Exam NCP-NS-7.5 Topic 1 Question 8 Discussion
Actual exam question for Nutanix's NCP-NS-7.5 exam
Question #: 8
Topic #: 1
Question #: 8
Topic #: 1
An administrator has configured a VPC with multiple overlay subnets and attached a VPN gateway using IPSec. After enabling Jumbo Frames on the physical network, VMs are still experiencing packet drops. What is the most likely reason?
Suggested Answer: A Vote an answer
This item is best solved by thinking like an operator in Prism Central: first identify whether the problem is design, control-plane state, or policy logic, then pick the option tied to that layer. The correct response is A, meaning "MTU on guest VMs exceeds recommended size for IPSec.". A Floating IP is the normal mechanism for exposing a workload in an overlay-backed VPC to external clients. It preserves internal VM addressing while publishing a reachable external address through the VPC's north-south path. A VPN showing an "Up" state confirms tunnel establishment, but it does not guarantee end-to-end reachability.
Actual traffic flow still depends on route advertisement or static routing, proper prefixes, and correct MTU considerations. Operationally, Flow Virtual Networking should be checked from the control plane outward:
gateway health, peering state, route advertisement, ERP coverage, external path, and MTU when encapsulation is involved. By contrast, B does not fit because it targets a different layer of the Nutanix networking and security stack than the one causing the outcome here. C does not fit because it targets a different layer of the Nutanix networking and security stack than the one causing the outcome here. For exam.
Actual traffic flow still depends on route advertisement or static routing, proper prefixes, and correct MTU considerations. Operationally, Flow Virtual Networking should be checked from the control plane outward:
gateway health, peering state, route advertisement, ERP coverage, external path, and MTU when encapsulation is involved. By contrast, B does not fit because it targets a different layer of the Nutanix networking and security stack than the one causing the outcome here. C does not fit because it targets a different layer of the Nutanix networking and security stack than the one causing the outcome here. For exam.
by Evangeline at Sep 02, 2026, 11:57 AM
0
0
0
10
Comments
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Report Comment
Commenting
You can sign-up / login (it's free).