VMware Certified Advanced Professional - Network Virtualization Deploy Practice Exam: Test Your Knowledge 2025

An administrator is designing an NSX-T Data Center deployment for a large enterprise with multiple data centers. The organization requires the ability to extend Layer 2 networks across sites and maintain a single management plane. Which NSX-T component should be deployed to meet this requirement?

During an NSX-T installation, an administrator needs to configure the data plane networking for overlay traffic between hypervisors. Which profile must be configured on the Transport Nodes to enable this functionality?

A company has deployed NSX-T in their environment. The network team reports that the NSX-T Manager cluster is experiencing issues, and they need to understand which node is currently the cluster coordinator. Which CLI command should be used to determine the cluster coordinator?

An organization wants to prepare their ESXi hosts for NSX-T overlay networking. What is the minimum MTU size that should be configured on the physical network to support GENEVE encapsulation without fragmentation?

A network administrator has created multiple logical switches in NSX-T and needs to enable routing between them. An application tier requires dynamic routing to learn about networks advertised by an external physical router. Which NSX-T routing component should be configured to meet this requirement?

An administrator needs to configure a Tier-1 Gateway to provide connectivity for virtual machines on multiple segments. The Tier-1 Gateway must be connected to a Tier-0 Gateway for north-south traffic. After connecting the Tier-1 to Tier-0, VMs cannot communicate with external networks. What is the most likely cause of this issue?

A company is designing their NSX-T logical network topology. They have a requirement for multiple tenants where each tenant needs complete isolation at the routing level with separate routing tables. Which NSX-T architecture should be implemented?

An administrator notices that MAC addresses are not being learned on an NSX-T segment, causing unknown unicast flooding. What is the default MAC learning behavior on NSX-T segments?

A network architect is designing the Edge transport node deployment for NSX-T. The organization requires active-active load balancing for north-south traffic with sub-second failover times. Which Tier-0 Gateway high availability mode should be configured?

An administrator has configured a Tier-1 Gateway with multiple segments for different application tiers. The web tier needs to communicate with the app tier, but connectivity is failing. Both segments are connected to the same Tier-1 Gateway. What is the default routing behavior that explains this?

A security team needs to implement micro-segmentation for a multi-tier application deployed in NSX-T. They want to create security policies that follow the virtual machines regardless of their network location. Which NSX-T security feature should be implemented?

An organization needs to implement a security policy where database servers can only be accessed by application servers on specific ports, and only during business hours. Which distributed firewall rule configuration approach best meets this requirement?

A company has implemented NSX-T Distributed Firewall rules for their production environment. During troubleshooting, an administrator needs to verify which specific firewall rule is allowing or blocking traffic between two virtual machines. Which NSX-T feature should be used?

An organization wants to publish internal web applications to external users with SSL offloading and content switching based on URL paths. Which NSX-T component should be configured to meet these requirements?

A security architect is designing a zero-trust security model using NSX-T. They need to ensure that security policies are enforced even for lateral traffic between VMs on the same segment. Which statement accurately describes how NSX-T achieves this?

An administrator needs to configure source NAT (SNAT) for outbound traffic from internal VMs through a Tier-1 Gateway. After configuration, the VMs still cannot reach external networks. What is the most likely missing configuration?

A company implements NSX-T Distributed IDS/IPS for threat detection. They want to detect malicious traffic patterns but initially prefer to monitor threats without blocking traffic. Which IDS/IPS mode should be configured during the initial deployment phase?

An administrator is troubleshooting connectivity issues in an NSX-T environment. VMs on overlay segments cannot communicate, but the physical underlay network is functioning correctly. Which command-line tool should be used from the NSX-T Edge node to verify overlay connectivity between transport nodes?

A company is integrating NSX-T with vRealize Log Insight for centralized logging and monitoring. After configuration, firewall events are not appearing in vRealize Log Insight. What is the most likely cause?

An organization has deployed NSX-T in their vSphere environment. After a vCenter Server certificate renewal, the NSX-T Manager can no longer communicate with vCenter. The administrator verifies that vCenter is accessible and functioning properly. What is the most appropriate action to resolve this issue?