Spring Sale 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: exams65

ExamsBrite Dumps

Nutanix Certified Professional - Cloud Native (NCP-CN-6.10) Question and Answers

Nutanix Certified Professional - Cloud Native (NCP-CN-6.10)

Last Update Feb 28, 2026
Total Questions : 108

We are offering FREE NCP-CN Nutanix exam questions. All you do is to just go and sign up. Give your details, prepare NCP-CN free exam questions and then go for complete pool of Nutanix Certified Professional - Cloud Native (NCP-CN-6.10) test questions that will help you more.

NCP-CN pdf

NCP-CN PDF

$36.75  $104.99
NCP-CN Engine

NCP-CN Testing Engine

$43.75  $124.99
NCP-CN PDF + Engine

NCP-CN PDF + Testing Engine

$57.75  $164.99
Questions 1

A developer asked a Platform Engineer to review a deployment in the cluster called iot-1 in the workspace iot-plant-3, but the engineer does not have the kubeconfig file. Which command is valid for generating the kubeconfig file to review the Kubernetes cluster?

Options:

A.  

kubectl get kubeconfig --cluster-name=iot-1 -w iot-plant-3 > iot-1.conf

B.  

nkp get kubeconfig -c iot-1 -w iot-plant-3 > iot-1.conf

C.  

kubectl get secret iot-1 -n kommander > iot-1.conf

D.  

nkp get configmaps -n iot-plant-3 -c iot-1 > iot-1.conf

Discussion 0
Questions 2

Prior to implementing NKP, a company had created a number of Kubernetes (K8s) clusters using kubeadm. While they are deploying new managed clusters via NKP, the company does not wish to migrate workloads from these pre-existing native K8s clusters over to new NKP clusters just yet.

What are the requirements to have these clusters attached to their NKP management cluster?

Options:

A.  

The version of the K8s clusters must be within N - 1 of the Kubernetes version of the NKP management cluster.

B.  

The NKP management cluster must be able to reach the services and api-server of the target cluster.

C.  

The version of the K8s clusters must match the Kubernetes version of the NKP management cluster.

D.  

An NKP management cluster admin account must be established on the K8s clusters.

Discussion 0
Questions 3

A Platform Engineer wants to deploy a custom OS image for multiple NKP clusters for Nutanix AHV and AWS. Which two tools come bundled to facilitate creating and placing a custom image into the respective image repository?

Options:

A.  

Konvoy Image Builder

B.  

Nutanix Image Builder

C.  

Terraform

D.  

Ansible

Discussion 0
Questions 4

A Platform Engineer needs to do an air-gapped installation of NKP. This environment needs to run without Internet access and be fully operational, including updates. Docker has been installed, and the NKP bundle exists on a bastion host. What is the first command that the engineer must run to begin the process?

Options:

A.  

nkp push bundle --bundle

B.  

docker load -i konvoy-bootstrap-image-v2.12.0.tar

C.  

tar -xzvf nkp-air-gapped-bundle_v2.12.0_linux_amd64.tar.gz

D.  

nkp create cluster nutanix

Discussion 0
Questions 5

Looking at the nodepools for the Kubernetes cluster named demo, there is a node pool named md-1 with only one worker. This worker should be deleted along with the node pool md-1.

How should this task be accomplished?

Options:

A.  

Run nkp delete nodepool md-1 --cluster-name=demo

B.  

Run acli vm.delete demo-md-1-hQ2sz-mw4p6-fptc

C.  

Run ncli vm.delete demo-md-1-hQ2sz-mw4p6-fptc

D.  

Run nkp node scale nodepool md-1 --replicas=0 --cluster-name=demo

Discussion 0
Questions 6

A Cloud Engineer is deploying an NKP Cluster in AWS. The environment is for testing purposes only, so the AWS team has requested it be deployed to use a minimal set of system resources to reduce cloud subscription fees. Which two parameters should be specified when initializing a Kommander installation, using the nkp install kommander command set? (Choose two.)

Options:

A.  

--request-timeout

B.  

--wait-timeout

C.  

--yaml

D.  

--init

Discussion 0
Questions 7

Which NKP tier is required for the FIPS Compliant Build feature?

Options:

A.  

Advanced

B.  

Enterprise

C.  

Starter

D.  

Pro

Discussion 0
Questions 8

A dev team needed to optimize their logging system to be more robust, because the CPU and memory limits were insufficient, which caused delays in log collection and processing during times of high demand.

After a deep performance analysis, they decided to increase the CPU limits from 1 to 4 and the memory from 1000Mi to 4Gi.

Which ConfigMap should the development team run with custom resource requests and limit values for fluentd?

Options:

A.  

bash

Copy

[nutanix@nkp-boot ~]$ cat < configmap.yaml

apiVersion v1

kind ConfigMap

metadata

name logging-operator-logging-overrides

namespace kommander

data

values.yaml |

fluentd

resources

limits

cpu 1

memory 1000Mi

requests

cpu 4

memory 4Gi

EOF

B.  

bash

Copy

[nutanix@nkp-boot ~]$ cat < configmap.yaml

apiVersion: v1

kind: ConfigMap

metadata:

name: logging-operator-logging-overrides

namespace: kommander

data:

values.yaml: |

fluentd:

resources:

limits:

cpu: 4

memory: 4Gi

requests:

cpu: 4

memory: 4Gi

EOF

C.  

bash

Copy

[nutanix@nkp-boot ~]$ cat < configmap.yaml

apiVersion v1

kind ConfigMap

metadata

name logging-operator-logging-overrides

namespace kommander

data

values.yaml |

fluentd

resources

limits

cpu 4

EOF

values.yaml |

fluentd

resources

limits

cpu 4

memory 4Gi

requests

cpu 1

memory 1000Mi

D.  

bash

Copy

[nutanix@nkp-boot ~]$ cat < configmap.yaml

apiVersion: v1

kind: ConfigMap

metadata:

name: logging-operator-logging-overrides

namespace: kommander

data:

values.yaml: |

fluentd

resources

limits

cpu 4

memory 1000Mi

requests

cpu 1

memory 4Gi

EOF

Discussion 0
Questions 9

A Platform Engineer for an organization does research in Antarctica. The engineer is preparing a bastion host for deploying NKP while the infrastructure is isolated. Which programs should the engineer ensure are installed on a bastion host before shipping the infrastructure?

Options:

A.  

awscli and nkp

B.  

oc and kubectl

C.  

oc and az

D.  

kubectl and nkp

Discussion 0
Questions 10

A Cloud Engineer is deploying an NKP cluster into an AWS environment. By default, when deploying NKP on AWS infrastructure, it generates the supporting infrastructure necessary for the cluster (VPC, subnets, ELBs). However, the AWS team has insisted that the NKP cluster be deployed on existing AWS infrastructure. How can the engineer meet this requirement?

Options:

A.  

When using the nkp adopt infrastructure aws command set, include the valid parameters with the pre-existing VPC, subnets, and ELB to use. Deploy the NKP cluster using the nkp create cluster aws command set.

B.  

Create an overrides file with the pre-existing VPC, subnets, and ELB to use. When using the nkp create cluster aws command set, include the overrides parameter with the overrides file that was created.

C.  

Create an NKP infrastructure provider for AWS in the NKP UI. When deploying the NKP cluster through the UI, specify the pre-existing VPC, subnets, and ELB to use in the appropriate fields of the 'Infrastructure' section of the Create Cluster page.

D.  

When using the nkp create cluster aws command set, include the valid parameters with the pre-existing VPC, subnets, and ELB to use.

Discussion 0
Questions 11

A Platform Engineer is deploying an NKP workload cluster using the nkp create cluster vsphere command. The cluster will be utilized by the company’s code-green team and the engineer has already created a code-green NKP workspace on the NKP management cluster.

After issuing the deploy command, the engineer monitored the build using the nkp describe cluster command and confirmed it completed successfully. However, a few hours later, after logging into the NKP UI, the engineer checked the code-green NKP workspace and saw that the NKP workload cluster was not there.

What is the likely reason the NKP workload cluster is not in the code-green NKP workspace?

Options:

A.  

The vSphere cluster cannot be displayed in the NKP UI unless its Kubernetes version is within ‘N - 1’ versions of the NKP management cluster’s Kubernetes version.

B.  

The vSphere service account credentials had expired prior to the engineer’s attempt to view the cluster in the NKP UI. Once the credentials are refreshed, the vSphere cluster will reappear in the NKP workspace.

C.  

The engineer did not supply the --namespace code-green parameter as part of the nkp create cluster vsphere command, therefore it was created in the default workspace and needs to be manually attached.

D.  

NKP vSphere clusters cannot be assigned NKP workspaces and instead are assigned the default NKP workspace. The cluster can be viewed from this workspace instead.

Discussion 0
Questions 12

A Cloud Engineer manages an NKP environment and is preparing a machine image to become an NKP cluster node.

Which statement is regarding the default node preparation process?

Options:

A.  

Shell scripts are used to harden the OS image for use as an NKP node.

B.  

Ansible is used to validate the OS image is capable of running NKP.

C.  

Goss is used to make the OS image CAPI compliant for use as an NKP node.

D.  

Goss is used to validate the OS image is capable of running NKP.

Discussion 0
Questions 13

A company recently deployed NKP. A Platform Engineer was asked to attach the existing Amazon EKS. A workspace and project were created accordingly, and resource requirements were met. What does the engineer need to do first to prepare the EKS clusters?

Options:

A.  

Configure a ConfigMap according to EKS configuration.

B.  

Create a service account with cluster-admin permissions.

C.  

Configure HAProxy to get connected to EKS clusters.

D.  

Deploy cert-manager in the EKS clusters.

Discussion 0
Questions 14

A Platform Engineer needs to utilize the Konvoy Image Builder for building a custom operating system image. This image will be used to deploy clusters on various platforms. The engineer has been tasked with creating an OS image compatible with Konvoy’s requirements. In order to successfully build a compatible image using the Konvoy Image Builder, the engineer needs to ensure that a development environment meets the necessary prerequisites.

Which system is required to create a compatible OS image with the Konvoy Image Builder?

Options:

A.  

A lambda instance within an AWS account

B.  

A virtualized arm64 environment using KVM

C.  

A 32-bit Windows machine with a USB connection

D.  

An x86_64-based Linux or MacOS Machine

Discussion 0
Questions 15

A company is developing a new web application consisting of several microservices, including:

    Authentication service

    User management service

    Payment processing service Each microservice is developed by different teams and requires an isolated environment for testing and development. To facilitate development and testing, the team decides to create a specific workspace in NKP. What should the team do to start this new creation?

Options:

A.  

From the Cluster selection, select Add Cluster.

B.  

From the workspace selection dropdown list in the top menu bar, select Create Workspace.

C.  

From the workspace selection dropdown list in the top menu bar, select Add Workspace.

D.  

From the Administration selection dropdown list in Infrastructure Providers, select Add Infrastructure Provider.

Discussion 0
Questions 16

A DevOps team faces a growing challenge of managing logs from multiple applications in an NKP cluster. With several teams working on different projects, it is essential to implement a Multi-Tenant Logging system that allows each team to access their own logs securely and efficiently. Initially, two namespaces have been configured for each project, as shown in the exhibit. Then a ConfigMap has also been configured for each tenant, which contains the logging configuration. Which YAML output corresponds to a retention period of 30 days for tenant-innovation and seven days for tenant-analytics?

Options:

A.  

yaml

CollapseWrap

Copy

apiVersion: v1

kind: ConfigMap

metadata:

name: logging-innovation-config

namespace: tenant-innovation

data:

values.yaml: |

loki:

structuredConfig:

limits_config:

retention_period: 30d

---

apiVersion: v1

kind: ConfigMap

metadata:

name: logging-analytics-config

namespace: tenant-analytics

data:<

B.  

yaml

CollapseWrap

Copy

apiVersion: v1

kind: ConfigMap

metadata:

name: logging-innovation-config

namespace: tenant-innovation

data:

values.yaml: |

loki:

structuredConfig:

limits_config:

retention_period: 30d

---

apiVersion: v1

kind: ConfigMap

metadata:

name: logging-analytics-config

namespace: tenant-innovation

data:

C.  

yaml

CollapseWrap

Copy

apiVersion: v1

kind: ConfigMap

metadata:

name: logging-innovation-config

namespace: tenant-innovation

data:

values.yaml: |

loki:

structuredConfig:

limits_config:

retention_period: 30h

---

apiVersion: v1

kind: ConfigMap

metadata:

name: logging-analytics-config

namespace: tenant-analytics

data:<

D.  

yaml

CollapseWrap

Copy

apiVersion: v1

kind: ConfigMap

metadata:

name: logging-innovation-config

namespace: tenant

data:

values.yaml: |

loki:

structuredConfig:

limits_config:

retention_period: 30d

---

apiVersion: v1

kind: ConfigMap

metadata:

name: logging-analytics-config

namespace: tenant

data:

values.yaml: |<

Discussion 0
Questions 17

A Platform Engineer needs to create an NKP custom image for vSphere.

Which option should the engineer use?

Options:

A.  

Konvoy Image Builder

B.  

Nutanix Image Builder

C.  

Hashicorp Packer

D.  

RedHat Satellite

Discussion 0
Questions 18

A Platform Engineer is a member of an IT team that provides Kubernetes clusters for three groups within a company named Fin Group, Inc.:

    Fin VD

    Fin Insurance

    Fin TravelThe engineer created workspaces for each group. Fin Group Inc. has its own Active Directory implementation, while each group uses their own Identity Provider. Now, the engineer needs to assign the Tenant Administrators role for each workspace. How will the engineer complete this task?

Options:

A.  

Configure a dedicated identity provider for each group to access their own workspace.

B.  

Create a role named admin-tenant-X, where X is the name of the group, and assign that role to manage the corresponding workspace.

C.  

Create a role binding and assign it to manage the corresponding workspace.

D.  

Configure the global Active Directory and assign a workspace admin user to each group.

Discussion 0
Questions 19

A Platform Engineer has been tasked with backing up and restoring a production environment to ensure persistent data is available during a disaster at a primary site. What is recommended for backup and restore production use cases?

Options:

A.  

Protection Domain

B.  

Rook Ceph

C.  

External Storage Class

D.  

S3-compatible API

Discussion 0
Questions 20

Which two statements are true regarding deploying NKP on an Azure Kubernetes Service (AKS) Infrastructure? (Choose two.)

Options:

A.  

Existing AKS clusters must be attached to the Management cluster.

B.  

AKS best practices encourage building customized images.

C.  

NKP Management cluster with the Kommander component must be installed before installing NKP on AKS cluster.

D.  

AKS clusters can be deployed as Management or Pro NKP clusters.

Discussion 0
Questions 21

A Platform Engineer has been tasked with setting up a secure and isolated environment for managing an NKP environment. The environment will have no access to the Internet but will be required to create additional NKP clusters in the future. The security team has recommended using a bastion host to achieve this goal. What is the primary purpose of a bastion host in this scenario?

Options:

A.  

To store and manage sensitive data related to the cluster.

B.  

To provide a secure point for creating and operating NKP clusters.

C.  

To serve as a load balancer for the NKP clusters.

D.  

To act as a firewall for the cluster, blocking all incoming traffic.

Discussion 0
Questions 22

A Platform Engineer is preparing an AWS instance using KIB for becoming an NKP cluster node. During the process, the source AMI is successfully cloned, and multiple preparation steps have occurred against the cloned AMI, such as gathering OS-release facts and uploading image bundles to it. However, the process encounters an error and ultimately fails. What is one troubleshooting step the engineer can perform that may help identify the root cause of the issue?

Options:

A.  

Rerun the KIB command, including the pause parameter, so that each command in the KIB-prep sequence and its return can be reviewed in detail before allowing the prep process to continue.

B.  

Rerun the KIB command, including the parameter to set the verbosity level to debug, so that all issued AWS CLI commands and their returns are included and added to an exported log file for review.

C.  

Rerun the KIB command, including the parameter to instruct Packer not to automatically delete the cloned AMI on error. This way the OS image can be accessed and further inspected.

D.  

Rerun the KIB command, including the parameter to instruct Ansible not to automatically delete the cloned AMI on error. This way the OS image can be accessed and further inspected.

Discussion 0
Questions 23

After loading the NKP bundles to a private registry in an air-gapped environment, a Platform Engineer now needs the Konvoy bootstrap image to create the bootstrap cluster. The Konvoy image has not been loaded into the registry. Which is the most viable command to load the Konvoy bootstrap image on the bastion host?

Options:

A.  

docker load -i konvoy-bootstrap-image-.tar

B.  

docker image tag konvoy-bootstrap-image-.tar version docker.io/konvoy-bootstrap version

C.  

nkp push bundle --bundle konvoy-bootstrap-image-.tar --to-registry=

D.  

nkp load image -f konvoy-bootstrap-image-.tar --to-registry=

Discussion 0
Questions 24

In which unit are NKP licenses able to be obtained?

Options:

A.  

Flash

B.  

CPU Sockets

C.  

TiBs

D.  

CPU Cores

Discussion 0
Questions 25

Which option is enabled with the NKP Pro licensing tier?

Options:

A.  

Insights

B.  

Kubernetes Dashboard

C.  

AI OPS

D.  

Fleet Management

Discussion 0
Questions 26

NKP cluster nodes require a disk for some of its deployed components, outside of an application’s persistent volume requirements. What are these components and where are they deployed?

Options:

A.  

kubelet and containerd, in /opt/nkp

B.  

kubelet and containerd in /var/lib

C.  

kubectl and kubelet in /opt/nkp

D.  

kubectl and kubelet in /var/nkp

Discussion 0
Questions 27

There is a private registry for the NKP deployment and the company has an NKP Ultimate license. A Platform Engineer is using the Podman tool and is already logged in. Now, the engineer needs to send the private registry with the NKP Catalog Applications.

What command should the engineer use?

Options:

A.  

podman load -i ./container-images/nkp/catalog-applications-image-bundle-v2.12.0.tar

B.  

nkp push bundle --bundle ./container-images/nkp/catalog-applications-image-bundle-v2.12.0.tar --to-registry=${REGISTRY_URL} --to-registry-username=${REGISTRY_USERNAME} --to-registry-password=${REGISTRY_PASSWORD}

C.  

docker load -i ./container-images/nkp/catalog-applications-image-bundle-v2.12.0.tar

D.  

nkp apply bundle -f ./container-images/nkp/catalog-applications-image-bundle-v2.12.0.tar --to-registry=${REGISTRY_URL} --to-registry-username=${REGISTRY_USERNAME} --to-registry-password=${REGISTRY_PASSWORD}

Discussion 0
Questions 28

A development team is working on a new application that requires access to certain cluster resources. The team needs to ensure that they have limited permissions to avoid unauthorized changes in other environments. Among the tasks they will perform are the following:

    Deploy new versions of the application to their specific namespace.

    Scale deployments according to demand.

    View logs and metrics of their applications to monitor performance.When using the NKP GUI, what type of access should the team configure?

Options:

A.  

NKP Role

B.  

Cluster Role

C.  

Cluster Admin

D.  

Kommander Role

Discussion 0
Questions 29

A company has decided to expand NKP to features that require higher product tiers, like fleet-management and additional infrastructure providers. The company has already obtained the necessary licensing. Which action is required when adding and activating a license from NKP Starter to a higher-tier product?

Options:

A.  

Contact Nutanix Support.

B.  

Ensure that worker nodes are sized appropriately.

C.  

Log out and log back in as a Global License Administrator.

D.  

Regenerate the ACME-based certificate for NKP.

Discussion 0
Questions 30

At a national defense company, protecting sensitive data is their top priority. With the increase in cyber-attacks, they have decided to implement an air-gapped Kubernetes environment to manage their critical applications, ensuring that no information could leak to the outside. The Kubernetes environment has three clusters deployed for their applications with centralized management. What type of licensing is required to enable this environment?

Options:

A.  

NKP Starter

B.  

NKP Ultimate

C.  

NKP Pro

D.  

NKP UI

Discussion 0
Questions 31

An ecommerce company decides to apply an autoscaling configuration in its NKP cluster due to the fact that on holidays, they experience service drops due to a huge increase of simultaneous traffic.

Which statement best describes the configuration shown in the exhibit?

Options:

A.  

The autoscaler could have 15 or 3 nodes.

B.  

The autoscaler could increase the number of nodes as needed, but never reduce it below 3.

C.  

The autoscaler could increase the number of nodes up to 15, but never reduce the number below 3.

D.  

The autoscaler could increase the number of nodes up to 3, but never reduce it below 15.

Discussion 0
Questions 32

A Platform Engineer manages an NKP environment and is preparing a machine image to become an NKP cluster node. Which statement is correct regarding the default node preparation process?

Options:

A.  

Packer is used to make the OS image CAPI-compliant for use as an NKP node.

B.  

Ansible is used to make the OS image CAPI-compliant for use as an NKP node.

C.  

Goss is used to harden the OS image for use as an NKP node.

D.  

Terraform is utilized to clone an existing OS image for use as an NKP node.

Discussion 0