Free Nutanix NCP-BC-7.5 Practice Exam with Questions & Answers

Self-Service Restore (SSR) is designed to be a temporary recovery operation. When a user uses the SSR agent to mount a historical snapshot disk, that disk is attached to the VM via the hypervisor ' s virtual controller. While it is a best practice for the user to " unmount " and " detach " the disk once they have recovered their files, the Nutanix system includes a safety mechanism to prevent these temporary disks from being left attached indefinitely.

Nutanix enforces a built-in automatic detachment timeout of 24 hours. If a disk remains attached via the SSR workflow for longer than 24 hours, the Nutanix orchestration engine will automatically trigger a detachment task to clean up the VM ' s configuration. This is essential for maintaining cluster " hygiene, " as stale snapshots attached to VMs can interfere with future backup operations, prevent VM migrations (vMotion), or lead to unnecessary storage overhead if the snapshots are kept " locked " by the attachment. Understanding this 24-hour timeout helps administrators reassure users that they have a full day to perform their recovery tasks while ensuring the infrastructure team that the environment will automatically revert to a clean state without manual intervention. This balance of user flexibility and system automation is a hallmark of the Nutanix BCDR design.

Here are questions 81 through 100 from the Nutanix Certified Professional - Business Continuity (NCP-BC) 7.5 exam set, formatted strictly as requested with detailed technical explanations for each.

Nutanix uses a " Roll-up " retention strategy to optimize storage while maintaining a range of recovery options. This strategy keeps all high-frequency recovery points for the most recent period and then consolidates (rolls up) older snapshots into daily or weekly points as they age.

For a policy with a 1-hour RPO and 5-day retention, the system is designed to provide granular recovery for the immediate past. By default, Nutanix retention logic maintains the hourly snapshots for the current 24-hour window. As snapshots move past the 24-hour mark, they are " rolled up " into a single daily snapshot to save space while still providing a 5-day historical view. Therefore, after six days of operation, the administrator will find approximately 24 hourly recovery points for the most recent 24 hours, followed by several daily recovery points representing the previous four days. This approach balances the need for surgical " point-in-time " recovery (to combat recent data corruption or ransomware) with the need for long-term historical data, ensuring that the BCDR solution is both effective and storage-efficient.

This question refers to the behavior of Nutanix Metro Availability in conjunction with a Witness VM during a site-to-site communication failure. Metro Availability provides a zero-RPO, synchronous replication solution. To prevent " split-brain " (where both sites try to serve the same data independently), the Witness VM acts as a tie-breaker. When the two clusters lose connectivity with each other, both will immediately attempt to contact the Witness to " acquire the lock " on the protection domain. The Witness is programmed to prioritize the original " Active " site. If the primary cluster can reach the Witness, it will successfully acquire the lock and continue serving I/O locally to the guest VMs, ensuring zero downtime for the applications. The secondary site, unable to reach the primary or acquire the lock from the Witness, will transition its storage container to an " Inactive " state to protect data integrity. The administrator must manage this state by ensuring the Witness is always reachable from both clusters via independent network paths. If the primary site cannot reach the Witness, it will stop serving I/O to prevent inconsistent data states, highlighting the critical importance of Witness availability in a high-availability BCDR design.

A multisite deployment in Nutanix Disaster Recovery allows a single primary cluster to replicate its workloads to multiple destination availability zones (AZs) for increased resilience. While a single " Protection Policy " can define the replication schedules to both recovery sites, the " Recovery Plan " is the separate object responsible for the actual orchestration of the failover.

A Recovery Plan is fundamentally a point-to-point object; it defines how to move workloads from Site A to Site B. If an administrator wants the ability to failover to either of two different recovery AZs, they must create two distinct Recovery Plans: one for AZ1 and another for AZ2. Each plan will contain the site-specific network mappings, boot sequences, and IP mappings relevant to that specific destination. If the administrator has only created a recovery plan for the first AZ, they will be able to see recovery points at both locations but will only have a " target " defined for the first site. The second AZ will not appear as a valid destination in the failover menu until its specific Recovery Plan is built and validated. This modular design ensures that each DR site can have its own customized networking and application orchestration logic.

The Nutanix Cerebro service manages replication by scheduling snapshots and transferring the delta changes to the remote site. In an asynchronous replication schedule, if a new snapshot is taken before the previous one has finished replicating, the system faces a choice. To ensure that the most current data is available at the recovery site as quickly as possible, Nutanix may " skip " the replication of an older pending snapshot in favor of starting the replication of the newest one.

In this scenario, all infrastructure components (bandwidth, ports, hardware) are verified as healthy and have supported successful replication for months. This points toward a data-level issue rather than a connectivity issue. A " significant one-time surge in change rate " (Option D) means the VM generated a massive amount of new data blocks (churn) in a short period. Because the " Snapshot-on-wire " transfer size is directly tied to the number of changed blocks, this specific snapshot would take much longer than usual to replicate. If the transfer time exceeds the RPO interval, the next scheduled snapshot will trigger. The Cerebro service will see that it has a newer recovery point ready to go and will skip the " stuck " or slow-moving older snapshot to maintain the most recent RPO possible at the target. This behavior generates the " Replication was skipped " warning to notify the administrator that the historical sequence was interrupted due to a temporary imbalance between data churn and available throughput.

Prism Central (PC) acts as the centralized control plane for Nutanix Disaster Recovery, storing the critical metadata for Protection Policies and Recovery Plans. If the cluster hosting the Prism Central instance suffers a total failure, the " brain " of the DR orchestration is lost, and the administrator cannot trigger the Recovery Plans through the usual interface. To address this risk, Nutanix provides the " Prism Central Backup and Restore " feature, which replicates the PC metadata to a remote cluster managed by Prism Element (PE). In a disaster scenario affecting Cluster A, the first and most critical step is to recover the management plane. The administrator must log into Prism Element on the surviving cluster and use the native recovery workflow to restore the Prism Central instance from the most recent backup. Once the PC instance is restored and booted on the surviving cluster, it will once again have access to the Recovery Plans and Protection Policies. Only after the management plane is restored can the administrator then initiate the " Unplanned Failover " tasks to bring up the protected workloads. This process ensures that the RTO is kept low by restoring the automated orchestrator rather than manually re-creating policies and plans on a new instance (Option B).

Nutanix allows for the encryption of replication traffic " on the wire " using IPSec tunnels between clusters. When an administrator enables network segmentation for Disaster Recovery, the replication traffic is moved from the default management network to a new, dedicated subnet and set of virtual interfaces.

Because the native replication encryption relies on IPSec gateways to secure the communication, the underlying VPN configuration must be aware of the network paths it is protecting. If the traffic is now originating from a new segmented subnet, the IPSec VPN gateway configuration at both the primary and recovery sites must be updated to include these new subnet ranges. If this step is missed, the encrypted tunnel will not recognize the segmented traffic as valid for the VPN, causing replication to fail even if the physical network is reachable. Regenerating KMS tokens (Option C) relates to data-at-rest encryption on physical drives, not traffic-in-transit. Restarting services (Option D) might be part of the general segmentation workflow, but the specific requirement for " encrypted replication " stability in this context is the alignment of the IPSec VPN policy with the new segmented network topology.

Cross-Cluster Live Migration (CCLM) is an advanced Nutanix feature that allows a running virtual machine to move between two geographically separated clusters without downtime. When migrating between on-premises and a public cloud Nutanix Cloud Cluster (NC2), maintaining the VM ' s network identity (IP address) is often a critical requirement for application continuity.

Standard routing across different networks would require the VM to change its IP to match the destination subnet. To avoid this, an administrator must implement " Layer 2 (L2) stretching " . L2 stretching (often achieved using Nutanix Flow Virtual Networking and VXLAN/VPN tunnels) creates a unified broadcast domain that spans both the on-premises and cloud sites. This allows the VM to move to the cloud while remaining on the same logical subnet, meaning its default gateway and IP address remain valid. Without L2 stretching, a " Live Migration " would fail the moment the VM moved to the new cluster because its network connections would drop. This configuration is a prerequisite for seamless hybrid cloud mobility, enabling businesses to leverage cloud burst capacity or perform zero-downtime maintenance across sites.

An " Unplanned Failover " is triggered when the primary site is completely offline or unreachable due to a disaster. Because the primary site cannot be contacted to perform one last synchronization of data, the recovery must rely on the recovery points that were successfully replicated to the destination cluster before the outage occurred.

In this scenario, the worst-case data loss is equivalent to the Recovery Point Objective (RPO) defined in the Protection Policy. For example, if the RPO is set to 1 hour, and the disaster occurs 59 minutes after the last successful replication, the business will lose 59 minutes of data. By default, the Nutanix orchestration engine will automatically select and use the most recent recovery point available at the recovery site to restore the virtual machines. While an administrator can manually choose an older recovery point if needed (e.g., in the case of a ransomware attack), the default behavior is to minimize data loss by using the newest available point. This highlights why setting an appropriate RPO is the most important design decision for managing potential data loss in an unplanned failure event.

Network segmentation is a powerful Nutanix feature used to isolate replication and storage traffic from standard management traffic. However, implementing this in a " brownfield " environment—where replication is already active—requires careful coordination. In this scenario, the replication failure coincides with the implementation of network segmentation and new firewall rules. The administrator ' s first action must be to verify if segmentation was enabled while replication was actively running. If segmentation is enabled on one site without a matching configuration on the remote cluster, or if the services (Cerebro/Stargate) were not properly restarted to bind to the new interfaces, the replication stream will " hang " . Furthermore, enabling segmentation changes the source and destination IP addresses used for replication traffic. If these new segmented IP addresses were not whitelisted in the recent firewall hardening effort, all " Snapshot-on-wire " traffic will be dropped. By verifying the segmentation state first, the administrator can determine if the network plumbing is consistent across both sites. Recreating policies (Option A) or triggering failover (Option C) would not resolve an underlying network isolation issue and would likely result in further failures until the segmentation and firewall rules are properly aligned.