Nutanix NCP-BC-7.5 Dumps Questions Answers

Security hardening for BCDR is focused on protecting the integrity of recovery points against accidental deletion, administrative errors, or malicious intent such as ransomware. While infrastructure-level hardening like SSH keys (Option C) or host-level security (Option A) is important, they do not prevent a user with valid administrative credentials in Prism from deleting a snapshot. To address the specific requirement of ensuring only " authorized " and verified actions can modify or delete snapshots, the administrator should implement an " Approval Policy " .

An Approval Policy introduces a " four-eyes " principle for critical management tasks. When this policy is active, any attempt to delete or modify a recovery point does not execute immediately. Instead, it triggers a request in the Prism Central " Task " console and enters a " Pending Approval " state. A separate authorized user—an " Approver " —must then review the request and explicitly grant permission before the deletion can occur. This creates a vital procedural safeguard, ensuring that no single individual has the unilateral power to destroy the organization ' s backup data. By configuring this policy, the administrator hardens the DR environment against both internal threats and external actors who might gain access to a single set of admin credentials, providing a robust layer of defense for critical data assets.

Orchestrating the recovery of multi-tier applications requires more than just powering on virtual machines; it requires managing the dependencies between application layers. In a standard 3-tier architecture, the Middleware and Web tiers typically depend on the Database being fully operational and ready to accept connections before they can successfully initialize. If a Recovery Plan powers on all tiers too quickly or simultaneously, the " upstream " services will fail to find their database backend, leading to the application crashes described in the scenario.

The Nutanix Recovery Plan provides " execution stages " to handle this boot ordering. However, even if tiers are in separate stages, a VM reaching a " Power On " state in the hypervisor does not mean the application services (like SQL or Oracle) are fully booted and ready for traffic. To address this, the administrator should configure " optional inter-stage delays " . This setting allows the administrator to define a specific wait time (in seconds) between the completion of one stage (e.g., Database power-on) and the start of the next (e.g., Middleware power-on). This delay gives the database engine enough time to finish its internal checks, mount its databases, and open its network ports. By incorporating these surgical delays, the administrator ensures a reliable, automated recovery where each tier only attempts to start once its required dependencies are fully operational at the destination site.

When a replication job is marked as " ongoing " but the progress (bytes completed) is stagnant, it typically indicates a mismatch in the configuration or a failure in the orchestration logic rather than a total network blackout, especially when virtual IPs are confirmed reachable. In a " new setup, " a very common root cause is an incorrectly configured Protection Policy.

This can include issues such as mismatched category assignments, incorrect target site selection, or an invalid replication schedule that the system is unable to initialize properly. If the policy itself is misconfigured—for instance, if it is attempting to replicate to a storage container that hasn ' t been mapped or lacks permissions—the Cerebro service may initiate the task but then fail to progress the data transfer. While blocked ports (Options C and D) are common culprits in replication failures, they usually result in immediate " unreachable " alerts or job failures rather than a " stuck " status where connectivity is otherwise reported as healthy. If the Acropolis service were down at the remote site (Option A), the cluster would likely report the site as disconnected or show a critical service alert in Prism. Therefore, the most logical first area to investigate in a new, non-progressing setup is the logic and settings defined within the Protection Policy itself.