NCP-CI-Azure Exam Dumps : Nutanix Certified Professional - Cloud Integration - Azure (NCP-CI-Azure v6.7)

API Key Management:For NC2 to manage Azure resources successfully, it needs to authenticate and authorize API calls. This is typically handled through API keys, which are managed via specific endpoints.

Required Connection:The endpointapikeys.nutanix.comis crucial for managing these API keys. Ensuring connectivity to this endpoint allows NC2 to verify and utilize the API keys needed for interacting with Azure services.

References:

Nutanix NC2 API Configuration Guide

Azure API Management Documentation

Port Requirements: The specified ports (22, 2009, 2020, 2049, 3260, 9440) are commonly used for various services and require TCP communication.

Port 22: SSH

Port 2009: Used for Nutanix internal communication

Port 2020: Nutanix services

Port 2049: NFS

Port 3260: iSCSI

Port 9440: Nutanix Prism management

Communication Type: To ensure proper disaster recovery setup, bi-directional communication is needed to allow traffic to flow both from on-premises to Azure and vice versa.

TCP Protocol: These ports use the TCP protocol, which provides reliable communication between devices.

Conclusion: Creating a bi-directional (TCP) rule on the firewall allows the necessary communication for disaster recovery processes.

References:

Nutanix Networking and Security Documentation

Azure Networking Documentation

Scenario Analysis:

A. Connectivity between sites already provides encryption: Using VTEP in this scenario is advantageous because VTEP does not inherently provide encryption. If encryption is already provided, VTEP can be effectively used without additional security concerns.

D. Multiple remote Availability Zones exist to add to the same VTEP-based extended Layer 2 subnet: VTEP is well-suited for scenarios where multiple remote Availability Zones need to be connected to the same extended Layer 2 subnet. This allows for efficient management and seamless connectivity across different zones.

Scenarios B and C:

B. Only one remote Availability Zone exists that needs the subnet extended: This scenario does not leverage the strengths of VTEP, as it is better suited for multiple zones.

C. Connectivity between sites already does not provide encryption: Using VTEP without existing encryption is not ideal as VTEP itself does not encrypt the traffic.

Conclusion: VTEP is advantageous when encryption is already in place and when multiple remote zones need to be connected to the same extended subnet.

References:

Nutanix NC2 Networking Guide

Azure Networking Documentation