AWS NC2 Security and Replication Quiz

A Nutanix Cloud Cluster (NC2) on AWS is protected by deploying multiple clusters across different availability zones. When one zone fails, the protected VMs in another zone remain accessible.

Setting up replication between your on-premises Nutanix cluster and a Nutanix cluster running in AWS provides disaster recovery capabilities. If an availability zone fails, the on-premises cluster can act as a backup.

When creating a multi-cluster deployment, you need to configure specific inbound port settings on your Nutanix clusters. Open both directions of the ports specified in the configuration to enable replication.

The port range used for UI access in NC2 on AWS (availability zone 1) is 9440, while the port range used for replication is 2020 and 2009. This ensures secure communication and data transfer.

When setting up NC2 on AWS, you need to configure security groups for each availability zone. These groups define communication rules for the cluster. For example, the port range 9440 is assigned to UI access, while 2020 and 2009 are dedicated to replication.

Nutanix Cloud Clusters on AWS (NC2). A service that provides on-premises workloads with access to AWS services without requiring reconfiguration.

NC2 allows you to deploy and manage Nutanix clusters in a Virtual Private Cloud (VPC) within AWS, offering the same functionality and management tools as on-premises Nutanix clusters.

NC2 supports deployment on EC2 bare-metal instances, both with default and dedicated host tenancy, providing flexibility in resource allocation and security.

NC2 mandates the use of the AHV hypervisor for Nutanix clusters running within AWS, offering a consistent virtualization layer across the platform.

NC2 enables you to utilize either a pre-existing on-premises Prism Central instance or to deploy a new Prism Central instance directly within the NC2 environment on AWS.

NC2 allows for the creation of a Nutanix Cloud Cluster on AWS as a remote backup site, enabling quick recovery of workloads in case of a disaster in the primary data center.

By utilizing NC2, you can provision extra capacity for Dev/Test workloads on demand, enhancing developer productivity without needing to reconfigure your software.

NC2 facilitates a unified management plane for controlling workloads across both on-premises Nutanix environments and NC2 environments on AWS.

A network security feature in AWS that controls incoming traffic by defining rules based on source, destination, protocol, and port range.

A type of custom TCP rule used for SSH access to a CVM (Compute Virtual Machine) in an on-premises subnet.

A type of custom TCP rule used for accessing the Nutanix UI from an on-premises subnet.

A type of custom TCP rule used for Nutanix replication between on-premises and AWS clusters.

A type of custom TCP rule used for Nutanix replication between on-premises and AWS clusters.

The TCP protocol used for secure remote login, typically used for managing servers and accessing their resources.

A network component that enables communication between on-premises networks (your data center) and AWS (Amazon Web Services).

A component that enables communication between NC2 clusters in different availability zones for replication purposes.

AWS service offering that allows you to create and manage Nutanix Cloud Clusters (NC2) on AWS infrastructure.

Each NC2 cluster on AWS has two EBS volumes attached by default for AHV and CVM: AHV EBS (100GB) and CVM EBS (150GB). These are encrypted gp3 volumes used for boot and operating system storage. Additionally, there are 250GB allocated per host for software, configurations, and logs.

NC2 on AWS supports attaching additional EBS volumes to bare-metal instances (i3.metal, i3en.metal, and i4i.metal) to increase the data storage capacity of each host.

When you hibernate an NC2 cluster on AWS, snapshots of the EBS volumes attached to each host are taken. These snapshots preserve the state of your cluster and can be used for restoration.

An S3 bucket is created automatically when you create an NC2 cluster. This bucket is used to store data when you use the Hibernate feature.

When you use the Hibernate feature to back up your NC2 cluster, all the data from your cluster is copied into the designated S3 bucket.

NC2 on AWS utilizes gateway endpoints to connect to AWS services privately, avoiding the public internet. This ensures secure and efficient communication within your VPC.

You are only charged for the hourly usage and data processing charges for using interface endpoints. Gateway endpoints are free of charge.

A feature in Nutanix AOS 7.0 and above that enables direct access to NVMe storage devices, bypassing kernel level operations. It uses the Storage Performance Development Kit (SPDK) to achieve this.

Blockstore replaces the Linux kernel file system with user space libraries, giving AOS virtual machines direct access to storage devices.

SPDK provides zero-copy, direct parallel access to NVMe devices, unlocking their full potential.

Blockstore, together with SPDK, provides ultralow latency, higher performance, and greater host CPU efficiency.

A Controller Virtual Machine (CVM) on an NC2 cluster has direct access to NVMe instance storage hardware.

Nutanix clusters on AWS have two EBS volumes: one for AHV (100 GB) and one for CVM (150 GB) . You can add more storage to the bare-metal instances.

The Nutanix cluster consists of multiple nodes, each with two EBS volumes, forming a distributed system with no SPOF, linear scaling, and concurrency principles.

A Nutanix Cloud Cluster (NC2) runs on bare-metal instances with the AHV hypervisor, which manages the Controller Virtual Machine (CVM) with direct access to NVMe storage hardware.

A feature that ensures Nutanix clusters on AWS are deployed across multiple racks for improved fault tolerance and high availability.

The minimum number of racks required for NC2 clusters with Replication Factor 2 (RF2).

The minimum number of racks required for NC2 clusters with Replication Factor 3 (RF3).

AWS Availability Zones are geographically separated locations within an AWS Region, designed to isolate failures and provide low-latency connectivity.

Data loss can occur if all Nutanix instances are deployed in a single availability zone without protection.

Nutanix Disaster Recovery helps protect data against AZ failures by replicating data to another location, either on-premises or another NC2 cluster in a different AZ.

Nutanix Support displays a notification if a cluster is running in a single AZ without protection for more than 30 days, highlighting potential data loss risks.

NC2 supports various replication modes, including Asynchronous, NearSync, and Synchronous replication, providing different levels of data protection and consistency.