Nutanix NCP-CI-Azure Exam Dumps

Azure AD App Registration: When setting up an application registration in Azure AD, specific permissions are required to delegate access.

User Access Administrator Role: This role has the necessary permissions to manage user access to Azure resources, including delegating permissions for app registrations.

Comparison of Roles:

Azure Reader Role: Grants read-only access, insufficient for managing app registrations.

Azure Contributor Role: Allows creation and management of resources but does not include permissions to manage access.

Azure Custom Role: While it can be defined to meet specific needs, the User Access Administrator role is predefined to handle access delegation.

Conclusion: The Azure User Access Administrator role is required to delegate minimum permissions for Azure AD App registration.

Azure Role-Based Access Control Documentation

Azure AD App Registration Guide

Jump Host Deployment: A Jump Host is a secure server used to access other systems in a network. In the context of an NC2 cluster on Azure, it serves as an intermediary for accessing Prism Element and Prism Central.

Flexible Deployment Options: The Jump Host can be deployed in either the Prism Central VNet or an external VNet, providing flexibility in network design and access strategies. This allows the organization to choose the most suitable network for deploying the Jump Host based on their security and connectivity requirements.

Nutanix NC2 on Azure Deployment Guide

Azure Virtual Network Configuration Documentation

Port Requirements: The specified ports (22, 2009, 2020, 2049, 3260, 9440) are commonly used for various services and require TCP communication.

Port 22: SSH

Port 2009: Used for Nutanix internal communication

Port 2020: Nutanix services

Port 2049: NFS

Port 3260: iSCSI

Port 9440: Nutanix Prism management

Communication Type: To ensure proper disaster recovery setup, bi-directional communication is needed to allow traffic to flow both from on-premises to Azure and vice versa.

TCP Protocol: These ports use the TCP protocol, which provides reliable communication between devices.

Conclusion: Creating a bi-directional (TCP) rule on the firewall allows the necessary communication for disaster recovery processes.

Nutanix Networking and Security Documentation

Azure Networking Documentation

Outbound Communication Whitelisting: For NC2 Azure API calls and telemetry data to function correctly, certain outbound communications must be allowed. If these communications are not whitelisted, API calls can fail, and telemetry or health data might not be reported correctly.

First Check: Given the symptoms (failing API calls and missing telemetry), the first step should be to ensure that all necessary outbound communications are correctly whitelisted. This includes ensuring that endpoints and services required for NC2 operation are accessible.

Nutanix NC2 Networking Requirements

Azure Networking and Security Configuration Guide

For configuring connectivity between an on-premises datacenter and Azure, the two supported options are:

VPN (Virtual Private Network): Site-to-Site VPN allows you to create a secure connection from your on-premises network to Azure over the public internet using IPsec/IKE protocols.

ExpressRoute: Provides a private connection between your on-premises infrastructure and Azure, ensuring traffic does not traverse the public internet.

Both options provide secure and reliable connectivity, with ExpressRoute offering enhanced performance and security due to its private connection. Reference

Azure VPN Gateway

Azure ExpressRoute Overview