Pass the Nutanix Certified Professional (NCP) NCP-CN Questions and answers with ExamsMirror

The NKPA course specifies that theNKP CLIis the primary tool for deploying NKP clusters with advanced configurations, such as those required for a dark site environment, custom Service and Pod CIDR blocks, and Nutanix AHV clusters. The NKP CLI (nkp) provides granular control over cluster creation, allowing administrators to specify custom networking parameters and air-gapped deployment settings via command-line flags or configuration files.

For a dark site deployment, the NKP CLI uses an Air-Gapped Bundle to provide all necessary dependencies. Custom CIDR blocks are configured using flags like --service-cidr and --pod-cidr during the nkp create cluster command. The Nutanix Cloud Native (NCP-CN) 6.10 Study Guide states: “The NKP CLI is used to deploy clusters with custom configurations, including dark site readiness and custom networking, on Nutanix AHV clusters.” For example: nkp create cluster --air-gapped --service-cidr 10.96.0.0/12 --pod-cidr 192.168.0.0/16 --infrastructure nutanix-ahv.

Incorrect Options:

A. kubectl CLI: kubectl manages Kubernetes resources, not NKP cluster deployment.

B. NKP GUI: The GUI supports basic deployments but lacks the flexibility for custom CIDR and dark site configurations.

D. OCP CLI: OpenShift (OCP) is a separate platform, not used for NKP deployments.

TheKonvoy Image Builderrequires a64-bit Linux or MacOS environment(x86_64 architecture) to build and customize the OS images.

TheNKPA 6.10 documentationclarifies that the supported and recommended method to delete an entirenode pool(including its worker nodes) in an NKP cluster is by using the nkp delete nodepool command. This command removes the specified node pool and all associated resources from the cluster in a controlled and supported manner.

Key reference from the documentation:

“Use nkp delete nodepool --cluster-name= to safely remove the node pool and its associated resources.”

Manual VM deletion via ACLI or NCLI is not recommended because it bypasses the Kubernetes and NKP resource lifecycle, potentially leaving orphaned resources or inconsistent cluster states.

TheNKPA 6.10 documentationconfirms thatworkspacesin NKP are used to logically group and standardize configurations across multiple clusters. By creating aproduction workspaceand adevelopment workspace, the organization can control and enforce standardized configurations and policies for all relevant clusters.

Exact extract:

“Workspaces provide logical separation for resources, configuration, and policy management across multiple clusters, enabling standardized operations.”

The NKPA course addresses resource contention in Kubernetes clusters, where one application (e.g., ApplicationB) consumes excessive resources, impacting others (e.g., ApplicationA). To mitigate this, the course recommendsimplementing Quotas and Limit Ranges.

Resource Quotasrestrict the total amount of CPU, memory, and other resources a namespace can consume, ensuring fair resource allocation across teams.

Limit Rangesset minimum and maximum resource limits for individual pods and containers within a namespace, preventing any single application from monopolizing resources.

The Nutanix Cloud Native (NCP-CN) 6.10 Study Guide states: “To prevent resource contention in NKP clusters, apply Resource Quotas to limit namespace resource usage and Limit Ranges to enforce pod and container resource boundaries.” For example, the administrator can create a ResourceQuota to cap ApplicationB’s namespace resource usage and a LimitRange to restrict its pod resource requests/limits, ensuring ApplicationA has sufficient resources.

Incorrect Options:

B. Setting up Network Policies: Network Policies control network traffic, not resource usage.

C. Configuring RBAC: RBAC manages access permissions, not resource allocation.

D. Implementing Continuous Deployment (CD): CD automates deployments but does not address resource contention.

Comprehensive and Detailed Explanation From Exact Extract of Nutanix Kubernetes Platform Administration (NKPA) Course:

The NKPA course outlines the process of adding GPU-enabled worker nodes to an existing NKP-managed Kubernetes cluster, such as the production cluster in this scenario. The first step in this process is to ensure that a GPU-compatible OS image is available for the new worker nodes, as GPU support requires specific drivers and configurations (e.g., NVIDIA drivers) that are not included in standard OS images.

The correct first step is tocreate a GPU-compatible OS imageusing the command:

text

CollapseWrap

Copy

nkp create image nutanix --gpu \

--gpu-name=${GPU_NAME} \

--cluster=${NUTANIX_CLUSTER_NAME} \

--endpoint=${NUTANIX_PC_ENDPOINT} \

--subnet=${NUTANIX_SUBNET} ubuntu-22.04

(Option D). This command uses the NKP CLI to create a machine image based on Ubuntu 22.04, tailored for Nutanix AHV infrastructure (nutanix) with GPU support enabled (--gpu). The --gpu-name flag specifies the GPU type (e.g., NVIDIA GPU model), and other parameters define the Nutanix cluster, Prism Central endpoint, and subnet for image creation. The resulting image includes the necessary NVIDIA drivers and dependencies, making it suitable for GPU-enabled worker nodes. The Nutanix Cloud Native (NCP-CN) 6.10 Study Guide states: “Before adding GPU-enabled workers to an NKP cluster on Nutanix, the first step is to create a GPU-compatible OS image using nkp create image nutanix --gpu, ensuring the image includes the required GPU drivers for the target infrastructure.”

This image is then used in subsequent steps (like Option A) to create a node pool with GPU-enabled workers. Without this image, the node pool creation in Option A would fail due to the lack of a suitable --vm-image.

Incorrect Options:

A. Create a nodepool of workers with GPU: This step requires a pre-existing GPU-compatible OS image (specified via --vm-image). Since the question does not indicate that such an image already exists, creating the image (Option D) must happen first.

B. Add the GPU Operator to the new workers: The NVIDIA GPU Operator can be installed to manage GPU resources, but this step occurs after the GPU-enabled workers are added to the cluster, not as the first step.

C. Configure Multi-Instance GPU (MIG): MIG configuration is an advanced GPU setup step that occurs after the workers are added and the GPU Operator is installed, not as the first step.

The NKPA course outlines the process for deploying an NKP cluster on Nutanix AHV infrastructure using the NKP CLI. For a prompt-based deployment, where the administrator is guided through configuration options interactively, the correct command isnkp create cluster ahv. This command initiates the deployment of an NKP cluster on the AHV hypervisor, prompting the administrator to input details like cluster name, node counts, and networking settings.

The Nutanix Cloud Native (NCP-CN) 6.10 Study Guide states: “To deploy an NKP cluster on AHV using the prompt-based CLI method, use nkp create cluster ahv, which guides the administrator through the configuration process.” The command is specific to the AHV hypervisor (part of AOS 6.10) and is suitable for the specified hardware (NX-8170-G9 nodes).

Incorrect Options:

A. nkp create cluster nutanix: The provider is specified as ahv, not nutanix, in the NKP CLI syntax.

C. nkp create nodepool nutanix: This creates a node pool, not a cluster, and is not prompt-based.

D. nkp install kommander: Kommander is a management component, not used for cluster creation on AHV.

TheNKPA 6.10 documentationconfirms thatVelerois the built-in backup and recovery solution provided as part of the NKP platform. It provides cluster-level and namespace-level backup, restore, and migration capabilities.

Exact extract from the documentation:

“Velero is the integrated, out-of-the-box backup and restore solution in NKP. It supports scheduled backups, disaster recovery, and application migration workflows.”

As per the “Nutanix Kubernetes Platform Administration (NKPA)” documentation, during the preparation of the environment for an air-gapped deployment, the first task involves installing critical software packages on the bastion host. The bastion host acts as a jump host in a secure network and requires tools such as yum-utils, bzip2, and wget to facilitate the retrieval and processing of required images and configuration files.

Specifically, in theNKPA 6.10 course under "Preparing the Air-gapped Environment", the documentation clearly states:

"The initial step for configuring the bastion host includes installing required pre-requisites like yum-utils, bzip2, and wget. This ensures that the host has the basic tools to download and manage required container images and other dependencies."

This step is explicitly called out as the first actionable item before proceeding to more advanced tasks like configuring public IP access or creating a bootstrap cluster. The need for these pre-requisite packages is foundational, as they are required to handle image downloading and manipulation in the subsequent steps of the air-gapped installation process.

The NKPA course emphasizes that NKP supports multi-tenancy through workspaces, each of which can be configured with its own Identity Provider (IdP) for authentication. In this scenario, each group (Fin VD, Fin Insurance, Fin Travel) has its own IdP, and the engineer has created separate workspaces for them. To assign the Tenant Administrators role, the engineer must configure a dedicated IdP for each group’s workspace, enabling users to authenticate via their group-specific IdP and assume the Tenant Administrator role.

The course details that NKP uses Dex as the OIDC provider to integrate with external IdPs. For each workspace, the engineer configures a Dex connector to the group’s IdP, maps the IdP groups to NKP roles (e.g., Tenant Administrator), and assigns permissions via role bindings. The Nutanix Cloud Native (NCP-CN) 6.10 Study Guide states: “To assign Tenant Administrator roles in NKP, configure a dedicated IdP for each workspace using Dex connectors, mapping IdP groups to the appropriate roles for workspace management.” This ensures that each group’s administrators can access only their designated workspace.

Incorrect Options:

B. Create a role named admin-tenant-X: NKP uses predefined roles like Tenant Administrator, not custom roles with specific naming conventions.

C. Create a role binding and assign it: Role bindings are part of the process, but the primary step is configuring the IdP for authentication, as per the NKPA course.

D. Configure the global Active Directory: The scenario specifies separate IdPs per group, not a global Active Directory for all groups.