Nutanix Updated NCP-MCI-6.10 Exam Questions and Answers by nahla

For NutanixDisaster Recovery (DR) protection policies, thefirst stepis to establish a connection between theProduction cluster and the DR site, which is done by creating anAvailability Zone (AZ) (Option B).

Availability Zones (AZs) define remote sites for replicationand are a requirement for configuring protection domains and disaster recovery plans.

Option A (Installing NGT)is not necessary for setting up replication but is useful for application-consistent snapshots.

Option C (Converting the source cluster to AHV)is not required, as Nutanix supports cross-hypervisor DR betweenESXi and AHV.

Option D (Creating a point-in-time snapshot)is a later step after setting up theAvailability Zone and Protection Policy.

The “nutanix” user is a system-level account required by the platform for internal operations, automation, cluster communication, and support access. It cannot be deleted or renamed. Nutanix security guidelines state:

“The correct method to prevent password-based SSH access for system accounts is to use Cluster Lockdown mode, which disables password authentication and enforces key-based access for all system-level CVM accounts.”

Cluster Lockdown modifies SSH configuration across all CVMs, ensuring:

password authentication is disabled

only key-based authentication is permitted

privileged system accounts such as ‘nutanix’ cannot log in interactively

Blocking port 22 is not appropriate because it would block SSH entirely, including legitimate administrative access. The “nutanix” user cannot be renamed or removed due to system dependency.

Thus, enabling Cluster Lockdown is the proper Nutanix-approved method to remove password-based SSH access for system accounts.

Windows Defender Credential Guard requires UEFI firmware and Secure Boot to function properly.

Option B (Enable UEFI with Secure Boot) is correct:

Credential Guardrequires a UEFI-based boot moderather thanLegacy BIOS.

Secure Boot ensures only trusted OS components load, reducing attack surface for credential theft.

Option A (Update vCPU to 8) is incorrect:

Increasing vCPUs does not impactCredential Guard compatibility.

Option C (Use Windows Server 2022) is incorrect:

Windows Server 2019supports Credential Guard; upgrading to 2022 isnot required.

Option D (Update Memory to 16GB) is incorrect:

Credential Guard has no minimum RAM requirementbeyond general OS needs.