[Apr 27, 2026] Valid NCP-CN Test Answers & NCP-CN Exam PDF [Q20-Q40]

NEW QUESTION 20
A company has a new DevOps team that needs to be provided cloud native computing resources. This team will need to have access to multiple NKP clusters for development, testing and validation of an in-house application. However, they also need to be restricted to a specific namespace and a consistent level of access across the clusters within this namespace so that they do not adversely impact the environment of other user groups or the clusters themselves.
As a part of this consideration, the new team also needs to be limited to the amount of storage, CPU and memory they can consume on the clusters. A Platform Engineer has been tasked with providing the appropriate level of access to the team on these multiple NKP clusters.
How should the engineer best accomplish this task?

1.Create an NKP project and assign the NKP clusters to it.2.Create quotas for the NKP project.3.Create an NKP group for the DevOps team.4.Assign that NKP group the proper RBAC roles within that NKP project.

1.Create an NKP workspace and assign the NKP clusters to it.2.Create quotas for the NKP workspace.3.Create an NKP group for the DevOps team.4.Assign that NKP group the proper RBAC roles within that NKP workspace.

1.Create an NKP group for the DevOps team.2.Assign that NKP group the proper RBAC roles in the NKP UI.3.Select the export to yaml option once the RBAC role assignment to that NKP group is complete.4.Apply the exported manifest to each of the NKP clusters using kubectl.

1.Enable Gatekeeper on the NKP clusters.2.Create an NKP group for the DevOps team.3.Assign Gatekeeper quota and authorization policies to that NKP group.

NEW QUESTION 21
A development Kubernetes cluster deployed with NKP is having performance issues. The Cloud Engineer commented that worker VMs are consuming a lot of CPU and RAM. The Platform Engineer took a look at the CPU and RAM statistics with Grafana and confirmed that the worker VMs are running out of CPU and memory. The Kubernetes cluster has 4 workers with 8 vCPUs and 32 GB RAM. What could the Platform Engineer do?

Call tech support to take a look at the infrastructure and investigate.

Ask developers to lower the number of application replicas.

Add more CPU and memory to workers with nkp scale –cpu 16 –memory 64 –cluster-name ${CLUSTER_NAME}

Add one more worker with nkp scale nodepools ${NODEPOOL_NAME} –replicas=5 –cluster-name=${CLUSTER_NAME} -n ${CLUSTER_WORKSPACE}

NEW QUESTION 22
A Cloud Engineer is deploying an NKP management cluster and plans to deploy multiple NKP workload clusters from it. The management cluster will be on Nutanix infrastructure, but the NKP workload clusters may be deployed in multiple provisioning environments, such as:
* Nutanix
* AWS
* AzureWhen the engineer deploys an NKP workload cluster in AWS, which two default behaviors will be performed by NKP on this newly-deployed cluster? (Choose two.)

The NKP workload cluster will receive all of the GitOps sources that have been assigned to the NKP workspace.

The NKP workload cluster will receive all of the NKP RBAC policy that has been assigned to this NKP workspace.

The NKP workload cluster will also be assigned to all of the NKP projects that have been created within the NKP workspace.

The NKP workload cluster will be deployed all of the applications that have been enabled on this NKP workspace.

The NKPA course outlines the default behaviors of NKP when deploying workload clusters within a workspace, regardless of the provisioning environment (e.g., AWS, Nutanix, Azure). When a workload cluster is deployed in AWS, NKP ensures consistency across the workspace by applying the following default behaviors:
* The NKP workload cluster will receive all of the GitOps sources that have been assigned to the NKP workspace (Option A): NKP uses GitOps with Flux to manage cluster configurations and applications. The course explains that GitOps sources (e.g., Git repositories) assigned to a workspace are automatically applied to all clusters in that workspace, ensuring consistent configuration and application deployment. The Nutanix Cloud Native (NCP-CN) 6.10 Study Guide states: “New workload clusters inherit all GitOps sources configured for the workspace, enabling Flux to synchronize configurations from the specified repositories.”
* The NKP workload cluster will be deployed all of the applications that have been enabled on this NKP workspace (Option D): NKP Platform Applications (e.g., Prometheus, Rook Ceph) enabled in the workspace are automatically deployed to new workload clusters. The NKPA course notes: “When a workload cluster is created, NKP deploys all platform applications enabled in the workspace to ensure consistent functionality across clusters.” Incorrect Options:
* B. The NKP workload cluster will receive all of the NKP RBAC policy: RBAC policies are defined at the workspace or project level and applied to users or groups, not automatically to clusters. Clusters inherit RBAC through user access, not as a default deployment behavior.
* C. The NKP workload cluster will also be assigned to all of the NKP projects: Clusters are assigned to specific projects manually, not automatically to all projects in a workspace.
:
Nutanix Kubernetes Platform Administration (NKPA) Course, Section on Workload Cluster Deployment.
Nutanix Cloud Native (NCP-CN) 6.10 Study Guide, Chapter on Workspace Management.
Nutanix Cloud Bible, NutanixKubernetesPlatform Section: https://www.nutanixbible.com

NEW QUESTION 23
A Platform Engineer has been tasked with backing up and restoring a production environment to ensure persistent data is available during a disaster at a primary site. What is recommended for backup and restore production use cases?

Protection Domain

Rook Ceph

External Storage Class

S3-compatible API

NEW QUESTION 24

A Platform Engineer is preparing to deploy an NKP cluster in an air-gapped environment. The NKP cluster will be deployed on Nutanix infrastructure using the CAPI Nutanix provisioner (CAPX). The engineer has decided to create the bootstrap cluster first, then NIB-prep an Ubuntu 22.04 OS image that the Linux engineering team has provided in Prism Central. After that, the engineer will deploy the NKP cluster.
However, during the first step of creating a bootstrap cluster, the engineer received the error shown in the exhibit. What could be the reason?

The CAPI provisioning method needs to be specified as part of the command nkp create bootstrap nutanix.

The bootstrap cluster image needs to be loaded prior to creating the bootstrap cluster.

The Ubuntu 22.04 OS image needs to be NIB-prepped prior to creating the bootstrap.

The nkp create bootstrap command needs to be executed as root.

The exhibit indicates an error during the creation of a bootstrap cluster using the nkp create bootstrap command in an air-gapped environment. The NKPA course explains that a bootstrap cluster is a temporary Kubernetes cluster used to initialize Cluster API (CAPI) components for provisioning the target NKP cluster.
In an air-gapped environment, all required resources, including container images, must be available locally since there is no Internet access to pull them from public registries.
The most likely reason for the error is that the bootstrap cluster image needs to be loaded prior to creating the bootstrap cluster (Option B). The course specifies that in air-gapped deployments, the bootstrap cluster image (typically a kind or k3s image used by CAPI) must be pre-loaded into a local container registry or the bastion host before running nkp create bootstrap. This image is part of the Air-Gapped Bundle provided by Nutanix, which includes all necessary container images for NKP deployment. Without pre-loading this image, the nkp create bootstrap command fails because it cannot pull the required image.
The Nutanix Cloud Native (NCP-CN) 6.10 Study Guide states: “In an air-gapped NKP deployment, ensure the bootstrap cluster image (e.g., kindest/node) is loaded into a local registry or host before executing nkp create bootstrap, as the command requires this image to create the temporary cluster.” The engineer must extract the bootstrap image from the Air-Gapped Bundle, load it using docker load or similar, and configure the local registry to make it accessible during the bootstrap process.
Incorrect Options:
* A. The CAPI provisioning method needs to be specified as nkp create bootstrap nutanix: The nkp create bootstrap command does not require a provisioning method like nutanix at this stage; the provider (e.g., CAPX for Nutanix) is specified during the actual cluster creation (nkp create cluster), not bootstrap creation.
* C. The Ubuntu 22.04 OS image needs to be NIB-prepped prior to creating the bootstrap: The Ubuntu 22.04 image is for the target NKP cluster nodes, not the bootstrap cluster, which uses a pre- built image (e.g., kind). NIB-prepping this image is a later step.
* D. The nkp create bootstrap command needs to be executed as root: While some commands may require elevated privileges, the NKPA course does not specify that nkp create bootstrap must be run as root. The error is more likely related to missing images in an air-gapped setup.
:
Nutanix Kubernetes Platform Administration (NKPA) Course, Section on Bootstrap Cluster Creation in Air- Gapped Environments.
Nutanix Cloud Native (NCP-CN) 6.10 Study Guide, Chapter on Air-Gapped Deployments.
Nutanix Cloud Bible, NutanixKubernetesPlatform Section: https://www.nutanixbible.com Cluster API Documentation: https://cluster-api.sigs.k8s.io

NEW QUESTION 25
A company has a new DevOps team that needs to be provided cloud native computing resources. This team will need to have access to multiple NKP clusters for development, testing and validation of an in-house application. However, they also need to be restricted to a specific namespace and a consistent level of access across the clusters within this namespace so that they do not adversely impact the environment of other user groups or the clusters themselves.
As a part of this consideration, the new team also needs to be limited to the amount of storage, CPU and memory they can consume on the clusters. A Platform Engineer has been tasked with providing the appropriate level of access to the team on these multiple NKP clusters.
How should the engineer best accomplish this task?

1.Create an NKP project and assign the NKP clusters to it.
2.Create quotas for the NKP project.
3.Create an NKP group for the DevOps team.
4.Assign that NKP group the proper RBAC roles within that NKP project.

1.Create an NKP workspace and assign the NKP clusters to it.
2.Create quotas for the NKP workspace.
3.Create an NKP group for the DevOps team.
4.Assign that NKP group the proper RBAC roles within that NKP workspace.

1.Create an NKP group for the DevOps team.
2.Assign that NKP group the proper RBAC roles in the NKP UI.
3.Select the export to yaml option once the RBAC role assignment to that NKP group is complete.
4.Apply the exported manifest to each of the NKP clusters using kubectl.

1.Enable Gatekeeper on the NKP clusters.
2.Create an NKP group for the DevOps team.
3.Assign Gatekeeper quota and authorization policies to that NKP group.

NEW QUESTION 26
A Platform Engineer has been tasked with setting up a secure and isolated environment for managing an NKP environment. The environment will have no access to the Internet but will be required to create additional NKP clusters in the future. The security team has recommended using a bastion host to achieve this goal.
What is the primary purpose of a bastion host in this scenario?

To store and manage sensitive data related to the cluster.

To provide a secure point for creating and operating NKP clusters.

To serve as a load balancer for the NKP clusters.

To act as a firewall for the cluster, blocking all incoming traffic.

NEW QUESTION 27
A Cloud Engineer is deploying an NKP management cluster and plans to deploy multiple NKP workload clusters from it. The management cluster will be on Nutanix infrastructure, but the NKP workload clusters may be deployed in multiple provisioning environments, such as:
Nutanix
AWS
AzureWhen the engineer deploys an NKP workload cluster in AWS, which two default behaviors will be performed by NKP on this newly-deployed cluster? (Choose two.)

The NKP workload cluster will receive all of the GitOps sources that have been assigned to the NKP workspace.

The NKP workload cluster will receive all of the NKP RBAC policy that has been assigned to this NKP workspace.

The NKP workload cluster will also be assigned to all of the NKP projects that have been created within the NKP workspace.

The NKP workload cluster will be deployed all of the applications that have been enabled on this NKP workspace.

NEW QUESTION 28

A Platform Engineer is trying to create a new NKP cluster and is getting the error shown in the exhibit.
What is the most likely cause of this error?

A docker compatible runtime is not running

Informatting in the Ansible playbook

Inpermissions to the NKP binary

An inHelm chart repo was referenced

NEW QUESTION 29
A Platform Engineer for an organization does research in Antarctica. The engineer is preparing a bastion host for deploying NKP while the infrastructure is isolated. Which programs should the engineer ensure are installed on a bastion host before shipping the infrastructure?

awscli and nkp

oc and kubectl

oc and az

kubectl and nkp

NEW QUESTION 30
A Platform Engineer is running a Kubernetes cluster version 1.28.1 on AWS that needs to be upgraded to version 1.29.9. This cluster was deployed with Nutanix NKP. Which two actions should the engineer take to complete this requirement? (Choose two.)

Upgrade Workers with nkp update nodepool aws ${NODEPOOL_NAME} –cluster- name=${CLUSTER_NAME} –kubernetes-version=v1.29.9

Upgrade Control Planes with nkp update controlplane aws –cluster-name=${CLUSTER_NAME} — ami AMI_ID –kubernetes-version=v1.29.9

Upgrade Workers with nkp upgrade nodepool aws ${NODEPOOL_NAME} –cluster- name=${CLUSTER_NAME} –kubernetes-version=v1.29.9

Upgrade the Cluster with nkp update cluster aws –cluster-name=${CLUSTER_NAME} –ami AMI_ID
–kubernetes-version=v1.29.9

The NKPA course details the process for upgrading an NKP-managed Kubernetes cluster, such as one running on AWS from version 1.28.1 to 1.29.9. Upgrading a Kubernetes cluster involves two distinct steps:
upgrading the control plane nodes and upgrading the worker nodes, ensuring minimal disruption and maintaining compatibility. The NKP CLI provides specific commands to handle these upgrades separately for AWS clusters.
* Upgrade Control Planes with nkp update controlplane aws –cluster-name=${CLUSTER_NAME}
–ami AMI_ID –kubernetes-version=v1.29.9 (Option B):The control plane must be upgraded first to the target Kubernetes version (1.29.9). The nkp update controlplane aws command updates the control plane nodes, specifying the cluster name, the new Kubernetes version, and an updated AMI (Amazon Machine Image) that supports the target version. The Nutanix Cloud Native (NCP-CN) 6.10 Study Guide states: “To upgrade an NKP cluster on AWS, first update the control plane using nkp update controlplane aws –cluster-name <name> –ami <ami-id> –kubernetes-version <version> to ensure the control plane runs the desired Kubernetes version.” The –ami flag is required to specify a compatible image for the upgraded control plane nodes.
* Upgrade Workers with nkp upgrade nodepool aws ${NODEPOOL_NAME} –cluster- name=${CLUSTER_NAME} –kubernetes-version=v1.29.9 (Option C):After the control plane is upgraded, the worker nodes in each node pool must be upgraded to match the control plane version.
The nkp upgrade nodepool aws command updates the specified node pool to the target Kubernetes version (1.29.9). The NKPA course notes: “Upgrade worker nodes using nkp upgrade nodepool aws
<nodepool-name> –cluster-name <cluster-name> –kubernetes-version <version>, which performs a rolling update to ensure minimal downtime.” This command automatically handles the rolling update of worker nodes, replacing them with new nodes running the updated version. Note that the –ami flag is not required here, as NKP typically uses the same AMI as the control plane or retrieves a compatible one based on the version.
Incorrect Options:
* A. nkp update nodepool aws: The correct command is nkp upgrade nodepool, not nkp update nodepool. The NKPA course uses upgrade for version changes to node pools.
* D. nkp update cluster aws: This command is not the standard approach for upgrading Kubernetes versions in NKP. The course specifies separate commands for control plane and node pool upgrades to ensure a controlled process.
:
Nutanix Kubernetes Platform Administration (NKPA) Course, Section on Cluster Upgrades.
Nutanix Cloud Native (NCP-CN) 6.10 Study Guide, Chapter on Day 2 Operations.
Nutanix Cloud Bible, NutanixKubernetesPlatform Section: https://www.nutanixbible.com

NEW QUESTION 31
A company has been modernizing on cloud-native platforms for the past few years and has been running some small consumer support utilities on their production NKP cluster. After a thorough testing and QA cycle with simulated workloads on a development cluster, the company is ready to bring their online retail application into the fold. While they have sufficient system resources to scale the NKP cluster properly from a performance standpoint, they also want to ensure they properly scale their monitoring stack’s resource settings to retain a sufficient amount of data to see how overall system resource utilization trends for the NKP cluster over several months’ time with the added workloads. Which NKP Platform Application component should the company be most concerned with adjusting, and how should their Platform Engineer adjust it?

Adjust the number of replicas for the Fluent Bit deployment, as well as increase the amount of storage available for use by the NKP cluster.

Adjust the number of replicas for the Prometheus deployment, as well as increase the amount of storage available for use by the NKP cluster.

Adjust the resource settings for Fluent Bit by increasing its container resource limits and memory settings, as well as its storage.

Adjust the resource settings for Prometheus by increasing its container resource limits and memory settings, as well as its storage.

NEW QUESTION 32
NKP cluster nodes require a disk for some of its deployed components, outside of an application’s persistent volume requirements. What are these components and where are they deployed?

kubelet and containerd, in /opt/nkp

kubelet and containerd in /var/lib

kubectl and kubelet in /opt/nkp

kubectl and kubelet in /var/nkp

NEW QUESTION 33
A Platform Engineer is deploying a new NKP cluster that has internet connectivity. Now, a Cloud Administrator and Security Administrator are discussing the security of communications between the NKP Kubernetes cluster and the container registry. The engineer proposes to have an on-prem private registry.
What is the most significant reason that the engineer should create a private registry instead of configuring a secure connection between the NKP cluster and Github (SaaS)?

Private registry license is included with NKP.

NKP requires specific registry versions.

NKP cannot connect to public clouds.

Private registry provides security and privacy.

NEW QUESTION 34
A Kubernetes administrator has been tasked with deploying a new cluster to AWS. The administrator has received the following requirements for this deployment:
* Region us-east-1
* AMI rhel8.6What is a requirement for deploying a new cluster in AWS?

Use –dry-run parameter

Use –ami-format parameter

Set an export AWS_REGION

Set an export KUBECONFIG

NEW QUESTION 35
A corporate IT team provides Kubernetes clusters for three groups within the company:
* Fin VD
* Fin Insurance
* Fin TravelThe IT group needs to federate policy for all Kubernetes clusters from a single pane of glass, but separate the Kubernetes clusters according to the group that uses them. How should the IT team license and configure their NKP environment to satisfy these requirements?

NKP Ultimate for fleet management, creating three workspaces and assigning the corresponding Kubernetes cluster to each workspace.

NKP Starter for Kubernetes management, creating Kubernetes clusters for every company.

NKP Pro for project management, creating three projects and assigning the corresponding Kubernetes cluster to each project.

NKP Pro for workspace management, creating three workspaces and assigning the corresponding Kubernetes cluster to each workspace.

The NKPA course explains that NKP’s fleet management capabilities allow centralized policy federation and management of multiple Kubernetes clusters from a single pane of glass, while workspaces provide isolation for different teams or groups. To meet the requirement of federating policy while separating clusters by group, the IT team needs the NKP Ultimate license, which includes advanced fleet management features.
With NKP Ultimate, the IT team can:
* Create three workspaces (one for each group: Fin VD, Fin Insurance, Fin Travel).
* Assign the corresponding Kubernetes clusters to each workspace, ensuring isolation between groups.
* Use NKP’s fleet management to apply policies (e.g., RBAC, monitoring, logging) across all clusters from a single pane of glass, such as the NKP UI or CLI.
The Nutanix Cloud Native (NCP-CN) 6.10 Study Guide states: “NKP Ultimate provides fleet management for centralized policy federation across multiple clusters, using workspaces to isolate clusters for different teams or groups.” This setup ensures that each group’s clusters are separated while maintaining centralized policy management, aligning with the IT team’s requirements.
Incorrect Options:
* B. NKP Starter: The Starter license lacks fleet management and workspace isolation features, making it unsuitable for this scenario.
* C. NKP Pro with projects: Projects are sub-divisions within workspaces for resource allocation, not for cluster isolation or fleet management. NKP Pro may not include full fleet management capabilities.
* D. NKP Pro with workspaces: While NKP Pro supports workspaces, it may not provide the full fleet management needed for centralized policy federation across all clusters. NKP Ultimate is the better fit.
:
Nutanix Kubernetes Platform Administration (NKPA) Course, Section on Fleet Management and Workspaces.
Nutanix Cloud Native (NCP-CN) 6.10 Study Guide, Chapter on Licensing and Fleet Management.
Nutanix Cloud Bible, NutanixKubernetesPlatform Section: https://www.nutanixbible.com

NEW QUESTION 36
A Cloud Engineer wishes to attach existing AKS clusters to a newly deployed NKP management cluster.
What should the engineer consider specific to attaching these types of clusters to NKP?

A separate service account should be created for them because their kubeconfig files are not usable out-of-box by NKP Kommander.

AKS does not have the kubelet installed on them. Therefore the KIB-prep process should be performed on each of the nodes in the AKS clusters prior to attaching them.

AKS nodes do not use containerd as its container runtime. Therefore it should be deployed to each of the nodes in the AKS clusters prior to attaching them.

Cert-manager, which is included in NKP, is deployed by default on AKS clusters.

NEW QUESTION 37
In a telecom company, two teams were working on the development of two different applications:
ApplicationA
ApplicationBApplicationA’s development team was excited about the release of their new functionality. However, upon deploying their application, they noticed that performance was slow. After investigating, they discovered that the ApplicationB team was consuming the majority of the cluster’s resources, affecting all other teams. How can this problem be mitigated?

Implementing Quotas and Limit Ranges

Setting up Network Policies

Configuring RBAC

Implementing Continuous Deployment (CD)

NEW QUESTION 38
A company uses an Artifactory private registry for development. The NKP deployment must use this private registry since the Security Administrator has the firewall configured to reject connections to public container registries. The first task is to push the NKP bundle to this private registry.
What options should be used to push the NKP bundle to this private registry?

–registry-mirror-url, –registry-mirror-username and –registry-mirror-password

–mirror-url, –mirror-username and –mirror-password

–registry-url, –registry-username and –registry-password

–to-registry, –to-registry-username and –to-registry-password

NEW QUESTION 39
When deploying NKP using the Nutanix provisioning method (CAPX), what are the supported OS platforms?

CentOS and Rocky Linux

Rocky Linux and Ubuntu

Flatcar, Rocky Linux, and Ubuntu

CentOS and Ubuntu

NEW QUESTION 40
By default, a full cluster backup is occurring on a daily basis on an NKP-managed cluster. However, the Victory Finance team has requested that their applications be backed up four times a day. The user group has been assigned to the victory-finance-apps NKP workspace, and the applications have been deployed to the Kubernetes namespace victory-finance.
What is the procedure for scheduling the team’s application backups?

Access the NKP UISwitch to the victory-finance NKP namespaceClick on the Applications menu panel and select VeleroEdit the Velero application configuration at the cluster level for the specific NKP managed cluster (not all clusters in that NKP workspace)Set the backup frequency to four times daily

Install the Velero CLIUse the Velero CLI to create a backup schedule that includes the following parameters:- Backup name- Kubernetes namespace to backup- Backup frequency (every six hours)- Managed NKP cluster’s kubeconfig

Install the Velero CLIUse the Velero CLI to create a backup schedule that includes the following parameters:- Backup name- NKP workspace to backup- Backup frequency (every six hours)- Managed NKP cluster’s kubeconfig

Access the NKP UISwitch to the victory-finance-apps NKP workspaceClick on the Applications menu panel and select VeleroEdit the Velero application configuration at the cluster level for the specific NKP managed cluster (not all clusters in that NKP workspace)Set the backup frequency to four times daily

Latest Exam Prep

[Apr 27, 2026] Valid NCP-CN Test Answers & NCP-CN Exam PDF [Q20-Q40]

Leave a Reply

NCP-CN Practice Tests

Related Certifications

Recent Posts

Recent Comments

Archives

Categories