 --cluster- name=${CLUSTER_NAME} -n ${CLUSTER_WORKSPACE}
Answer: D
Explanation:
The NKPA course addresses performance issues in NKP clusters, such as high CPU and memory consumption on worker nodes, by recommending scaling options to distribute workloads more effectively.
The Kubernetes cluster in the scenario has 4 workers, each with 8 vCPUs and 32 GB RAM, and is running out of resources. The most effective solution is to add more workers to the cluster to increase overall capacity and balance the load, rather than modifying existing workers or reducing application replicas.
The correct action is to add one more worker using the command nkp scale nodepools
${NODEPOOL_NAME} --replicas=5 --cluster-name=${CLUSTER_NAME} -n
${CLUSTER_WORKSPACE} (Option D). This command scales the specified node pool to 5 replicas (from the current 4), adding one additional worker to the cluster. The new worker will have the same configuration (8 vCPUs, 32 GB RAM) as the existing workers, providing additional capacity to alleviate resource contention. The Nutanix Cloud Native (NCP-CN) 6.10 Study Guide states: "To address performance issues due to resource exhaustion in an NKP cluster, scale out by adding workers using nkp scale nodepools
<nodepool-name> --replicas <count> --cluster-name <cluster-name> -n <workspace>." Incorrect Options:
* A. Call tech support to investigate: While support can help, the issue is clearly resource exhaustion, which can be resolved by scaling the cluster-a task the Platform Engineer can perform directly.
* B. Ask developers to lower application replicas: Reducing replicas may decrease resource usage but could impact application availability or performance, which is not ideal for a development cluster.
* C. Add more CPU and memory to workers with nkp scale --cpu 16 --memory 64: The nkp scale command does not support --cpu and --memory flags for resizing existing workers. Resizing VMs typically requires updating the node pool configuration and replacing nodes, which is more complex than adding new workers.
:
Nutanix Kubernetes Platform Administration (NKPA) Course, Section on Cluster Scaling and Performance Management.
Nutanix Cloud Native (NCP-CN) 6.10 Study Guide, Chapter on Day 2 Operations.
Nutanix Cloud Bible, NutanixKubernetesPlatform Section: https://www.nutanixbible.com
NEW QUESTION # 45
A company has different Kubernetes clusters for different business units. Every business unit has separate Kubernetes clusters for production and development because the software deployed in production is different than development. Now, all production clusters for all business units are standardized and all clusters for development are standardized as well.
The company recently acquired NKP Ultimate licenses for all Kubernetes clusters.
How can the company control the standard configuration for both environments in all clusters (production and development)?
- A. Install Flux in every Kubernetes cluster and configure the appropriate kustomize.yaml in every Kubernetes cluster.
- B. Install Flux in every Kubernetes cluster with the appropriate kustomize.yaml, with nkp install flux -- kustomize=kustomize.yaml --kubeconfig=<cluster>.conf
- C. Create new Kubernetes clusters for production and development with NKP for every business unit.
- D. Configure a production workspace and a development workspace and attach each Kubernetes cluster to the corresponding workspace.
Answer: D
Explanation:
The NKPA 6.10 documentation confirms that workspaces in NKP are used to logically group and standardize configurations across multiple clusters. By creating a production workspace and a development workspace, the organization can control and enforce standardized configurations and policies for all relevant clusters.
Exact extract:
"Workspaces provide logical separation for resources, configuration, and policy management across multiple clusters, enabling standardized operations." Reference:
Nutanix Kubernetes Platform Administration (NKPA) 6.10 - "Workspaces and Multi-Cluster Management" NCP-CN 6.10 Study Guide - "Standardizing Configurations Across Clusters"
=======
NEW QUESTION # 46
What is a prerequisite for upgrading an NKP license to Ultimate?
- A. Size the Sidecar containers appropriately to support the installation of default platform services.
- B. Size the Control Plane nodes appropriately to support the installation of default platform services.
- C. Size the ETCD nodes appropriately to support the installation of default platform services.
- D. Size the Worker nodes appropriately to support the installation of default platform services.
Answer: B
NEW QUESTION # 47
An organization is setting up a new set of NKP clusters for R&D. The R&D director requires full admin access for the team on infrastructure dedicated to R&D.
What is the proper method for the engineer to ensure these objectives are met?
- A. Create an 'R&D' NKP connector and infrastructure provider
Create an 'R&D' NKP group and assign it admin-level roles
Assign the 'R&D' NKP group to the 'R&D' NKP infrastructure provider
Deploy the NKP clusters into the 'R&D' workspace - B. Create an 'R&D' NKP connector and infrastructure provider
Create an 'R&D' NKP group and assign it admin-level roles
Assign the 'R&D' NKP group to the 'R&D' NKP connector
Deploy the NKP clusters into the 'R&D' workspace - C. Create an 'R&D' NKP workspace
Create an 'R&D' infrastructure provider in this workspace
Create an 'R&D' NKP group for the R&D team members and assign admin-level roles within Deploy the NKP clusters into the 'R&D' workspace - D. Create an 'R&D' NKP workspace and project within this workspace
Create an NKP infrastructure provider in the 'R&D' NKP project
Create an 'R&D' NKP group for the R&D team members and assign admin-level roles within this project Deploy the NKP clusters into the 'R&D' workspace
Answer: C
Explanation:
The NKPA 6.10 documentation and Nutanix Best Practices recommend using workspaces to segment cluster deployments and their associated infrastructure providers, as well as to manage access control through RBAC.
The typical workflow is:
* Create an NKP workspace dedicated to the R&D environment.
* Create an infrastructure provider (e.g., vSphere, AHV) scoped to that workspace.
* Create an NKP group for the R&D team and assign admin roles to this group within the workspace.
* Deploy workload clusters in this workspace, leveraging the scoped infrastructure provider.
This ensures that:
* The R&D team has full administrative control over their resources.
* Clusters and infrastructure are logically isolated in the R&D workspace.
* RBAC policies are applied cleanly within the workspace context.
Reference:
Nutanix Kubernetes Platform Administration (NKPA) 6.10 - "Workspaces and RBAC" NCP-CN 6.10 Study Guide - "Workspace and Cluster Management Best Practices"
NEW QUESTION # 48
A Platform Engineer needs to create an NKP custom image for vSphere.
Which option should the engineer use?
- A. Hashicorp Packer
- B. Nutanix Image Builder
- C. Konvoy Image Builder
- D. RedHat Satellite
Answer: C
NEW QUESTION # 49
Which procedure should a Platform Engineer follow for setting up user authentication into an NKP cluster?
- A. Enable Gatekeeper and create a connector to the user base's identity provider.
- B. Create a Dex connector to the user base's identity provider.
- C. Create a MetalLB connector to the user base's identity provider.
- D. Disable native NKP authentication, enable Traefik, and create a connector to the user base's identity provider.
Answer: B
Explanation:
The NKPA course covers user authentication for NKP clusters as part of Day 2 operations, emphasizing integration with external identity providers (IdPs) to manage user access securely. NKP uses Dex, an OpenID Connect (OIDC) identity provider, to facilitate authentication by acting as a connector between the Kubernetes cluster and external IdPs, such as LDAP, SAML, or OAuth-based systems.
The course explains that to set up user authentication, a Platform Engineer must configure a Dex connector to the user base's identity provider. Dex integrates with the Kubernetes API server to enable OIDC-based authentication, allowing users to log in using their IdP credentials. The Nutanix Cloud Native (NCP-CN) 6.10 Study Guide states: "NKP supports user authentication through Dex, which provides OIDC integration with external identity providers, enabling single sign-on (SSO) for cluster access." The process involves deploying Dex as a platform application, configuring the IdP connector (e.g., specifying client IDs, secrets, and endpoints), and updating the Kubernetes API server to use OIDC authentication.
Incorrect Options:
* A. Enable Gatekeeper and create a connector to the user base's identity provider: Gatekeeper is a Kubernetes policy engine used for enforcing admission control policies, not for authentication. The NKPA course does not associate Gatekeeper with user authentication.
* B. Disable native NKP authentication, enable Traefik, and create a connector to the user base's identity provider: Traefik is an ingress controller for managing external traffic, not authentication.
Disabling native authentication is unnecessary, as NKP supports OIDC alongside native methods. The NKPA course does not mention Traefik in the context of authentication.
* C. Create a MetalLB connector to the user base's identity provider: MetalLB is a load balancer for bare-metal Kubernetes clusters, not an authentication component. This option is irrelevant, as per the NKPA course.
:
Nutanix Kubernetes Platform Administration (NKPA) Course, Section on User Authentication and Authorization.
Nutanix Cloud Native (NCP-CN) 6.10 Study Guide, Chapter on NKP Day 2 Operations.
Nutanix Cloud Bible, NutanixKubernetesPlatform Section: https://www.nutanixbible.com Dex Documentation: https://dexidp.io
NEW QUESTION # 50
......
2026 Valid NCP-CN test answers & Nutanix Exam PDF: https://examsboost.pass4training.com/NCP-CN-test-questions.html
