NVIDIA AI Infrastructure NCP-AII Question # 36 Topic 4 Discussion
NCP-AII Exam Topic 4 Question 36 Discussion:
Question #: 36
Topic #: 4
A systems administrator is preparing a new DGX server for deployment. What is the most secure approach to configuring the BMC port during initial setup?
A.
Enable remote access to the BMC over the internet using the default admin credentials for initial troubleshooting.
B.
Connect the BMC port directly to the production network and retain default admin credentials for convenience.
C.
Leave the BMC port disconnected until after the operating system is fully configured and in production.
D.
Connect the BMC port to a dedicated and firewalled network and change the default admin credentials.
The Baseboard Management Controller (BMC) is a powerful tool that allows for total control over the DGX system, including the ability to flash firmware, cycle power, and access the serial console. Because of this, it is a high-value target for security threats. The " 100% verified " secure approach (Option D) involves two critical layers:
Network Isolation: The BMC port should never be exposed to the public internet (Option A) or even the general production network (Option B). It must reside on a dedicated Out-of-Band (OOB) network that is firewalled and accessible only to authorized administrators.
Credential Management: Standard NVIDIA factory defaults (like admin/admin) must be changed immediately upon first access. As part of the DGX first-boot wizard, the system prompts the administrator to create a strong, unique password for the primary user, which is then synchronized to the BMC.
Leaving the port disconnected (Option C) is unfeasible for modern data center operations, as the BMC is required for remote monitoring and " headless " deployment. Following the isolated/firewalled approach ensures the AI Factory remains resilient against both external attacks and internal lateral movement.
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit