A corporate security policy mandates strict protection against boot-level rootkits and requires the isolation of NTLM password hashes from the running operating system to prevent "pass-the- hash" attacks.
During the initial testing phase, the administrator deploys a test VM using the standard AHV creation workflow. While configuring the guest operating system, administrator attempts to enable Windows Defender Credential Guard via Group Policy. However, the feature fails to start, and the system logs indicate that the underlying virtualization platform does not meet the necessary hardware security requirements.
Which specific configuration change must the administrator apply to the VM to satisfy the security policy requirements?

• A. Enable Legacy BIOS firmware, check the Secure Boot option, and add a vTPM device.
• B. Enable Generation 2 firmware, check the VBS flag, and add a vTPM device.
• C. Enable UEFI firmware, configure the disk controller to use the IDE bus, and add a vTPM device.
• D. Enable UEFI firmware, check the Secure Boot option, and add a Virtual Trusted Platform Module (vTPM) device.

An administrator ran NCC checks and noticed the following failure:
`Node x.x.x.x: FAIL: No NTP servers are configured in the cluster
configuration Refer to KB 4519 (http://portal.nutanix.com/kb/4519) for
details on check_ntp or Recheck with: ncc health_checks network_checks
check_ntp --cvm_list=x.x.x.x`
What is the minimum number of NTP servers that should be configured to be considered a good configuration that will ensure a high degree of accuracy?

• A. 7
• B. 3
• C. 1
• D. 5

An administrator has deployed two Nutanix clusters and is now establishing synchronous replication between them. However, the replication is failing immediately. Which two responses show the reason and corrective action an administrator can take to resolve the issue? (Choose two.)

• A. If the primary and the recovery clusters are in different subnets, open the ports manually for communication.
• B. Use the command modify_firewall to open the ports on eth0 interface
• C. Use the command modify_firewall to open the ports on eth1 interface.
• D. If the primary and the recovery clusters are on the same subnet, open the ports manually for communication.

Upon reaching the maximum instances of retained reports, what occurs?

• A. Oldest report is deleted
• B. New reporting is delayed.
• C. Manual deletion is required.
• D. Reporting failure is reported.

An administrator has configured a virtual switch with Active-Active bond type with MAC pinning (balance-slb) bond type. The network team enables LACP on the top-of-rack switches connected to the Nutanix nodes.
After the switch change, network throughput degrades.
What is the most likely cause?

• A. Balance-slb is not supported on the default virtual switch vs0.
• B. Balance-slb requires the virtual switch MTU to be set to 9000 when LACP is active.
• C. Balance-slb requires a minimum of four uplink ports per node when LACP is enabled.
• D. Balance-slb must not be used with link aggregation protocols such as LACP.