NCP-BC-7.5 Exam Dumps - Nutanix NCP-BC Questions and Answers

In a Nutanix environment, " Advertised Capacity " is a logical limit (a quota) that an administrator can set on a specific storage container. Even if the physical storage pool has terabytes of free space, if a container ' s advertised capacity is reached, the hypervisor and the Nutanix services will perceive the container as being 100% full.

In this troubleshooting scenario, the " nfs status 28 " error code is a standard indicator for " No space left on device " . Since the administrator confirmed the pool is healthy, the logical limit on the container is the only remaining bottleneck. Replication jobs will " hang " because the destination Stargate service cannot write the incoming data blocks to a container that reports zero free space. To resolve this, the administrator must either increase the advertised capacity value in Prism or remove the limit entirely to allow the container to consume the available physical space in the pool. This highlights a common configuration " trap " where logical quotas—intended for multi-tenant management—can inadvertently block critical BCDR processes like replication if not monitored or sized correctly according to the protected VM growth.

Nutanix storage is often accessed by external backup solutions (like Veeam, Commvault, or HYCU) using the iSCSI protocol. This allows the backup server to mount snapshots and read data directly from the storage tier. The error message " iscsiadm... discovery... timeout " specifically indicates that the backup server ' s iSCSI initiator is unable to communicate with the Nutanix Data Services IP or the Controller VMs (CVMs) over the network.

When a Nutanix cluster is expanded, it is essential that all networking and firewall configurations applied to the existing nodes are also applied to the new nodes. The iSCSI protocol relies on specific TCP ports: port 3260 is the standard port for iSCSI traffic, and port 3205 is often used for iSCSI discovery and metadata operations within Nutanix. If these ports are not open in the physical firewall or the host-based security rules for the newly added nodes, the backup server will be unable to discover the targets on those specific nodes, leading to the timeout errors . This highlights a common " Day 2 " operational trap: cluster expansion requires careful auditing of network security groups and firewall whitelists to ensure that external integrations—especially BCDR and backup services—continue to have uninterrupted access to the expanded storage fabric. Verifying and opening ports 3205 and 3260 for the new node IPs is the first step to resolving this timeout issue.

When designing disaster recovery to a cloud environment (such as NC2 on AWS or Azure), organizations must choose a compute model that aligns with their Recovery Time Objective (RTO). The " Zero Compute " model is the most cost-efficient because it stores only the data (snapshots) in low-cost Object Storage (S3 or Blob) and does not maintain a running cluster. However, the RTO for Zero Compute is high because, in a disaster, the organization must first deploy a new Nutanix cluster, configure it, and then begin the process of hydrating data from the Object Storage.

In contrast, the " Pilot Light " model involves keeping a minimal, active Nutanix cluster (e.g., 3 nodes) running at the recovery site. While this carries a moderate ongoing cost, it significantly reduces the RTO. Because the cluster already exists, the management plane (Prism Central), the storage containers, and all metadata are already active. When a failover is triggered, the system only needs to power on the VMs or perform a small amount of data hydration. This allows the organization to meet aggressive RTO targets of under 15 minutes, which is generally impossible with the Zero Compute model. Pilot Light provides the " ready-to-go " infrastructure needed for mission-critical applications that cannot afford the multiple hours required to provision a fresh cluster from scratch during an emergency.

Modern Nutanix Disaster Recovery utilizes Prism Central-based Protection Policies and Recovery Plans, which offer more advanced orchestration and automation than legacy Prism Element-based Protection Domains. When an organization decides to upgrade its DR management, a careful migration path must be followed to ensure that VMs do not lose protection during the transition.

The first and most critical step is to migrate the virtual machines from the legacy Protection Domain to a new PC-based Protection Policy. This process involves adding the VMs to the correct Categories in Prism Central, which then associates them with the new policy. Once the VMs are " claimed " by the Protection Policy, the system will begin managing their snapshots and replication schedules according to the new logic. Only after the VMs are successfully protected under the new system is it safe to " unprotect " them and remove the legacy Protection Domains (and their associated snapshots) to reclaim storage. Attempting to delete snapshots first (Option A) or perform a failover (Option D) before the management handoff is complete could leave the business without a valid recovery point if an outage occurs during the migration window.

Prism Central (PC) acts as the centralized control plane for Nutanix Disaster Recovery, storing the critical metadata for Protection Policies and Recovery Plans. If the cluster hosting the Prism Central instance suffers a total failure, the " brain " of the DR orchestration is lost, and the administrator cannot trigger the Recovery Plans through the usual interface. To address this risk, Nutanix provides the " Prism Central Backup and Restore " feature, which replicates the PC metadata to a remote cluster managed by Prism Element (PE). In a disaster scenario affecting Cluster A, the first and most critical step is to recover the management plane. The administrator must log into Prism Element on the surviving cluster and use the native recovery workflow to restore the Prism Central instance from the most recent backup. Once the PC instance is restored and booted on the surviving cluster, it will once again have access to the Recovery Plans and Protection Policies. Only after the management plane is restored can the administrator then initiate the " Unplanned Failover " tasks to bring up the protected workloads. This process ensures that the RTO is kept low by restoring the automated orchestrator rather than manually re-creating policies and plans on a new instance (Option B).

A Planned Failover in Nutanix Disaster Recovery is an orchestrated workflow designed to migrate workloads with zero data loss. However, the behavior of recovery point creation depends on the current state of synchronization and the type of replication policy. For standard Asynchronous (Async) Protection Policies, the system typically relies on the established schedule to maintain recovery point consistency. In many automated workflows, especially during a test or a specific " planned " trigger, the administrator might assume a new snapshot is generated; however, if the system is designed to use the most recent " consistent " state, it may rely on the last successfully replicated recovery point to initiate the restore.

Technically, if a new point were to be created, it would require the VM to be shut down at the source to ensure application consistency—a process that is part of the planned failover sequence. If the policy is configured to use existing data for speed, it bypasses new creation to minimize the maintenance window. This emphasizes the importance of verifying that replication is " In-Sync " or " Healthy " before starting a planned failover. If the last recovery point is several hours old, the " planned " move could result in a significant rollback unless the administrator manually triggers a synchronization task prior to the failover event. Understanding this behavior ensures that BCDR administrators can accurately predict data states following a controlled migration between sites.

Migrating from legacy Protection Domain (PD) based management to the modern Prism Central (PC) based Protection Policies is a recommended best practice for scaling Nutanix Disaster Recovery. This migration involves moving VMs from a " Prism Element " centric management model to a centralized, category-based model in Prism Central.

To ensure that no data is lost during this transition, the most critical prerequisite is to verify that a successful, full replication (backup) of the Protection Domain has recently completed. This ensures that the recovery site already possesses a complete and consistent set of data for the VMs before they are unlinked from the old policy and attached to the new one. While adding VMs to a category (Option A) is a step in the process, it is not the first verification step required for data safety. If an administrator attempts to migrate while a replication is incomplete or failing, the transition to the new policy might leave the VMs unprotected for an extended period, or recovery points might be missing if a disaster occurs mid-migration. By completing a full backup of the PD first, the administrator creates a " safety net " of recovery points that can be used if the migration itself encounters issues. This ensures that the transition to modern DR is performed with minimal risk to the business ' s data protection objectives.

Volume Groups (VGs) are used in Nutanix to provide block storage to virtual machines, often for high-performance applications like SQL Server. VGs can be attached to VMs in two ways: " In-guest " (using iSCSI initiators) or " Hypervisor-attached " (where the hypervisor handles the connection).

In a disaster recovery scenario managed by Recovery Plans, there is a technical distinction in how these attachments are handled. While Nutanix Disaster Recovery can replicate the data in the Volume Groups and recover the VM itself, VGs that are " hypervisor-attached " do not currently support automatic reattachment as part of the orchestration workflow in all AOS versions. When the failover completes, the VM powers on at the recovery site, but the VGs are not connected to the VM at the hypervisor level. This causes the application (SQL) to find its data disks missing, resulting in the database staying offline. To resolve this, the administrator must manually reattach the Volume Groups to the VM at the recovery site using the Prism interface or a script. This limitation highlights the need to verify specific application storage configurations during DR testing. For automated recovery of VGs, using " In-guest " iSCSI attachments is often preferred because the iSCSI initiator within the guest OS can re-establish the connection to the new cluster ' s Data Services IP once the network is active.

VM-VM Anti-Affinity rules are used in Nutanix to ensure that specific virtual machines (such as the nodes of a database cluster or redundant web servers) never run on the same physical host, thereby protecting the application from a single host failure. These rules are typically managed through Prism Central (PC) in a modern deployment.

However, in the context of Disaster Recovery (DR) between two different clusters or availability zones, there is a technical limitation regarding the replication of these affinity policies. While the virtual machine ' s data and primary metadata (CPU, RAM, Disks) are replicated by the Cerebro service, the affinity rules are often considered local cluster constraints. In many versions of Nutanix Disaster Recovery (specifically the initial iterations of Leap/Prism Central-based DR), these affinity policies are not natively " synchronized " or enforced at the recovery site during a failover. This means that when the VMs are recovered at the destination cluster, the hypervisor ' s dynamic scheduler (ADS) may place them on the same host if that host has the most available resources. To maintain anti-affinity at the recovery site, an administrator would typically need to manually recreate the affinity policies at the destination AZ or use specialized orchestration scripts. Understanding this limitation is vital for ensuring that high-availability requirements are still met after a disaster recovery event has occurred.

Nutanix allows for the encryption of replication traffic " on the wire " using IPSec tunnels between clusters. When an administrator enables network segmentation for Disaster Recovery, the replication traffic is moved from the default management network to a new, dedicated subnet and set of virtual interfaces.

Because the native replication encryption relies on IPSec gateways to secure the communication, the underlying VPN configuration must be aware of the network paths it is protecting. If the traffic is now originating from a new segmented subnet, the IPSec VPN gateway configuration at both the primary and recovery sites must be updated to include these new subnet ranges. If this step is missed, the encrypted tunnel will not recognize the segmented traffic as valid for the VPN, causing replication to fail even if the physical network is reachable. Regenerating KMS tokens (Option C) relates to data-at-rest encryption on physical drives, not traffic-in-transit. Restarting services (Option D) might be part of the general segmentation workflow, but the specific requirement for " encrypted replication " stability in this context is the alignment of the IPSec VPN policy with the new segmented network topology.