VMware Certified Advanced Professional - Network Virtualization Deploy Intermediate Practice Exam: Medium Difficulty 2025

An organization is deploying NSX-T in their environment and needs to ensure that overlay network traffic between transport nodes is properly encapsulated. The network team wants to understand the default encapsulation protocol and its operational requirements. Which statement accurately describes the default overlay encapsulation in NSX-T?

A network administrator is configuring NSX-T Edge nodes for a multi-tier application deployment. The application requires both North-South traffic routing to external networks and East-West traffic optimization between application tiers. What is the most appropriate deployment configuration for the Edge nodes?

A company is implementing micro-segmentation for their three-tier application. The web tier needs to communicate with the app tier on TCP port 8080, and the app tier needs to communicate with the database tier on TCP port 3306. No other traffic should be allowed between tiers. Where should the administrator create the firewall rules to enforce this security policy most effectively?

An administrator notices that VMs on different overlay segments within the same NSX-T environment cannot communicate with each other. The segments are connected to a Tier-1 gateway, which is linked to a Tier-0 gateway. What is the most likely cause of this communication failure?

A network administrator is designing an NSX-T infrastructure to support a multi-tenant environment where each tenant requires complete network isolation. Each tenant needs their own routing domain with potential for overlapping IP addresses. Which NSX-T feature should be implemented to meet these requirements?

An organization needs to implement source NAT (SNAT) for outbound internet access from their private overlay networks. The security team requires that all outbound connections from a specific application segment use a dedicated public IP address for audit and compliance purposes. Where should the administrator configure this SNAT rule?

During a security audit, an administrator needs to implement IDS/IPS for East-West traffic inspection in their NSX-T environment. The security team wants to detect lateral movement threats between application tiers. What is the correct approach to enable this capability?

A company is experiencing intermittent connectivity issues between VMs on overlay segments and physical servers on VLAN-backed networks. The network administrator needs to verify that the Edge nodes can properly communicate with the physical network. Which troubleshooting approach should be used first?

An administrator needs to implement load balancing for a web application with SSL termination at the load balancer. The application has three web servers that need health monitoring and session persistence based on source IP address. Which NSX-T component and configuration should be used?

After deploying NSX-T in a vSphere environment, an administrator notices that some ESXi hosts are not appearing as transport nodes. The hosts are managed by vCenter Server, which is integrated with NSX-T Manager. What should the administrator verify to resolve this issue?