Prepare for the Nutanix Certified Associate Exam with tailored resources, including multiple choice questions and detailed explanations. Hone your skills and master the exam content for success!

Practice this question and more.


How can you restrict access to a group of VMs?

  1. Assign that group of VMs to a protection domain.

  2. Nutanix Customizer.

  3. Assign VMs to a category, and then apply security policies to that category for users.

  4. Run a security script in nCLI for that group of VMs.

The correct answer is: Assign VMs to a category, and then apply security policies to that category for users.

To effectively restrict access to a group of virtual machines (VMs) within a Nutanix environment, categorizing the VMs and then applying security policies to that category is the most streamlined and efficient approach. By assigning VMs to a specific category, administrators can manage security settings at a higher level without needing to configure individual settings for each VM. This method simplifies the process of enforcing security policies, allowing for consistent application of restrictions and permissions across all VMs within that category. Using categories enables a clear organizational structure, making it easier to apply policies related to user access and control. For example, an organization might have categories for development, production, or testing, each with distinct access requirements. By creating security policies that can be applied to these categories, the management of user permissions and access rights becomes more straightforward and less error-prone. Options that involve assigning VMs to protection domains or utilizing a customizer or nCLI scripts do not specifically focus on restricting access per group based on categories. Protection domains are more about data availability and disaster recovery rather than user access control. The customizer is generally used for setting up and customizing environments rather than managing user permissions, and while nCLI might provide scripting capabilities, it may not offer the same level of