NCP-MCI 7.5: Nutanix Certified Professional - Multicloud Infrastructure Practice Exam

What the NCP-MCI 7.5 exam covers

• Cluster Management and Deployment113 questions
• AHV Virtualization and VM Management99 questions
• Networking107 questions
• Storage Management107 questions
• Data Protection and Disaster Recovery105 questions
• Security107 questions
• Monitoring, Health, and Alerts101 questions
• Lifecycle Management and Upgrades104 questions

Free NCP-MCI 7.5 practice test questions

A sample of 10 questions with answers and explanations. Sign up free to practice all 843.

1. Question 1Cluster Management and Deployment

   An administrator has received three new factory-shipped nodes that need their hypervisor and AOS imaged before a cluster can be built. Which Nutanix tool is purpose-built to image nodes with a chosen hypervisor and AOS version and optionally create the cluster?

   • AFoundationCorrect
   • BLife Cycle Manager (LCM)
   • CNutanix Cluster Check (NCC)
   • DPrism Central
   ✓ Correct answer: A

   Foundation is the Nutanix imaging tool that installs the selected hypervisor (AHV, ESXi, or Hyper-V) with the chosen AOS version, assigns the CVM, hypervisor, and IPMI addresses, and can create the cluster in the same workflow. Factory-prepared nodes are discovered on the local network, which requires IPv6 to be enabled, while bare-metal nodes are not factory-prepared, cannot be detected through discovery, and are imaged from a workstation with access to their IPMI interfaces. Foundation runs as a standalone VM, as a portable app on a workstation, or as the service in the CVM of factory-prepared nodes, and Foundation Central extends imaging to remote sites.

   Why the other options are wrong

   • BLife Cycle Manager (LCM) manages the lifecycle of software and firmware components on clusters that already exist, while imaging bare-metal nodes with a hypervisor and AOS is a Foundation task.
   • CNutanix Cluster Check (NCC) is a health-checking framework that runs diagnostics on an existing cluster, not an imaging tool.
   • DPrism Central is a multi-cluster management plane for clusters that already exist, and although it hosts the Foundation Central service for remote imaging, it is not the Foundation tool this on-site imaging task calls for.
2. Question 2Networking

   A Flow Virtual Networking administrator needs to add a subnet that resides inside a VPC from Prism Central. Which subnet type must be selected during subnet creation to place it inside the VPC?

   • AVLAN
   • BOverlayCorrect
   • CExternal
   • DTransit
   ✓ Correct answer: B

   When creating a subnet in Prism Central with Flow Virtual Networking enabled, choosing the Overlay subnet type lets you associate that subnet with a specific VPC. Overlay subnets are Geneve-encapsulated in the AHV software-defined network data plane, so their IP space is virtualized and decoupled from physical VLANs, which is exactly what is required to be a member of a VPC's routing domain. The VPC then provides the distributed router and routing table for all of its overlay subnets.

   Why the other options are wrong

   • AVLAN subnets are bound to a VLAN ID on the physical network, and a VPC uses them only as external subnets, not as the overlay subnets that carry VM NICs inside the VPC.
   • CExternal is a separate category of subnet used to connect a VPC to the outside world, not a subnet type for hosting VM workloads inside the VPC.
   • DTransit is a VPC type in Flow Virtual Networking (the hub of a hub-and-spoke design), not a subnet type, so it cannot be chosen when creating a subnet.
3. Question 3Monitoring, Health, and Alerts

   In Prism Element, an administrator opens the Storage dashboard. Which of the following is a metric you would expect this dashboard to surface?

   • AThe number of vCenter clusters registered to Prism Central
   • BStorage capacity usage and storage container free spaceCorrect
   • CThe list of Active Directory users synced to the cluster
   • DThe BIOS revision of each network interface card
   ✓ Correct answer: B

   The Prism Element Storage dashboard surfaces storage-focused metrics such as overall capacity usage and the free space of storage containers, along with data reduction and tier details. These are the relevant figures for managing cluster storage. User accounts, registered vCenter clusters, and NIC firmware are not part of the Storage dashboard. Capacity and container free space are exactly what this dashboard shows.

   Why the other options are wrong

   • AThe number of registered vCenter clusters is not a Storage dashboard metric.
   • CThe list of synced Active Directory users belongs to authentication settings, not the Storage dashboard.
   • DNIC BIOS/firmware revisions are hardware/LCM details, not storage metrics.
4. Question 4AHV Virtualization and VM Management

   An administrator wants to standardize new VM deployments on a versioned, centrally managed specification (vCPU, memory, disks, and guest customization) that can later be updated without altering already-deployed VMs. Which Prism Central feature is designed for this?

   • AImages (Image Service)
   • BVM Categories
   • CVM TemplatesCorrect
   • DNCM Blueprints
   ✓ Correct answer: C

   VM Templates in Prism Central let an administrator define a versioned VM specification, including guest customization, that can be deployed repeatedly and later updated to a new version, all without changing VMs already deployed from an earlier template version. The template is the object that holds the specification, and the deployed VMs are separate objects that do not change when the template gains a new version.

   Why the other options are wrong

   • AThe Image Service stores raw ISOs and disk images but does not capture or version an entire VM specification.
   • BCategories are a tagging construct used for grouping and policy assignment, not a versioned deployment specification.
   • DA blueprint is not the Prism Central VM template feature, which captures one VM's configuration and deploys its active version by default.
5. Question 5Security

   A security baseline requires that SSH sessions to the CVMs and AHV hosts display a consent-to-monitor banner, that SSH access be key-only, and that drift from the hardened security baseline on those systems be detected and reverted automatically. Which combination of Nutanix capabilities satisfies this requirement?

   • AConsent banner and cluster lockdown plus SCMA baseline self-healingCorrect
   • BData-at-rest encryption plus Protection Domains for scheduled snapshots
   • CNetwork segmentation plus LCM firmware and software upgrades
   • DFlow Network Security plus Curator background storage scans
   ✓ Correct answer: A

   The Defense Consent Banner, enabled separately for the Controller VMs and the AHV hosts, displays a consent banner when users connect with SSH, and cluster lockdown disables password-based SSH so that only authorized user keys give access. SCMA checks the CVMs and AHV hosts against the security baseline on a configurable schedule, daily by default, and reverts any deviation it finds without intervention. The banner has to be reconfigured after every AOS upgrade, so it is worth confirming after each upgrade.

   Why the other options are wrong

   • BEncryption and Protection Domains protect data but do not enforce banners or key-only SSH.
   • CNetwork segmentation and LCM upgrades do not present a consent banner, restrict SSH to keys, or revert baseline drift.
   • DFlow Network Security governs guest VM traffic and Curator handles storage maintenance, so neither presents a consent banner or enforces key-only SSH.
6. Question 6AHV Virtualization and VM Management

   During VM creation in Prism Central, an administrator selects UEFI firmware but leaves Secure Boot disabled. Which statement accurately describes this configuration?

   • AThe VM boots using UEFI firmware without enforcing signature validation of boot componentsCorrect
   • BThe VM cannot boot at all because UEFI firmware on AHV always requires Secure Boot to be enabled
   • CThe VM automatically reverts to legacy BIOS firmware at its first power-on because Secure Boot is off
   • DThe VM ignores all attached disks and boots only from the CD-ROM or the network
   ✓ Correct answer: A

   UEFI and Secure Boot are independent settings: a VM can run UEFI firmware while Secure Boot is off, in which case it boots normally but does not cryptographically validate the bootloader and kernel signatures. Secure Boot is an optional hardening layer added on top of UEFI, not a requirement of it. Leaving it disabled simply skips signature enforcement. The VM still boots fine under plain UEFI.

   Why the other options are wrong

   • BUEFI does not always require Secure Boot, so the VM boots without it.
   • CThe VM does not revert to legacy BIOS; the chosen UEFI firmware remains in effect.
   • DDisabling Secure Boot has no effect on which disks or devices are used, so the VM does not ignore attached disks.
7. Question 7Storage Management

   On a Nutanix cluster, what is the relationship between a vDisk and a storage container?

   • AA vDisk is a physical disk that is added to the container's storage pool as additional raw capacity
   • BA vDisk is a logical object that resides within a container and represents a VM's virtual diskCorrect
   • CA container is a logical subset carved out of a single vDisk that is owned by one VM
   • DvDisks and containers are separate, unrelated storage constructs that are managed independently in AOS
   ✓ Correct answer: B

   A vDisk is a logical storage object that lives inside a storage container and represents a VM's virtual disk, with the container providing the policies (replication factor, compression, deduplication) that govern that vDisk's data. The container is the logical boundary; the vDisk is the per-VM disk within it. This hierarchy is fundamental to how AOS organizes storage. Physical disks sit beneath, in the storage pool.

   Why the other options are wrong

   • AA vDisk is a logical object, not a physical disk; physical disks belong to the storage pool, not to containers.
   • CThe relationship is reversed; a container holds many vDisks rather than being a subset of one vDisk.
   • DvDisks and containers are directly related, since every vDisk lives inside a container in AOS.
8. Question 8Security

   A multi-node cluster is using SEDs for data-at-rest encryption with an external KMS. A node is powered off for maintenance and then powered back on. What must happen for the SEDs in that node to become readable again?

   • AThe drives must be physically reseated and reformatted before the node is allowed to rejoin the cluster
   • BThe cluster must retrieve the authentication keys from the external KMS to unlock the drivesCorrect
   • CThe administrator must re-enter the keys manually at the BIOS or BMC console for each individual drive
   • DNothing is required because SEDs stay unlocked across power cycles after first unlock
   ✓ Correct answer: B

   A self-encrypting drive relocks itself whenever it loses power, requiring its authentication key before it will release the media encryption key and serve data again. After the node powers back on, the cluster contacts the external KMS over KMIP to obtain the authentication keys and unlock the SEDs in that node so they become readable. This automatic unlock-on-boot flow is why a reachable external KMS is mandatory for SED deployments. If the KMS is unreachable at boot, the SEDs remain locked and the node cannot serve its data.

   Why the other options are wrong

   • AReseating and reformatting the drives is incorrect; reformatting would destroy data and is not part of normal SED unlock when a node rejoins the cluster.
   • CRe-entering the keys manually at the BIOS or BMC console is wrong because the unlock is handled automatically through the KMS, not via manual entry.
   • DNothing being required is false; SEDs explicitly relock on power loss, even after an earlier unlock, which is the security property that makes them effective.
9. Question 9Lifecycle Management and Upgrades

   In Prism Element, an administrator wants to download an NCC health report and a log bundle for a support ticket directly from the web UI. Where is this functionality typically found?

   • AThe Health dashboard Actions dropdown, with its Collect Logs and Run NCC Checks actionsCorrect
   • BThe VM dashboard, where the Create VM wizard bundles a log export option
   • CThe Storage dashboard, on the container creation page where compression and storage policies are set
   • DThe Network Configuration page used to manage the AHV virtual switch bridges
   ✓ Correct answer: A

   In Prism Element both actions live in the Health dashboard Actions dropdown: Run Checks runs the NCC health checks on demand, and Collect Logs gathers a log bundle for a chosen time window. The bundle can be downloaded locally from the task entry or sent to Nutanix Support FTP or SFTP with a case number, which suits administrators who do not want to use the CVM CLI.

   Why the other options are wrong

   • BThe Create VM wizard provisions VMs; it does not collect logs or run NCC health checks.
   • CContainer management handles storage capacity, not log collection or NCC reports.
   • DNetwork Configuration manages bridges and uplinks, not health log bundles.
10. Question 10Security

    An administrator is setting up a third-party automation tool that will call the Prism Central REST API on a recurring basis. Which practice best follows the principle of least privilege for this integration?

    • ADisable RBAC entirely for API calls so the automation tool is never restricted by any role
    • BUse the default local admin account, since it is the only account permitted to call the REST API
    • CCreate a dedicated service account with a custom role granting only the permissions the automation needsCorrect
    • DShare the personal admin credentials of the security team lead with the automation tool so it runs as them
    ✓ Correct answer: C

    Following least privilege, a dedicated service account with a narrowly scoped custom role should be created for the automation tool, granting it only the specific permissions required rather than broad or personal administrative access.

    Why the other options are wrong

    • ADisabling RBAC for API calls removes access control entirely, the opposite of least privilege.
    • BCustom accounts and roles can call the REST API; the default admin account is not the only option and using it violates least privilege.
    • DSharing a personal administrator's credentials with an automation tool is poor practice, undermining both accountability and least privilege.

Who this NCP-MCI 7.5 practice exam is for

This practice set is for anyone preparing for the NCP-MCI 7.5: Nutanix Certified Professional - Multicloud Infrastructure exam at the advanced level - from first-time candidates building a foundation to experienced Nutanix practitioners doing a final review before test day. If you learn best by working through realistic questions and reading why each answer is right or wrong, it is built for you.

How to use this NCP-MCI 7.5 practice exam

1. Start with the free sample questions above to gauge your current baseline.
2. Read the full explanation on every question, including why each wrong option is wrong.
3. Track your weak domains and focus your study where you are losing the most marks.
4. Once you are scoring consistently well, take a timed, full-length mock exam.
5. Use your readiness score to decide when you are ready to book the real NCP-MCI 7.5 exam.

Related Nutanix resources

• NCP-MCI 7.5 study guideKey concepts
• Nutanix practice examsAll Nutanix
• Certification pathWhere this fits
• Certification exam guides & tipsBlog
• Plans & pricingFree & paid
• How these questions are written and reviewedMethodology
• Report a problem with a questionCorrections
• NCA 7.5 practice examRelated
• NCM-MCI 6.10 practice examRelated
• NCP-CN 6.10 practice examRelated

NCP-MCI 7.5 practice exam FAQ