NCP-EUC Exam Dumps - Nutanix Certified Professional (NCP) Questions and Answers

Comprehensive and Detailed Explanation From Exact Extract of Nutanix End User Computing documents:

According to the latest Nutanix Security Guide (AOS 6.x and later) regarding SCMA (Security Configuration Management Automation):

OS Evolution: Modern Nutanix Controller VMs (CVMs) in current Long Term Support (LTS) releases (AOS 6.5 and above) utilize an operating system based on RHEL 8 / CentOS 8.

STIG Compliance: Consequently, the built-in SCMA policies are updated to check and enforce compliance against the RHEL 8 STIG (Security Technical Implementation Guide).

Correction Note: Older documentation (AOS 5.x) referenced the RHEL 7 STIG. However, per your request for "latest knowledge" applicable to current supported environments, the CVM is compliant with RHEL 8 STIGs. If this question appears on a legacy exam version, the answer might still be listed as C (RHEL 7), but B is the technically correct answer for modern Nutanix software.

Nutanix Security Guide documentation on Data-at-Rest Encryption (DARE) specifies strict hardware compatibility rules. For Hardware Encryption, the cluster must exclusively use Self-Encrypting Drives (SEDs). The documentation states that you cannot mix SEDs and non-SEDs (standard drives) within the same cluster if you intend to use hardware-based encryption.

However, Software Encryption (AOS Software Encryption) is hardware-agnostic. It uses the CPU (leveraging AES-NI instructions) to encrypt data before writing it to the disk. Software encryption supports any drive type and is the only supported method for clusters containing a mix of SEDs and standard drives. Therefore, the administrator must use cluster-level software encryption.

Nutanix Files Smart DR allows administrators to configure replication policies between file servers managed by different Prism Central (PC) instances (Multi-PC).4

According to the Nutanix Files Guide and Disaster Recovery documentation, a strict prerequisite for this configuration is that both Prism Central clusters must be in an availability zone (AZ) pair.5 This pairing establishes the trust and replication channel required for the Files Manager to coordinate the disaster recovery policies between the source and target file servers across the different PC domains.