The clean way to read this scenario is to separate what is merely present in the environment from the single Nutanix construct that actually satisfies the requirement. The correct response is B, meaning "Creates a hub- and-spoke VPC for routing". A Transit VPC acts as the routing hub for spoke VPCs and is commonly used when administrators want shared services or inter-VPC communication without pushing route complexity into the physical network. In practice, this falls into virtual network design: VPC structure, subnet type, external network behavior, routing intent, and address exposure are what determine the result.
In other words, this is less about broad infrastructure suspicion and more about finding the exact Nutanix decision point that explains the behavior. Notice that A is not appropriate because NAT changes addressing behavior and does not solve the routing or policy condition described in the scenario. C does not fit because it targets a different layer of the Nutanix networking and security stack than the one causing the outcome here.
Seen operationally, the correct response is the least disruptive and most deterministic one. It changes the exact Nutanix setting that governs the outcome instead of introducing workarounds elsewhere in the stack.

From a Nutanix exam perspective, this question is really testing whether the administrator understands the control point that actually governs the behavior shown in the scenario. The correct response is CD, which corresponds to Use one Overlay external subnet in the Transit VPC to which both VPCs will connect. and Associate one No-NAT external VLAN to the Transit VPC router for underlay connectivity.. A Transit VPC acts as the routing hub for spoke VPCs and is commonly used when administrators want shared services or inter-VPC communication without pushing route complexity into the physical network. In practice, this falls into virtual network design: VPC structure, subnet type, external network behavior, routing intent, and address exposure are what determine the result. In other words, this is less about broad infrastructure suspicion and more about finding the exact Nutanix decision point that explains the behavior. Notice that A is not appropriate because NAT changes addressing behavior and does not solve the routing or policy condition described in the scenario. B does not fit because it targets a different layer of the Nutanix networking and security stack than the one causing the outcome here. For exam preparation, remember that.

A reliable method here is to translate the scenario into Nutanix terms-VPC routing, external connectivity, policy scope, identity mapping, or upgrade readiness-and then choose the answer that directly addresses that domain. The correct response is A, meaning "Review the Alerts and Events in Prism Central to confirm if the affected host shows NIC or uplink errors.". MTU planning matters because encapsulation adds overhead.
When overlay, Geneve, VXLAN, or IPSec is present, a path that looks healthy at 1500 bytes can still fragment or drop larger frames unless the underlay and endpoints are sized correctly. Operationally, Flow Virtual Networking should be checked from the control plane outward: gateway health, peering state, route advertisement, ERP coverage, external path, and MTU when encapsulation is involved.
Notice that B is a disruptive action and does not address the actual control-plane or policy requirement being tested. C does not fit because it targets a different layer of the Nutanix networking and security stack than the one causing the outcome here. The key takeaway is that Flow is intentionally modular. Networking objects determine reachability, security objects determine permission, and lifecycle steps determine supportability.
Mixing those layers usually produces the distractor answers.

A reliable method here is to translate the scenario into Nutanix terms-VPC routing, external connectivity, policy scope, identity mapping, or upgrade readiness-and then choose the answer that directly addresses that domain. The correct response is B, meaning "Edit the PubSite-Prod-Web entity group's intra-tier rule.".
Enforce mode is the stage where Flow stops acting like a discovery tool and starts behaving like a stateful control point. Traffic allowed by the policy continues normally, while traffic that does not match an allowed rule is denied according to policy logic. An Isolation Policy is built to stop communication between defined groups. Unlike an application policy, it is intended to create a hard boundary, making it the correct choice when the requirement is "no traffic between these entities." This is a Flow policy design question, so categories, secured entities, rule direction, policy mode, and policy precedence matter more than simple IP connectivity assumptions. Notice that A does not fit because it targets a different layer of the Nutanix networking and security stack than the one causing the outcome here. C does not fit because it targets a different layer of the Nutanix networking and security stack than the one.

The most professional way to evaluate this question is to map the symptom to the Nutanix feature responsible for that function rather than reacting to secondary details in the prompt. The correct response is C, meaning
"Use a No-NAT External Network for the on-premises link and a NAT External Network for Internet access.
Configure a VPN tunnel to the on-premises location and enable BGP on the VPC router for the on-premises link.". A Floating IP is the normal mechanism for exposing a workload in an overlay-backed VPC to external clients. It preserves internal VM addressing while publishing a reachable external address through the VPC's north-south path. Externally Routable Prefixes determine which overlay prefixes are advertised beyond the VPC. If the ERP does not cover the workload subnet, upstream devices never learn a valid return path, even when the local VPC appears healthy. In practice, this falls into virtual network design: VPC structure, subnet type, external network behavior, routing intent, and address exposure are what determine the result. A strong exam habit is to ask which Nutanix construct would have to change for the symptom or requirement to change. That mental shortcut usually separates the real.