Nutanix Certified Professional - Cloud Native v6.10 v1.0
Question 1
In an effort to control cloud cost consumption, auto-scale is configured to meet demands as needed.
What is the behavior for when nodes are scaled down?
- A. Node is paused in Kubernetes and the infrastructure continues to consume the resources at the reduced load.
- B. Node is changed to a status of Hibernate.
- C. Node is CAPI deleted from its infrastructure provider, effectively removing it from its hypervisor.
- D. Node is changed to a status of Power-Off for stand-by.
Answer : C
Question 2
Refer to the exhibit.
An administrator is provisioning an NKP cluster. After the VM creation task, the error shown in the exhibit is produced.
What could be the reason?
- A. VM doesn't have communication to the registry.
- B. Private registry software or version is not the recommended.
- C. NKP Software is not loaded in the registry.
- D. VM does not have the correct Linux version.
Answer : A
Question 3
A Platform Engineer has been tasked with setting up a secure and isolated environment for managing an NKP environment. The environment will have no access to the Internet but will be required to create additional NKP clusters in the future. The security team has recommended using a bastion host to achieve this goal.
What is the primary purpose of a bastion host in this scenario?
- A. To act as a firewall for the cluster, blocking all incoming traffic.
- B. To serve as a load balancer for the NKP clusters.
- C. Provide a secure point for creating and operating NKP clusters.
- D. To store and manage sensitive data related to the cluster.
Answer : C
Question 4
Refer to the exhibit.
A Platform Engineer is preparing to deploy an NKP cluster in an air-gapped environment. The NKP cluster will be deployed on Nutanix infrastructure using the CAPI Nutanix provisioner (CAPX).
The engineer has decided to create the bootstrap cluster first, then NIB-prep an Ubuntu 22.04 OS image that the Linux engineering team has provided in Prism Central. After that, the engineer will deploy the NKP cluster. However, during the first step of creating a bootstrap cluster, the engineer received the error shown in the exhibit.
What could be the reason?
- A. The Ubuntu 22.04 OS image needs to be NIB-prepped prior to creating the bootstrap.
- B. The nkp create bootstrap command needs to be executed as root.
- C. The bootstrap cluster image needs to be loaded prior to creating the bootstrap cluster.
- D. The CAPI provisioning method needs to be specified as part of the command: nkp create bootstrap nutanix
Answer : C
Question 5
A Platform Engineer is a member of an IT team that provides Kubernetes clusters for three groups within a company named Fin Group, Inc.:
FinVD -
Fin Insurance -
Fin Travel -
The engineer created workspaces for every group. Fin Group Inc. has its own Active Directory implementation, while each group uses their own Identity Provider. Now, the engineer needs to assign the Tenant Administrators role for each workspace.
How will the engineer complete this task?
- A. Configure a dedicated identity provider for each group to access their own workspace.
- B. Create a role named admin-tenant-X, where X is the name of the group and assign that role to manage the corresponding workspace.
- C. Create a role binding and assign it to manage the corresponding workspace.
- D. Configure the global Active Directory and assign a workspace admin user to each group.
Answer : C
Question 6
There is a private registry for the NKP deployment and the company has NKP Ultimate license. A Platform Engineer is using the Podman tool and is already logged in. Now, the engineer needs to seed the private registry with the NKP Catalog Applications.
What command should the engineer use?
- A. podman load -i ./container-images/nkp/catalog-applications-image-bundle-v2.12.0.tar
- B. nkp apply bundle -f ./container-images/nkp/catalog-applications-image-bundle-v2.12.0.tar --to-registry=${REGISTRY_URL} --to-registry-username=${REGISTRY_USERNAME} --to-registry-password=${REGISTRY_PASSWORD}
- C. nkp push bundle --bundle ./container-images/nkp/catalog-applications-image-bundle-v2.12.0.tar --to-registry=${REGISTRY_URL} --to-registry-username=${REGISTRY_USERNAME} --to-registry-password=${REGISTRY_PASSWORD}
- D. docker load -i ./container-images/nkp/catalog-applications-image-bundle-v2.12.0.tar
Answer : C
Question 7
In a financial company, a DevOps team is responsible for supporting all of the company's critical applications. Although the team was experienced, the manual management for cluster health checking was becoming increasingly complicated and prone to errors.
The team consulted its company's Platform Engineer on how to best address these issues. They told the engineer that events such as these were occurring:
Omitting pod security standards.
Crashlooping cases.
Failed nodes when deploying or running kube-bench.
What recommendation should the engineer provide to the DevOps team?
- A. Create a MachineHealthCheck resource in YAML format.
- B. Use override ConfigMaps to configure alert rules.
- C. Use AlertManager and NKP Insights together.
- D. Run the nkp describe cluster --cluster-name=${CLUSTER_NAME} command.
Answer : C
Question 8
Refer to the exhibit -
Using an NKP Ultimate license, a Platform Engineer has created a new workspace and needs to create a new Kubernetes cluster within this workspace. However, the engineer discovers that the Create Cluster option is grayed out, as shown in the exhibit.
How should the engineer resolve this issue?
- A. Create the cluster only using YAML and not the GUI.
- B. Ensure NKP is upgraded to a minimum version of 2.12.
- C. Attach existing clusters instead of creating a new cluster.
- D. Create an Infrastructure provider for the workspace.
Answer : D
Question 9
A Platform Engineer is deploying NKP into a highly secure vSphere environment. The NKP cluster will be air-gapped, and must also be FIPS compliant. The OS platform to be used for NKP cluster nodes is RHEL.
What must the engineer do to properly prep an OS image and have it be deployed as a FIPS compliant NKP cluster node?
-
A.
Verify the OS itself has been placed in fips mode.
When performing the NKP image build operation, be sure to include the offline fips and fips overrides.
When performing the NKP cluster deploy operation, be sure to include the FIPS version references for kubernetes and etcd. -
B.
Verify the OS itself has been placed in fips mode.
When performing the NKP cluster deploy operation, be sure to include the FIPS version references for kubernetes, kubectl and etcd. -
C.
Verify the OS itself has been placed in fips mode.
When preforming the NKP image build operation, be sure to include the offline fips override.
When performing the NKP cluster deploy operation, be sure to include the FIPS version references for kubernetes and etcd. -
D.
Verify the OS itself has been placed in fips mode.
When performing the NKP image build operation, be sure to include the offline fips and fips overrides.
When performing the NKP cluster deploy operation, be sure to include the FIPS version references for kubernetes, kubectl and etcd.
Answer : A
Question 10
An organization is planning to set up a new set of NKP clusters for its R&D organization.
The R&D director has specified that all R&D team members should have full administrative access to the clusters, as they will be performing tasks on them that require elevated privileges. This includes the ability to not only manage applications on the cluster, but also have the ability to manage namespaces and scale cluster nodes, among other activities. As a precaution, however, the clusters will be deployed on infrastructure that is dedicated to the R&D team.
What is the proper method for the engineer to ensure these objectives are met?
-
A.
Create an ‘R&D’ NKP workspace and project within this workspace
Create an NKP infrastructure provider in the ‘R&D’ NKP project
Create an ‘R&D’ NKP group for the R&D team members and assign admin-level roles within this project
Deploy the NKP clusters into the ‘R&D’ workspace -
B.
Create an ‘R&D’ NKP connector and infrastructure provider
Create an ‘R&D’ NKP group and assign it admin-level roles
Assign the ‘R&D’ NKP group to the ‘R&D’ NKP infrastructure provider
Deploy the NKP clusters into the ‘R&D’ workspace -
C.
Create an ‘R&D’ NKP connector and infrastructure provider
Create an ‘R&D’ NKP group and assign it admin-level roles
Assign the ‘R&D’ NKP group to the ‘R&D’ NKP connector
Deploy the NKP clusters into the ‘R&D’ workspace -
D.
Create an ‘R&D’ NKP workspace
Create an ‘R&D’ infrastructure provider in this workspace
Create an ‘R&D’ NKP group for the R&D team members and assign admin-level roles within
Deploy the NKP clusters into the ‘R&D’ workspace
Answer : D
Question 11
A Platform Engineer for an organization does research in Antartica. The engineer is preparing a bastion host for deploying NKP while the infrastructure is isolated.
Which programs should the engineer ensure is installed on a bastion host before shipping the infrastructure?
- A. kubectl and nkp
- B. oc and kubectl
- C. oc and az
- D. awscli and nkp
Answer : A
Question 12
After loading the NKP bundles to a private registry in an air-gapped environment, a Platform engineer now needs the Konvoy bootstrap image to create the bootstrap cluster. The Konvoy image has not been loaded into the registry.
Which is the most viable command to load the Konvoy bootstrap image on the bastion host?
- A. docker image tag konvoy-bootstrap-image-<version>.tar:version docker.io/konvoy-bootstrap:version
- B. nkp load image -f konvoy-bootstrap-image-<version>.tar --to-registry=<REGISTRY_URL>
- C. nkp push bundle --bundle konvoy-bootstrap-image-<version>.tar --to-registry=<REGISTRY_URL>
- D. docker load –i konvoy-bootstrap-image-<version>.tar
Answer : D
Question 13
A Cloud Engineer is deploying an NKP management cluster and plans to deploy multiple NKP workload clusters from it.
The management cluster will be on Nutanix infrastructure, but the NKP workload clusters may be deployed in multiple provisioning environments, such as:
Nutanix -
AWS -
Azure -
When the engineer deploys an NKP workload cluster in AWS, which two default behaviors will be performed by NKP on this newly-deployed cluster? (Choose two.)
- A. The NKP workload cluster will receive all of the GitOps sources that have been assigned to the NKP workspace.
- B. The NKP workload cluster will also be assigned to all of the NKP projects that have been created within the NKP workspace.
- C. The NKP workload cluster will receive all of the NKP RBAC policy that has been assigned to this NKP workspace.
- D. The NKP workload cluster will be deployed to all of the applications that have been enabled on this NKP workspace.
Answer : AC
Question 14
Prior to implementing NKP, a company had created a number of Kubernetes (K8s) clusters using kubeadm. While they are deploying new managed clusters via NKP, the company does not wish to migrate workloads from these pre-existing native K8s clusters over to new NKP clusters just yet.
What are the requirements to have these clusters attached to their NKP management cluster?
- A. The NKP management cluster must be able to reach the services and api-server of the target cluster.
- B. The version of the K8s clusters must be within N - 1 of the Kubernetes version of the NKP management cluster.
- C. An NKP management cluster admin account must be established on the K8s clusters.
- D. The version of the K8s clusters must match the Kubernetes version of the NKP management cluster.
Answer : A
Question 15
A Platform Engineer needs to create an NKP custom image for vSphere.
Which option should the engineer use?
- A. Konvoy Image Builder
- B. Hashicorp Packer
- C. Nutanix Image Builder
- D. RedHat Satellite
Answer : A