An administrator is tasked with configuring an application policy for a two-tier public website with Web and DB components. The database servers need to communicate with each other for replication, but the web servers should not be able to communicate with each other. The administrator configures the policy... and sets it to Enforce mode.
Later testing reveals that the web servers are able to communicate with each other.
What should the administrator do to resolve this?

• A. Create an isolation policy for the PubSite-Prod-Web entity group.
• B. Ensure the PubSite-Prod-Web servers are in different Subnets.
• C. Configure a VPC Network Policy to deny the traffic.
• D. Edit the PubSite-Prod-Web entity group's intra-tier rule.

An administrator observes a Network Controller Unreachable alert in Prism Central for a specific AHV cluster. All other management tasks for the cluster from Prism Central are succeeding and the cluster itself reports a healthy status.
Which step is the most appropriate to investigate the cause of this specific alert?

• A. Check for and restart any unhealthy Flow Virtual Networking microservices within the Prism Central scale-out architecture.
• B. On the affected Prism Element cluster, verify that the Network Controller service is enabled and healthy on all CVMs.
• C. Unregister and then re-register the affected cluster in Prism Central to force a full synchronization of the network controller state.
• D. Verify physical network connectivity and MTU settings between Prism Central and the affected AHV hosts.

Which step is required before placing the Flow Network Security software bundle on a local web server?

• A. Extract the downloaded bundle using 7zip and upload it directly to Prism Central.
• B. Set up a local web server and download both the required software LCM bundle and compatibility bundle.
• C. Perform an inventory on the Nutanix cluster before transferring any bundle files to the web server.
• D. Enable Direct Upload in Life Cycle Manager so the bundles can be transferred automatically to the Nutanix cluster.

An organization plans to apply security controls based on user group membership in Active Directory.
What configuration is required in Prism Central before VDI policies can be used?

• A. Map category assignments to roles using RBAC settings.
• B. Assign categories to identities in the Admin Center.
• C. Configure category values mapped to AD groups.
• D. Create the list of users and assign categories to them.

An administrator recently deployed a new set of virtual machines... 3-tier web application... restricted as follows:
Only application VMs can talk to database VMs on port 3306
Frontend VMs should only communicate with application VMs on port 8080
Which action will correctly create and configure the Security Policies in Nutanix Flow to satisfy this task?

• A. Configure a global "Allow All" Security Policy and rely on guest OS firewalls for tier-based restrictions.
• B. Create VLANs for each tier and configure ACLs to restrict communication.
• C. Create IP-based rules for each VM category within a Security Policy.
• D. Create categories for each tier then define an Application Policy allowing specific ports between them.