Free Nutanix Certified Professional - Cloud Native (NCP-CN) Practice Questions

Sample Practice Questions

Try these 10 sample questions from the Nutanix Certified Professional - Cloud Native (NCP-CN) practice bank. Each includes the answer and explanation. Continue with the interactive practice above to review the full question set.

1. 1For the documented pre-provisioned air-gapped GPU deployment, which systems must be able to reach the local image registry?

   1. A.The bastion host and the machines created for the Kubernetes clusterCorrect answer: A
   2. B.Only the bastion host that pushes the image bundles
   3. C.Only the control plane after cluster creation completes
   4. D.Only the Kubernetes cluster machines that pull the images

   Explanation: The guide states that the registry "must be accessible from both the bastion machine and either the AWS EC2 instances (if deploying to AWS) or other machines that will be created for the Kubernetes cluster." Both the host that seeds it and the cluster machines need access.

   Reference: Nutanix Kubernetes Platform 2.17 - Pre-provisioned Air-gapped GPU: Loading the Registry — Pre-provisioned Air-gapped GPU: Loading the Registry, About this task

2. 2In the documented pre-provisioned CLI workflow, which flag points cluster creation to the prepared node inventory?

   1. A.--pre-provisioned-inventory-fileCorrect answer: A
   2. B.--control-plane-endpoint-host
   3. C.--registry-mirror-cacert
   4. D.--ssh-private-key-file

   Explanation: The example passes "--pre-provisioned-inventory-file=preprovisioned_inventory.yaml" when generating the cluster configuration. This flag selects the inventory file.

   Reference: Deploying NKP in Air-Gapped Environments: A Guide to Pre-Provisioned Cluster Installation — Step 4: Deploy the NKP Cluster, Generate Cluster Configuration

3. 3In the documented NKP LDAP integration, what function does Dex provide?

   1. A.Broker authentication between applications and upstream identity providersCorrect answer: A
   2. B.Assign Kubernetes permissions without any role or role binding
   3. C.Replace the upstream identity provider with a Kubernetes role binding
   4. D.Make every authenticated directory user a cluster administrator

   Explanation: The tutorial states that "Dex acts as an intermediary, connecting your applications to upstream IdPs like LDAP, SAML, or others." It participates in authentication.

   Reference: Secure Your Kubernetes Access: Integrating NKP with Microsoft Active Directory via LDAP — Introduction

4. 4What is an NKP workspace used to group?

   1. A.Clusters sharing common configuration and policiesCorrect answer: A
   2. B.Nodes from exactly one cluster sharing a machine image
   3. C.Only clusters hosted on a single infrastructure platform
   4. D.Only one cluster and the projects assigned to that cluster

   Explanation: The tutorial defines a workspace as "a group of Kubernetes clusters (potentially across multiple infrastructure platforms) that share common configuration and policies."

   Reference: Creating Custom Applications for NKP – Part 2 — Introduction

5. 5When pushing an NKP image bundle to a registry whose TLS certificate is signed by a private CA, which flag supplies the CA certificate file?

   1. A.--to-registry-username
   2. B.--to-registry-ca-cert-fileCorrect answer: B
   3. C.--to-registry-password
   4. D.--to-registry

   Explanation: The tutorial states: "The --to-registry-ca-cert-file flag is only required if your registry uses a certificate signed by a private or internal Certificate Authority." It supplies the CA certificate for that registry.

   Reference: Deploying NKP in Air-Gapped Environments: A Guide to Pre-Provisioned Cluster Installation — Step 1: Push NKP Container Images to Your Local Registry

6. 6An administrator has generated the cluster manifest in the documented pre-provisioned workflow. Which action applies that manifest?

   1. A.Run nkp get kubeconfig against the cluster
   2. B.Run kubectl apply with the manifest fileCorrect answer: B
   3. C.Run nkp describe cluster against the cluster
   4. D.Run kubectl get nodes with the manifest file

   Explanation: The tutorial's apply step uses "kubectl apply -f ${CLUSTER_NAME}.yaml" to deploy the generated configuration.

   Reference: Deploying NKP in Air-Gapped Environments: A Guide to Pre-Provisioned Cluster Installation — Step 4: Deploy the NKP Cluster, Apply the Cluster Configuration

7. 7In the documented Dex LDAP role-binding example, how should an external group named K8s-Admins be referenced?

   1. A.ldap:K8s-Admins
   2. B.group:K8s-Admins
   3. C.oidc:K8s-AdminsCorrect answer: C
   4. D.K8s-Admins:oidc

   Explanation: The tutorial says "you must prefix the group name with oidc:" and shows the group as oidc:K8s-Admins in the ClusterRoleBinding.

   Reference: Secure Your Kubernetes Access: Integrating NKP with Microsoft Active Directory via LDAP — Step 4: Authorizing Users with Role-Based Access Control (RBAC)

8. 8In the documented NKP Insights checks, which tool audits workloads and cluster configurations for misconfigurations?

   1. A.PolarisCorrect answer: A
   2. B.Pluto
   3. C.Nova
   4. D.Kube-bench

   Explanation: The guide states: "Polaris audits workloads and cluster configurations for any misconfigurations." Kube-bench performs CIS checks, while Pluto and Nova detect deprecated charts and API versions.

   Reference: NKP Insights with Nutanix Objects — What is NKP Insights?, configured Insights checks

9. 9In the NKP 2.17 registry-seeding command, which flag identifies the local image archive to push?

   1. A.--to-registry-ca-cert-file
   2. B.--to-registry-username
   3. C.--bundleCorrect answer: C
   4. D.--to-registry-password

   Explanation: The guide shows "--bundle ./container-images/konvoy-image-bundle-nkp-version.tar". This flag selects the source archive, whereas the registry and credential flags describe the destination.

   Reference: Nutanix Kubernetes Platform 2.17 - Pre-provisioned Air-gapped GPU: Loading the Registry — Pre-provisioned Air-gapped GPU: Loading the Registry, Procedure

10. 10Which command does the documented pre-provisioned workflow use to watch cluster deployment status?

    1. A.nkp get kubeconfig -c ${CLUSTER_NAME}
    2. B.kubectl wait --for=condition=ControlPlaneReady
    3. C.nkp describe cluster -c ${CLUSTER_NAME}Correct answer: C
    4. D.kubectl wait --for=condition=Ready nodes --all

    Explanation: Under deployment monitoring the guide says "You can watch the status of the deployment by running the following command" and shows "nkp describe cluster -c ${CLUSTER_NAME}".

    Reference: Deploying NKP in Air-Gapped Environments: A Guide to Pre-Provisioned Cluster Installation — Step 5: Monitor the Cluster Deployment