NCP-CI-Azure Exam Questions & Answers

Azure Private Endpoint: A Private Endpoint provides secure connectivity to Azure resources by enabling private access through the Azure backbone network. This ensures that the traffic does not traverse the internet, providing enhanced security and performance.

Delegated Subnet: By creating an Azure Private Endpoint for VMs in a delegated subnet, the administrator ensures that the VMs can access Azure resources directly and securely without using the public internet.

Azure Private Endpoint Documentation

Nutanix NC2 Networking Configuration Guide

Account Administrator Role: This role grants the necessary permissions for managing the Azure account, including the ability to open, close, or extend a support tunnel. These capabilities are crucial for the Nutanix Support team to perform diagnostics and troubleshooting efficiently.

Permissions Included: The Account Administrator role encompasses broader account management rights, ensuring that the user can interact with various support and operational aspects of the NC2 environment within Azure.

Azure Role-Based Access Control (RBAC) Documentation

Nutanix NC2 Support Tunnel Requirements

Azure Monitor Overview: Azure Monitor is a comprehensive monitoring service that collects, analyzes, and acts on telemetry data from Azure resources.

Key Metrics Monitoring: Azure Monitor enables the monitoring of various Azure services such as virtual networks, virtual machines, and bare metal hosts, providing insights and visibility into their performance and health.

Comparison of Services:

Resource Manager: Manages Azure resources but does not provide detailed monitoring capabilities.

Azure Service Health: Provides personalized alerts and guidance when Azure service issues affect you but is not a comprehensive monitoring solution.

Azure Network Watcher: Focuses on network performance monitoring and diagnostics but does not cover all resource types.

Conclusion: Azure Monitor is the most suitable service for monitoring key metrics across a wide range of Azure services.

Azure Monitor Documentation

Nutanix NC2 on Azure Monitoring Guide

Requirement Analysis: The NC2 VMs need to access Azure and on-premises resources without traversing the internet, ensuring secure and direct connectivity.

Solution Options:

SSH Connection: Suitable for individual remote access, not for full VM connectivity to Azure and on-premises resources.

Interface Endpoint: Facilitates private connectivity to specific Azure services, but not comprehensive for all resources.

ExpressRoute: Provides private, dedicated connectivity between Azure and on-premises environments. This ensures that traffic does not traverse the public internet, meeting the security and performance requirements.

Site-to-Site VPN: Provides secure connectivity but can involve traversing the internet, which is against the requirements.

Conclusion: ExpressRoute is the optimal solution as it offers a private connection that does not involve internet traversal, ensuring secure and efficient access to both Azure and on-premises resources.

Azure ExpressRoute Documentation

Nutanix Clusters on Azure Networking Guide

Jump Host VM in External VNet with VNet Peering:

Deploy Jump Host VM: Deploy a VM in an external VNet that is not within the same network as Prism Central.

VNet Peering: Establish VNet peering between the external VNet and the Prism Central VNet. This allows the Jump Host to communicate with Prism Central securely.

Jump Host VM in Prism Central VNet Inside a Delegated Subnet:

Deploy Jump Host VM: Deploy the Jump Host VM directly in the Prism Central VNet within a delegated subnet. This places the Jump Host in the same network environment as Prism Central, allowing direct access.

Azure VNet Peering Documentation

Nutanix NC2 Networking and Access Configuration Guide