NCP-MCI 7.5: Nutanix Certified Professional - Multicloud Infrastructure Practice Exam

What the NCP-MCI 7.5 exam covers

• Cluster Management and Deployment115 questions
• AHV Virtualization and VM Management109 questions
• Networking111 questions
• Storage Management112 questions
• Data Protection and Disaster Recovery108 questions
• Security112 questions
• Monitoring, Health, and Alerts107 questions
• Lifecycle Management and Upgrades111 questions

Free NCP-MCI 7.5 practice test questions

A sample of 10 questions with answers and explanations. Sign up free to practice all 885.

1. Question 1Cluster Management and Deployment

   An administrator has received three new factory-shipped nodes that need their hypervisor and AOS imaged before a cluster can be built. Which Nutanix tool is purpose-built to discover bare-metal nodes and image them with a chosen hypervisor and AOS version?

   • AFoundationCorrect
   • BLife Cycle Manager (LCM)
   • CNutanix Cluster Check (NCC)
   • DPrism Central
   ✓ Correct answer: A

   Foundation is the Nutanix bare-metal provisioning tool that discovers unconfigured nodes over IPv6 link-local, installs the selected hypervisor (AHV, ESXi, or Hyper-V) along with the chosen AOS version, and optionally creates the cluster in a single workflow. It runs from a portable Foundation VM, the standalone Foundation applet, or the CVM-embedded Foundation, and assigns the CVM, hypervisor, and IPMI IP addresses during imaging. This is the only tool designed to take factory or wiped nodes from no operating system to a fully imaged, cluster-ready state.

   Why the other options are wrong

   • BLife Cycle Manager (LCM) updates firmware and software on an already-running cluster, but it cannot image bare-metal nodes that have no AOS installed.
   • CNutanix Cluster Check (NCC) is a health-checking framework that runs diagnostics on an existing cluster, not an imaging tool.
   • DPrism Central is a multi-cluster management plane that registers and monitors clusters after they exist, and it does not perform node imaging.
2. Question 2AHV Virtualization and VM Management

   A database VM on AHV is configured with vCPU(s) = 2 and Cores Per Socket = 1. The DBA reports that the application's per-socket licensing is more cost-effective with fewer sockets and more cores. The administrator wants to keep 8 total logical processors but minimize the socket count. Which setting should be used?

   • AvCPU(s) = 1 and Cores Per Socket = 8Correct
   • BvCPU(s) = 8 and Cores Per Socket = 1
   • CvCPU(s) = 4 and Cores Per Socket = 2
   • DvCPU(s) = 2 and Cores Per Socket = 8
   ✓ Correct answer: A

   Because the vCPU(s) field represents virtual sockets, setting it to 1 with Cores Per Socket = 8 presents a single socket containing 8 cores, achieving the 8 logical processors while minimizing the socket count. This is exactly the topology preferred for per-socket licensing models, since the guest sees only one socket. Prism multiplies the two values to confirm the 8 total processors.

   Why the other options are wrong

   • BvCPU(s) = 8 and Cores Per Socket = 1 presents 8 separate sockets, which maximizes rather than minimizes the socket count and is the worst case for per-socket licensing.
   • CvCPU(s) = 4 and Cores Per Socket = 2 presents 4 sockets, more than the single socket the DBA wants.
   • DvCPU(s) = 2 and Cores Per Socket = 8 yields 16 logical processors across 2 sockets, exceeding the required 8 processors.
3. Question 3Networking

   Which component is responsible for the actual Layer 2 forwarding of frames between user VMs, the CVM, and the physical uplinks on each AHV host?

   • AThe cluster-wide virtual switch object in Prism
   • BThe Open vSwitch bridge (br0) running on the AHV hostCorrect
   • CThe Acropolis leader service on the Prism Central VM
   • DThe Stargate data service inside the CVM
   ✓ Correct answer: B

   The Open vSwitch bridge br0 is the in-kernel forwarding plane on each AHV host that switches Layer 2 frames among the tap interfaces of user VMs, the CVM interfaces, and the physical uplink bond. The virtual switch in Prism is only the management abstraction that programs how br0 is configured; the bridge itself does the packet forwarding. This is why traffic patterns, VLAN tagging, and the uplink bond all operate at the br0 level on each host.

   Why the other options are wrong

   • AThe cluster-wide virtual switch object in Prism is a management construct and does not forward frames itself; it pushes configuration down to the bridges.
   • CThe Acropolis leader service coordinates VM management tasks such as scheduling and HA, not per-frame Layer 2 forwarding.
   • DThe Stargate data service handles storage I/O within the CVM and is not part of the network forwarding path between VMs and uplinks.
4. Question 4Storage Management

   A container is created with thin provisioning. A 500 GB virtual disk is presented to a guest VM, but the guest has only written 80 GB of data. How much physical capacity does AOS consume for this vDisk (ignoring replication and reduction)?

   • AApproximately 80 GB, matching the data actually writtenCorrect
   • BThe full 500 GB, reserved at creation
   • C250 GB, half of the provisioned size
   • D0 GB until the VM is powered off
   ✓ Correct answer: A

   Thin provisioning consumes physical capacity only for data actually written, so a 500 GB vDisk with 80 GB of written data uses roughly 80 GB of physical space (before replication and data reduction). The remaining provisioned-but-unwritten capacity costs nothing until used. This is the core efficiency of thin provisioning. The provisioned size is a logical ceiling, not a physical reservation.

   Why the other options are wrong

   • BThin provisioning does not reserve the full 500 GB at creation; only written data consumes space.
   • CConsumption tracks written data (about 80 GB), not an arbitrary half of the provisioned size.
   • DWritten data consumes space immediately; usage is not 0 GB until the VM powers off.
5. Question 5Data Protection and Disaster Recovery

   An administrator configures a bandwidth throttle of 50 Mbps on a remote site, but during a large initial seed (full replication of all base data) the link is still saturated above 50 Mbps for a brief period. Which statement best explains throttle behavior for async replication in AOS?

   • AThe throttle is per-remote-site and paces the Cerebro replication stream toward the ceilingCorrect
   • BThe throttle policy applies only to NearSync and is ignored for async replication jobs
   • CThe throttle policy caps guest VM application traffic instead of the replication
   • DThe throttle policy increases available bandwidth rather than limiting it
   ✓ Correct answer: A

   Async replication bandwidth throttling is configured per remote site and paces the Cerebro-driven replication stream toward the configured ceiling, though brief bursts above the limit can occur during a large initial seed before the policy settles the rate. The throttle targets replication traffic specifically. It applies to async replication and shapes the stream to protect the WAN link. Short overshoots during seeding do not mean the throttle is wrong.

   Why the other options are wrong

   • BThe throttle is not limited to NearSync; it applies to async replication as well.
   • CThe throttle caps replication traffic, not guest VM application traffic.
   • DA throttle sets a ceiling on replication bandwidth; it cannot increase the bandwidth the link actually has.
6. Question 6Security

   What does the Security Configuration Management Automation (SCMA) framework in AOS do on a recurring schedule?

   • ARotates data-at-rest encryption keys with the external KMS
   • BSelf-heals the cluster security configuration back to the defined STIG baselineCorrect
   • CScans guest VMs for malware using an embedded antivirus engine
   • DRenews the Prism SSL certificate automatically before expiry
   ✓ Correct answer: B

   The Security Configuration Management Automation framework runs on a schedule to detect drift from the defined STIG-based security baseline and automatically self-heal the configuration back to that hardened state. This keeps CVMs and hosts continuously compliant without manual reapplication. SCMA is about maintaining the security posture, not encryption, antivirus, or certificates. Its job is baseline enforcement and remediation.

   Why the other options are wrong

   • ARotating data-at-rest keys with an external KMS is a separate encryption operation, not what SCMA does.
   • CSCMA does not scan guest VMs for malware; it hardens the cluster's own configuration.
   • DSCMA does not renew the Prism SSL certificate; certificate management is handled separately.
7. Question 7Monitoring, Health, and Alerts

   A WARN result appears for the check that monitors CVM memory usage. What is the recommended first action for an administrator?

   • AImmediately power off the affected CVM in order to clear the memory warning
   • BReview the check details and KB article referenced in the result, then follow the guidanceCorrect
   • CDisable the check so that the memory warning no longer appears
   • DDelete the Protection Domain that is associated with the CVM
   ✓ Correct answer: B

   When a WARN appears for CVM memory usage, the recommended first action is to read the check details and the referenced KB article, then follow the documented guidance to investigate and remediate. NCC results link to KB articles precisely to direct the correct response. Acting on the documented steps avoids hasty, harmful actions. This is the standard troubleshooting approach for any NCC WARN.

   Why the other options are wrong

   • APowering off a CVM is disruptive and is not the recommended first response to a WARN.
   • CDisabling the check hides the warning without addressing the underlying condition.
   • DDeleting a Protection Domain is unrelated to a CVM memory usage warning.
8. Question 8Lifecycle Management and Upgrades

   An administrator completed a successful Move migration to AHV and validated the workload. According to Nutanix Move best practice, what should the administrator do with the migration plan and source VM afterward to free resources and finalize the project?

   • BDiscard the migration plan and decommission the validated source VM after confirming the AHV workload is healthyCorrect
   • AKeep the migration plan running perpetual incremental syncs against the source VM indefinitely
   • CImmediately fail the workload back to the source VM to reconfirm it still boots
   • DRe-add the migrated AHV VM as a new Move source and migrate it a second time
   ✓ Correct answer: B

   After a successful, validated migration, Move best practice is to discard the migration plan and decommission the source VM once the AHV workload is confirmed healthy, which frees resources on both sides and finalizes the project. Leaving the plan syncing forever or rolling back wastes resources. Clean teardown of the plan and source completes the migration. It is the recommended closing step.

   Why the other options are wrong

   • ALeaving the plan syncing forever wastes resources; best practice is to discard the plan once the target is validated.
   • CRolling back after a validated cutover reintroduces risk; the source should be decommissioned, not reactivated.
   • DRe-migrating the already-migrated VM serves no purpose and duplicates the workload.
9. Question 9Security

   A security policy requires that the Nutanix cluster be protected against ransomware by detecting anomalous file access patterns and blocking known malicious file signatures on user file shares. The environment already runs Nutanix Files. Which Nutanix solution should the administrator deploy to meet this requirement?

   • BData Lens, which provides ransomware detection, blocking of known malicious signatures, and anomaly alerting for Nutanix FilesCorrect
   • AFlow Network Security, using a quarantine policy applied to the Nutanix Files file server VMs to block malicious access
   • CSoftware-based data-at-rest encryption backed by an external KMS to protect the file shares from ransomware
   • DCluster lockdown combined with SCMA baseline hardening to prevent anomalous file access on the shares
   ✓ Correct answer: B

   Data Lens is the Nutanix data governance and security service that integrates with Nutanix Files to provide audit trails, file-access anomaly detection, and a ransomware protection feature that maintains a curated signature/extension blocklist and can automatically block offending clients when a ransomware pattern is detected. It also supports honeypot-style detection and self-service recovery via Files snapshots. This directly satisfies the requirement to detect anomalous access and block known malicious signatures on file shares. Neither encryption nor network microsegmentation nor host hardening inspects file content or access patterns.

   Why the other options are wrong

   • AFlow Network Security controls network segmentation, not file-access ransomware detection on shares.
   • CEncryption protects data confidentiality but does not detect anomalous file access or block malicious signatures.
   • DCluster lockdown and SCMA harden the platform but do not provide file-level ransomware detection.
10. Question 10Data Protection and Disaster Recovery

    A third-party backup vendor's software needs to efficiently back up only the blocks that changed since the last backup of a Nutanix AHV VM, rather than reading the entire vDisk each time. Which Nutanix capability enables this?

    • AErasure coding on the source container
    • BChanged Region Tracking exposed through Nutanix's data protection APIsCorrect
    • CNearSync lightweight snapshots, exclusive to Leap replication
    • DThe Data Services IP used for Volumes
    ✓ Correct answer: B

    Nutanix exposes changed-region tracking through its data protection APIs, allowing supported third-party backup software to identify and back up only the blocks that changed since the last backup rather than reading the full vDisk each time.

    Why the other options are wrong

    • AErasure coding is a capacity-efficiency feature and has nothing to do with tracking changed blocks for backup software.
    • CNearSync lightweight snapshots serve Leap replication internally and are not the general mechanism exposed for third-party incremental backups.
    • DThe Data Services IP is used for Nutanix Volumes iSCSI discovery, unrelated to backup change tracking.

Who this NCP-MCI 7.5 practice exam is for

This practice set is for anyone preparing for the NCP-MCI 7.5: Nutanix Certified Professional - Multicloud Infrastructure exam at the advanced level - from first-time candidates building a foundation to experienced Nutanix practitioners doing a final review before test day. If you learn best by working through realistic questions and reading why each answer is right or wrong, it is built for you.

How to use this NCP-MCI 7.5 practice exam

1. Start with the free sample questions above to gauge your current baseline.
2. Read the full explanation on every question, including why each wrong option is wrong.
3. Track your weak domains and focus your study where you are losing the most marks.
4. Once you are scoring consistently well, take a timed, full-length mock exam.
5. Use your readiness score to decide when you are ready to book the real NCP-MCI 7.5 exam.

Related Nutanix resources

• NCP-MCI 7.5 study guideKey concepts
• Nutanix practice examsAll Nutanix
• Certification pathWhere this fits
• Certification exam guides & tipsBlog
• Plans & pricingFree & paid
• How these questions are written and reviewedMethodology
• Report a problem with a questionCorrections
• NCA 7.5 practice examRelated
• NCM-MCI 6.10 practice examRelated
• NCP-CN 6.10 practice examRelated

NCP-MCI 7.5 practice exam FAQ