Updated Apr-2026 Test Engine to Practice Test for NCP-CN Exam Questions and Answers!
Nutanix Certified Professional - Cloud Native v6.10 Certification Sample Questions and Practice Exam
Nutanix NCP-CN Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 4 |
|
NEW QUESTION # 12 
A Platform Engineer is preparing to deploy an NKP cluster in an air-gapped environment. The NKP cluster will be deployed on Nutanix infrastructure using the CAPI Nutanix provisioner (CAPX). The engineer has decided to create the bootstrap cluster first, then NIB-prep an Ubuntu 22.04 OS image that the Linux engineering team has provided in Prism Central. After that, the engineer will deploy the NKP cluster. However, during the first step of creating a bootstrap cluster, the engineer received the error shown in the exhibit. What could be the reason?
- A. The Ubuntu 22.04 OS image needs to be NIB-prepped prior to creating the bootstrap.
- B. The nkp create bootstrap command needs to be executed as root.
- C. The CAPI provisioning method needs to be specified as part of the command nkp create bootstrap nutanix.
- D. The bootstrap cluster image needs to be loaded prior to creating the bootstrap cluster.
Answer: D
NEW QUESTION # 13
A developer asked a Platform Engineer to review a deployment in the cluster called iot-1 in the workspace iot- plant-3, but the engineer does not have the kubeconfig file. Which command is valid for generating the kubeconfig file to review the Kubernetes cluster?
- A. nkp get configmaps -n iot-plant-3 -c iot-1 > iot-1.conf
- B. kubectl get secret iot-1 -n kommander > iot-1.conf
- C. nkp get kubeconfig -c iot-1 -w iot-plant-3 > iot-1.conf
- D. kubectl get kubeconfig --cluster-name=iot-1 -w iot-plant-3 > iot-1.conf
Answer: C
Explanation:
The NKPA course explains that to access a Kubernetes cluster managed by NKP, such as iot-1 in the workspace iot-plant-3, a kubeconfig file is required to authenticate and interact with the cluster's API server.
If the kubeconfig file is missing, the engineer can generate it using the NKP CLI. The correct command is nkp get kubeconfig -c iot-1 -w iot-plant-3 > iot-1.conf (Option B).
This command retrieves the kubeconfig for the specified cluster (-c iot-1) in the specified workspace (-w iot- plant-3) and redirects the output to a file named iot-1.conf. The engineer can then use this kubeconfig file with kubectl (e.g., kubectl --kubeconfig=iot-1.conf get pods) to review the deployment. The Nutanix Cloud Native (NCP-CN) 6.10 Study Guide states: "To generate a kubeconfig file for an NKP-managed cluster, use nkp get kubeconfig -c <cluster-name> -w <workspace-name>, which retrieves the necessary credentials for cluster access." Incorrect Options:
* A. kubectl get kubeconfig: kubectl does not have a get kubeconfig subcommand, and it cannot generate kubeconfig files for NKP clusters.
* C. kubectl get secret iot-1 -n kommander: While secrets in the kommander namespace may store credentials, this command does not format them as a kubeconfig file.
* D. nkp get configmaps: This is not a valid command for retrieving kubeconfig files; ConfigMaps do not store kubeconfig data in this context.
:
Nutanix Kubernetes Platform Administration (NKPA) Course, Section on Cluster Access Management.
Nutanix Cloud Native (NCP-CN) 6.10 Study Guide, Chapter on Day 2 Operations.
Nutanix Cloud Bible, NutanixKubernetesPlatform Section: https://www.nutanixbible.com
NEW QUESTION # 14
Which two statements are true regarding deploying NKP on an Azure Kubernetes Service (AKS) Infrastructure? (Choose two.)
- A. Existing AKS clusters must be attached to the Management cluster.
- B. AKS best practices encourage building customized images.
- C. AKS clusters can be deployed as Management or Pro NKP clusters.
- D. NKP Management cluster with the Kommander component must be installed before installing NKP on AKS cluster.
Answer: A,D
NEW QUESTION # 15
NKP cluster nodes require a disk for some of its deployed components, outside of an application's persistent volume requirements. What are these components and where are they deployed?
- A. kubectl and kubelet in /opt/nkp
- B. kubectl and kubelet in /var/nkp
- C. kubelet and containerd in /var/lib
- D. kubelet and containerd, in /opt/nkp
Answer: C
Explanation:
According to the NKPA 6.10 documentation, the critical system components for NKP nodes are:
* kubelet
* containerdThese components are deployed in the standard Linux path: /var/lib.
Exact extract from the documentation:
"The kubelet and containerd services require disk space in /var/lib on the host operating system. It's essential to allocate sufficient storage in /var/lib to accommodate these core Kubernetes components." Reference:
Nutanix Kubernetes Platform Administration (NKPA) 6.10 - "Host Requirements for Cluster Nodes" NCP-CN 6.10 Study Guide - "Node OS Directory Requirements"
=======
NEW QUESTION # 16 
The cluster arca will host a new application that needs to add more workers. The company cannot get more NKP licenses, so it has decided to delete the demo cluster and add the required workers to the arca cluster. How should the engineer delete the demo cluster from this UI?
- A. Login with SSH to the kommander cluster and execute kubectl delete cluster -c demo
- B. Press the ("demo" cluster line) three-dot menu at the right and select Download kubeconfig, then use that file to execute kubectl delete cluster -c demo --kubeconfig=demo.conf
- C. Press the ("demo" cluster line) three-dot menu at the right and select Delete.
- D. Press the ("demo" cluster line) three-dot menu at the right and select Detach. Then ask the cluster owner to delete the cluster.
Answer: C
NEW QUESTION # 17
A development team is working on a new application that requires access to certain cluster resources. The team needs to ensure that they have limited permissions to avoid unauthorized changes in other environments.
Among the tasks they will perform are the following:
* Deploy new versions of the application to their specific namespace.
* Scale deployments according to demand.
* View logs and metrics of their applications to monitor performance.When using the NKP GUI, what type of access should the team configure?
- A. Cluster Role
- B. Cluster Admin
- C. NKP Role
- D. Kommander Role
Answer: C
Explanation:
The NKPA course explains that NKP provides a role-based access control (RBAC) system to manage permissions within its platform, in addition to Kubernetes-native RBAC. For a development team needing limited permissions to perform specific tasks (deploying applications, scaling deployments, viewing logs and metrics) within a specific namespace, the appropriate access type in the NKP GUI is an NKP Role.
NKP Roles are predefined or custom roles within the NKP platform that map to Kubernetes RBAC permissions but are managed through the NKP UI for ease of use. They allow granular control over actions within a workspace or namespace, ensuring the team can perform their tasks (e.g., deploy, scale, get logs) without having access to other environments or cluster-wide resources. For example, an NKP Role like
"Developer" or a custom role can be configured to grant edit permissions in the team's namespace while restricting access elsewhere. The Nutanix Cloud Native (NCP-CN) 6.10 Study Guide states: "In the NKP GUI, configure an NKP Role to grant limited permissions to a development team, allowing actions like deploying applications and viewing logs within their namespace while preventing unauthorized changes in other environments." Incorrect Options:
* B. Cluster Role: A Kubernetes Cluster Role grants permissions across all namespaces, which is too broad for the team's limited access requirement.
* C. Cluster Admin: This grants full administrative access to the entire cluster, far exceeding the team's needs and violating the principle of least privilege.
* D. Kommander Role: Kommander is a management component in NKP, but "Kommander Role" is not a specific access type in the NKP GUI for this purpose.
:
Nutanix Kubernetes Platform Administration (NKPA) Course, Section on Access Control and RBAC.
Nutanix Cloud Native (NCP-CN) 6.10 Study Guide, Chapter on Day 2 Operations.
Nutanix Cloud Bible, NutanixKubernetesPlatform Section: https://www.nutanixbible.com
NEW QUESTION # 18
A Platform Engineer is running a Kubernetes cluster version 1.28.1 on AWS that needs to be upgraded to version 1.29.9. This cluster was deployed with Nutanix NKP. Which two actions should the engineer take to complete this requirement? (Choose two.)
- A. Upgrade Workers with nkp update nodepool aws ${NODEPOOL_NAME} --cluster- name=${CLUSTER_NAME} --kubernetes-version=v1.29.9
- B. Upgrade Control Planes with nkp update controlplane aws --cluster-name=${CLUSTER_NAME} -- ami AMI_ID --kubernetes-version=v1.29.9
- C. Upgrade the Cluster with nkp update cluster aws --cluster-name=${CLUSTER_NAME} --ami AMI_ID
--kubernetes-version=v1.29.9 - D. Upgrade Workers with nkp upgrade nodepool aws ${NODEPOOL_NAME} --cluster- name=${CLUSTER_NAME} --kubernetes-version=v1.29.9
Answer: B,D
Explanation:
The NKPA course details the process for upgrading an NKP-managed Kubernetes cluster, such as one running on AWS from version 1.28.1 to 1.29.9. Upgrading a Kubernetes cluster involves two distinct steps:
upgrading the control plane nodes and upgrading the worker nodes, ensuring minimal disruption and maintaining compatibility. The NKP CLI provides specific commands to handle these upgrades separately for AWS clusters.
* Upgrade Control Planes with nkp update controlplane aws --cluster-name=${CLUSTER_NAME}
--ami AMI_ID --kubernetes-version=v1.29.9 (Option B):The control plane must be upgraded first to the target Kubernetes version (1.29.9). The nkp update controlplane aws command updates the control plane nodes, specifying the cluster name, the new Kubernetes version, and an updated AMI (Amazon Machine Image) that supports the target version. The Nutanix Cloud Native (NCP-CN) 6.10 Study Guide states: "To upgrade an NKP cluster on AWS, first update the control plane using nkp update controlplane aws --cluster-name <name> --ami <ami-id> --kubernetes-version <version> to ensure the control plane runs the desired Kubernetes version." The --ami flag is required to specify a compatible image for the upgraded control plane nodes.
* Upgrade Workers with nkp upgrade nodepool aws ${NODEPOOL_NAME} --cluster- name=${CLUSTER_NAME} --kubernetes-version=v1.29.9 (Option C):After the control plane is upgraded, the worker nodes in each node pool must be upgraded to match the control plane version.
The nkp upgrade nodepool aws command updates the specified node pool to the target Kubernetes version (1.29.9). The NKPA course notes: "Upgrade worker nodes using nkp upgrade nodepool aws
<nodepool-name> --cluster-name <cluster-name> --kubernetes-version <version>, which performs a rolling update to ensure minimal downtime." This command automatically handles the rolling update of worker nodes, replacing them with new nodes running the updated version. Note that the --ami flag is not required here, as NKP typically uses the same AMI as the control plane or retrieves a compatible one based on the version.
Incorrect Options:
* A. nkp update nodepool aws: The correct command is nkp upgrade nodepool, not nkp update nodepool. The NKPA course uses upgrade for version changes to node pools.
* D. nkp update cluster aws: This command is not the standard approach for upgrading Kubernetes versions in NKP. The course specifies separate commands for control plane and node pool upgrades to ensure a controlled process.
:
Nutanix Kubernetes Platform Administration (NKPA) Course, Section on Cluster Upgrades.
Nutanix Cloud Native (NCP-CN) 6.10 Study Guide, Chapter on Day 2 Operations.
Nutanix Cloud Bible, NutanixKubernetesPlatform Section: https://www.nutanixbible.com
NEW QUESTION # 19 
The Platform Engineer needs to expand an NKP Pro demo cluster due to workload capacity constraints. The demo cluster has 150 vCPUs available to it from a licensing standpoint. Each worker node has 8 vCPUs and each control plane node has 4 vCPUs.
Which two options are valid for expanding the demo cluster and remaining compliant with licensing? (Choose two.)
- A. Expand the original worker nodepool by up to 8 nodes.
- B. Add 6 additional control planes.
- C. Expand the original worker nodepool by up to 4 nodes and create a new worker nodepool consisting of 6 nodes with 4 vCPUs/node.
- D. Create a new worker nodepool consisting of 10 nodes with 8 vCPUs per node.
Answer: A,C
NEW QUESTION # 20
A Platform Engineer needs to do an air-gapped installation of NKP. This environment needs to run without Internet access and be fully operational, including updates. Docker has been installed, and the NKP bundle exists on a bastion host. What is the first command that the engineer must run to begin the process?
- A. nkp push bundle --bundle
- B. docker load -i konvoy-bootstrap-image-v2.12.0.tar
- C. tar -xzvf nkp-air-gapped-bundle_v2.12.0_linux_amd64.tar.gz
- D. nkp create cluster nutanix
Answer: C
Explanation:
In an air-gapped NKP installation, the engineer starts with the NKP Air-Gapped Bundle, a tarball containing all necessary components (e.g., container images, binaries, configuration files) for deployment without Internet access. The NKPA course specifies that the first step is to extract this bundle on the bastion host to make its contents available for the installation process. The correct command is tar -xzvf nkp-air-gapped- bundle_v2.12.0_linux_amd64.tar.gz, which extracts the bundle into a directory, revealing the container images, CLI tools, and other resources needed for the deployment.
The Nutanix Cloud Native (NCP-CN) 6.10 Study Guide states: "To begin an air-gapped NKP installation, first extract the NKP Air-Gapped Bundle using tar -xzvf <bundle-file>.tar.gz on the bastion host to access the installation artifacts." After extraction, the engineer can proceed with loading container images (e.g., using docker load) and running NKP CLI commands to deploy the cluster, ensuring all dependencies are available locally.
Incorrect Options:
* A. nkp push bundle --bundle: This is not a valid command. The bundle must be extracted before its contents can be used.
* B. docker load -i konvoy-bootstrap-image-v2.12.0.tar: Loading the bootstrap image is a subsequent step after extracting the bundle, which contains this image tarball.
* D. nkp create cluster nutanix: This command creates a cluster but cannot be run until the bundle is extracted and its images are loaded.
:
Nutanix Kubernetes Platform Administration (NKPA) Course, Section on Air-Gapped Installations.
Nutanix Cloud Native (NCP-CN) 6.10 Study Guide, Chapter on NKP Deployment Prerequisites.
Nutanix Cloud Bible, NutanixKubernetesPlatform Section: https://www.nutanixbible.com
NEW QUESTION # 21
An administrator has been tasked with deploying NKP as the Kubernetes platform and needs to deploy their first cluster with the following requirements:
Dark site (no Internet connectivity)
Nutanix-provided Rocky Linux VM image
AHV-based clusterWhat are two prerequisites to accomplish the deployment? (Choose two)
- A. Self-managed AWS cluster
- B. Existing local container registry
- C. Konvoy Image Builder
- D. Air-Gapped Bundle
Answer: B,D
NEW QUESTION # 22
At a national defense company, protecting sensitive data is their top priority. With the increase in cyber- attacks, they have decided to implement an air-gapped Kubernetes environment to manage their critical applications, ensuring that no information could leak to the outside. The Kubernetes environment has three clusters deployed for their applications with centralized management. What type of licensing is required to enable this environment?
- A. NKP Starter
- B. NKP UI
- C. NKP Pro
- D. NKP Ultimate
Answer: D
Explanation:
The NKPA course specifies that air-gapped deployments and centralized fleet management of multiple clusters are advanced features of NKP, requiring the NKP Ultimate license tier. The Ultimate tier includes support for air-gapped environments (via Air-Gapped Bundles) and fleet management capabilities, such as attaching and managing multiple clusters under a single management plane, which is critical for the national defense company's scenario.
The Nutanix Cloud Native (NCP-CN) 6.10 Study Guide states: "The NKP Ultimate license tier is required for air-gapped deployments and centralized management of multiple Kubernetes clusters, providing the necessary tools for secure, isolated environments." This ensures the company can deploy and manage their three clusters in an air-gapped setup while maintaining strict data security.
Incorrect Options:
* A. NKP Starter: The Starter tier lacks air-gapped and fleet management features.
* C. NKP Pro: The Pro tier may support some advanced features but not air-gapped deployments or full fleet management.
* D. NKP UI: This is not a license tier; it's a UI component of NKP.
:
Nutanix Kubernetes Platform Administration (NKPA) Course, Section on Licensing and Fleet Management.
Nutanix Cloud Native (NCP-CN) 6.10 Study Guide, Chapter on Air-Gapped Deployments.
Nutanix Cloud Bible, NutanixKubernetesPlatform Section: https://www.nutanixbible.com
NEW QUESTION # 23
A Cloud Engineer manages an NKP environment and is preparing a machine image to become an NKP cluster node.
Which statement is regarding the default node preparation process?
- A. Shell scripts are used to harden the OS image for use as an NKP node.
- B. Ansible is used to validate the OS image is capable of running NKP.
- C. Goss is used to validate the OS image is capable of running NKP.
- D. Goss is used to make the OS image CAPI compliant for use as an NKP node.
Answer: C
NEW QUESTION # 24
A Platform Engineer is looking to backup and restore persistent volumes and other cluster resources. Which two NKP licenses include backup and restore functionality? (Choose two.)
- A. NKP Pro
- B. NKP Starter
- C. NKP Essential
- D. NKP Ultimate
Answer: A,D
NEW QUESTION # 25
A Kubernetes administrator needs to deploy a new Kubernetes cluster into a new workspace. This cluster requires a predictive analytics solution that detects current and future anomalies. Which option does the administrator need to deploy after the cluster is ready?
- A. NCM Intelligent Ops
- B. Nutanix Pulse
- C. NKP AI Navigator
- D. NKP Insights
Answer: D
NEW QUESTION # 26
A Platform Engineer for an organization needs to deploy NKP into AWS while using custom credentials for authenticating. Which flag should the engineer use when starting to bootstrap the cluster installation?
--aws-profile=<my-profile><br> B. --cloud-credentials=<my-profile><br> C. --with-aws-bootstrap- credentials=true<br> D. --aws-access-key=<aws access="" key=""> --aws-secret-key=<aws secret="" key=""
></aws></aws></my-profile></my-profile>
Answer:
Explanation:
When deploying NKP to AWS, the bootstrap process requires AWS credentials to interact with AWS APIs for provisioning resources like EC2 instances. The NKPA course specifies that the nkp CLI supports the -- aws-profile flag to specify a custom AWS profile for authentication. This profile, defined in the AWS credentials file (~/.aws/credentials), contains the access key and secret key for the desired AWS account.
The Nutanix Cloud Native (NCP-CN) 6.10 Study Guide states: "To deploy NKP on AWS with custom credentials, use the --aws-profile=<profile-name> flag during the nkp create bootstrap command to reference a specific AWS profile." This approach leverages the AWS CLI's profile management, ensuring secure and flexible credential handling. For example, the command would be nkp create bootstrap --aws-profile=my- profile --kubeconfig bootstrap-cluster.conf.
Incorrect Options:
* B. --cloud-credentials=<my-profile></my-profile>: This flag is not used by the nkp CLI. The NKPA course specifies --aws-profile for AWS.
* C. --with-aws-bootstrap-credentials=true: This flag does not exist in the NKPA documentation for NKP bootstrap.
* D. --aws-access-key=<aws access="" key=""> --aws-secret-key=<aws secret="" key=""></aws><
/aws>: While these flags may be used in some tools, the NKPA course recommends using --aws-profile to avoid hardcoding sensitive credentials.
Nutanix Kubernetes Platform Administration (NKPA) Course, Section on AWS Deployment.
Nutanix Cloud Native (NCP-CN) 6.10 Study Guide, Chapter on Bootstrap Configuration.
Nutanix Cloud Bible, NutanixKubernetesPlatform Section: https://www.nutanixbible.com AWS CLI Documentation: https://docs.aws.amazon.com/cli
NEW QUESTION # 27
An administrator has experienced issues with an NKP-managed workload cluster and has been tasked with deploying NKP Insights in order to:
Resolve common anomalies
Check security issues
Verify whether workloads follow best practicesUpon trying to enable NKP Insights, the cluster that needs to be chosen is grayed out.Which missing prerequisite should be enabled?
- A. Velero
- B. Rook Ceph
- C. Nutanix Objects
- D. Cert-manager
Answer: D
NEW QUESTION # 28
A Platform Engineer manages an NKP v2.12.x environment and is using NKP Image Builder (NIB) to create a custom image. Which two distributions are available for use by the engineer for this task? (Choose two.)
- A. CentOS
- B. Rocky Linux
- C. Fedora
- D. Ubuntu
Answer: B,D
NEW QUESTION # 29
In an effort to control cloud cost consumption, auto-scale is configured to meet demands as needed.
What is the behavior for when nodes are scaled down?
- A. Node is changed to a status of Power-Off for stand-by.
- B. Node is changed to a status of Hibernate.
- C. Node is CAPI deleted from its infrastructure provider, effectively removing it from its hypervisor.
- D. Node is paused in Kubernetes and the infrastructure continues to consume the resources at the current level.
Answer: C
NEW QUESTION # 30
A Platform Engineer is preparing an AWS instance using KIB for becoming an NKP cluster node. During the process, the source AMI is successfully cloned, and multiple preparation steps have occurred against the cloned AMI, such as gathering OS-release facts and uploading image bundles to it. However, the process encounters an error and ultimately fails. What is one troubleshooting step the engineer can perform that may help identify the root cause of the issue?
- A. Rerun the KIB command, including the parameter to set the verbosity level to debug, so that all issued AWS CLI commands and their returns are included and added to an exported log file for review.
- B. Rerun the KIB command, including the parameter to instruct Packer not to automatically delete the cloned AMI on error. This way the OS image can be accessed and further inspected.
- C. Rerun the KIB command, including the parameter to instruct Ansible not to automatically delete the cloned AMI on error. This way the OS image can be accessed and further inspected.
- D. Rerun the KIB command, including the pause parameter, so that each command in the KIB-prep sequence and its return can be reviewed in detail before allowing the prep process to continue.
Answer: A
NEW QUESTION # 31
A technology company has decided to migrate its infrastructure to NKP to improve the scalability and management of its applications. After a successful initial implementation, the operations team faces a new challenge of validating the HelmReleases to ensure that all applications are running correctly and avoid problems in production. Which command should the company execute to know the right status of their HelmReleases?
- A. kubectl get namespaces
- B. kubectl edit helmreleases -n ${PROJECT_NAMESPACE}
- C. kubectl apply -f fluent-bit-overrides.yaml
- D. kubectl get helmreleases -n ${PROJECT_NAMESPACE}
Answer: D
Explanation:
NKP uses Helm and Flux for application deployment, where applications are managed as HelmReleases, a custom resource that defines Helm chart deployments. The NKPA course explains that to validate the status of HelmReleases, administrators can use the kubectl command to query these resources. The correct command is kubectl get helmreleases -n ${PROJECT_NAMESPACE}, which lists all HelmReleases in the specified project namespace, showing their status (e.g., Ready, Failed) and other details like chart version and reconciliation status.
The Nutanix Cloud Native (NCP-CN) 6.10 Study Guide states: "To check the status of HelmReleases in NKP, use kubectl get helmreleases -n <namespace> to view the current state of application deployments managed by Flux." This command helps the operations team verify that applications are running correctly and identify any issues in production.
Incorrect Options:
* A. kubectl get namespaces: This lists namespaces, not HelmReleases or their status.
* C. kubectl edit helmreleases -n ${PROJECT_NAMESPACE}: This edits HelmRelease resources, not displays their status.
* D. kubectl apply -f fluent-bit-overrides.yaml: This applies a configuration for Fluent Bit, unrelated to HelmRelease status.
:
Nutanix Kubernetes Platform Administration (NKPA) Course, Section on Application Management.
Nutanix Cloud Native (NCP-CN) 6.10 Study Guide, Chapter on Day 2 Operations.
Nutanix Cloud Bible, NutanixKubernetesPlatform Section: https://www.nutanixbible.com Flux Documentation: https://fluxcd.io/docs/components/helm
NEW QUESTION # 32
......
Certification dumps Nutanix Certified Professional (NCP) NCP-CN guides - 100% valid: https://examtorrent.dumpsreview.com/NCP-CN-exam-dumps-review.html
