Nutanix Exam Professional Standards & Ethics 2 — Questions and Answers
Question 1: A Nutanix administrator discovers that a colleague is sharing customer cluster credentials via unencrypted email. What is the most ethical course of action?
- Ignore it since the colleague is senior
- Report it to a manager or security team immediately (Correct answer)
- Warn the colleague privately but take no further action
- Share the same credentials to stay consistent with team practice
Correct answer: Report it to a manager or security team immediately
Sharing credentials via unencrypted channels violates security policy and must be reported to appropriate personnel immediately.
Question 2: Under Nutanix's professional standards, when must a certified professional disclose a potential conflict of interest?
- Only when directly asked by a client
- Never, as personal interests are private
- Before undertaking any engagement where personal interests may bias judgment (Correct answer)
- After the project is complete to avoid disruption
Correct answer: Before undertaking any engagement where personal interests may bias judgment
Conflicts of interest must be disclosed proactively before starting work that could be influenced by personal bias.
Question 3: A Nutanix partner engineer is offered a personal gift by a vendor seeking preferential treatment in a hardware recommendation. What is the correct ethical response?
- Accept the gift as a normal business courtesy
- Accept only if the gift is under $50
- Decline the gift and report the offer per company policy (Correct answer)
- Accept and disclose it after the recommendation is made
Correct answer: Decline the gift and report the offer per company policy
Accepting gifts that could influence professional decisions violates anti-bribery standards and must be declined and reported.
Question 4: Which principle best describes a Nutanix professional's obligation to keep client infrastructure details confidential?
- Availability
- Non-repudiation
- Confidentiality (Correct answer)
- Accountability
Correct answer: Confidentiality
Confidentiality obligates professionals to protect client data and system details from unauthorized disclosure.
Question 5: A Nutanix administrator is asked by their employer to configure a cluster in a way that violates a customer's data residency agreement. What should they do?
- Follow the employer's instructions without question
- Refuse and escalate the issue through proper channels (Correct answer)
- Implement the change and document it informally
- Ask the customer's junior staff for verbal approval
Correct answer: Refuse and escalate the issue through proper channels
Violating a legal data residency agreement is unethical and potentially illegal; the professional must refuse and escalate.
Question 6: When a Nutanix-certified engineer notices a critical security vulnerability in a customer's environment, what is their ethical obligation?
- Document it internally and wait for the customer to ask
- Exploit it to demonstrate severity, then report it
- Notify the customer immediately and provide remediation guidance (Correct answer)
- Disclose it publicly to force a faster fix
Correct answer: Notify the customer immediately and provide remediation guidance
Responsible disclosure requires promptly notifying the affected party and assisting with remediation rather than exploitation or public exposure.
Question 7: Which action best exemplifies professional integrity when a Nutanix consultant makes an error that causes brief downtime?
- Blame a third-party vendor to protect their reputation
- Acknowledge the error, apologize, and provide a root cause analysis (Correct answer)
- Fix the issue quietly and hope no one notices
- Claim the downtime was a pre-existing issue
Correct answer: Acknowledge the error, apologize, and provide a root cause analysis
Professional integrity requires honestly acknowledging mistakes and taking responsibility with corrective action.
Nutanix Exam Professional Standards & Ethics 2
A Nutanix administrator discovers that a colleague is sharing customer cluster credentials via unencrypted email.
What is the most ethical course of action?