Online Access Free NCP-NS-7.5 Practice Test

What entity is automatically created on the cluster hosting Prism Central when Microsegmentation is enabled?

• A.A Bucket named flow_data is created.
• B.A storage container named flow_data is created.
• C.A File Share named flow_data is created.
• D.A virtual machine named flow_data is created.

A service-insertion firewall VM protects user VMs access to the internet. The virtual and physical switches, as well as all user VMs, currently use the default MTU size of 1500. Everything functions normally until a user VM is migrated to another host. After the migration, the user reports that some websites fail to load while ping to those same sites still succeeds. Routing and security policies appear normal. Which two configuration changes could resolve the issue? (Choose two.)

• A.Decrease the MTU on the user VM's vNIC to 1442 or lower.
• B.Increase the MTU across all vSwitch and physical uplinks on the relevant network path to 1558 or greater.
• C.Increase the MTU on the user VM's vNIC to 1558 or greater.
• D.Lower the MTU across all vSwitch and physical uplinks on the relevant network path to 1442 or lower.

An administrator needs to delegate the management of security policies to a dedicated SecOps team. To enforce the principle of least privilege, the administrator assigns the predefined Flow Policy Author role to a user on the team. The user confirms they can create, monitor, and enforce security policies. However, when attempting to build a new application security policy for a set of newly deployed VMs, the user reports they are unable to create a new category to group these VMs. The option is not available in the Prism Central UI.
Which statement explains this behavior?

• A.The user's role must be assigned with a scope for the specific projects they manage.
• B.The user is missing the Flow Admin role, which is required for category management.
• C.The Flow Policy Author role must be cloned into a custom role before it can be used.
• D.The Flow Policy Author role can only apply policies to existing categories by design.

Refer to Exhibit:

An organization uses an FNS-NG Service Chain to steer application traffic through a pair of third-party firewall Network Function VMs operating in Active/Standby mode. Users suddenly report that all application access is blocked. The administrator reviews Prism Central - > Network & Security - > Network Functions, where the summary shown in the exhibit is displayed. Additional information: Alert: "Network Function
'PANW Service Insertion' virtual NIC pair(s) are unhealthy." Both firewall VMs are powered on and reachable. The security policy using the service chain has not been changed. Based on the exhibit and findings, what is the most likely cause of the traffic outage?

• A.The inbound vNIC on SE-PA-VM Firewall-2 failed, preventing redirected packets from reaching the firewall.
• B.Firewall policy synchronization was not configured when the standby firewall became active.
• C.One of the Network Function vNIC pairs lost dataplane connectivity, interrupting traffic until health is stabilized.
• D.The service-chain health check failed to reroute sessions to the healthy firewall.

Which action allows an administrator to reuse a single existing policy in a different scope?

• A.Place policy in Enforce mode
• B.Clone
• C.Place policy in Monitor mode
• D.Export