A VM is protected by a protection policy and the volume group is configured with...

For CHAP-protected volume groups, Nutanix documentation is explicit that when the target password is changed, the administrator must also update the associated recovery plan. Nutanix states that if the new target password is not updated in the recovery plan, it is not retained after failover. That makes the recovery plan the place where the failover-side credential continuity is preserved. In other words, protection policies create and replicate recovery points, but the recovery plan contains the information needed for the recovered application workflow, including CHAP details needed after recovery. ( Nutanix Portal )

This is an important exam distinction: protection policy controls snapshot and replication behavior, while recovery plan controls recovery orchestration and the settings needed when workloads are actually brought online at the target site. Recovery points themselves are snapshots of protected entities; they are not the administrative mechanism Nutanix documents for persisting an updated CHAP target password through failover. So even though the uploaded file says option D, the official Nutanix guidance supports A. For failover success with CHAP-enabled VGs, always synchronize password changes with the recovery plan. ( Nutanix Portal )