VMware Certified Professional - Network Virtualization Intermediate Practice Exam: Medium Difficulty 2025

An organization is deploying NSX-T in a multi-cluster vSphere environment. They want to minimize management overhead and ensure consistent policy enforcement across clusters while still allowing separate failure domains. Which NSX-T design best meets this requirement?

You are planning the NSX-T Management Plane for a production environment. The business requires that NSX management remains available during a single host failure and that API/UI access continues without manual intervention. Which deployment approach best satisfies this requirement?

A tenant has workloads on two NSX overlay segments connected to the same Tier-1 Gateway. They report intermittent connectivity issues only between workloads on different segments during peak traffic. You suspect oversubscription and want to validate whether the overlay is fragmenting or dropping due to MTU. Which action is the most appropriate first step?

A company needs east-west routing between multiple application segments and wants the default gateway for each segment to be distributed across the ESXi hosts for optimal throughput. North-south traffic should exit via centralized services. Which NSX-T configuration best matches these requirements?

You must provide connectivity from NSX overlay segments to an external physical network. The physical team requires BGP for dynamic routing and wants equal-cost paths across two upstream routers. Which approach is most appropriate?

A security team wants to implement micro-segmentation so that only HTTPS is allowed from a web tier to an app tier, and only SQL is allowed from the app tier to a database tier. They also want to avoid managing IP addresses and ensure policies follow VMs if they move. Which NSX-T capability best addresses this requirement?

A business unit requires that traffic between two application segments be inspected by a third-party NGFW service VM. The security team wants a scalable design and to steer only selected flows for inspection without changing IP addressing. Which NSX-T feature is best suited for this use case?

A tenant needs to publish a web application to the internet. Requirements include TLS termination, virtual IP (VIP) load balancing across multiple backend VMs, and the ability to scale out pool members easily. Which NSX-T service best meets these requirements?

After deploying NSX-T overlay networking, some VMs on a specific ESXi host cannot communicate with VMs on other hosts, but VMs on that host can communicate with each other. Other hosts are unaffected. Which is the most likely cause?

A team reports that a newly created DFW rule to allow DNS (UDP/53) from an app group to a shared DNS group is not taking effect. The rule is published, but traffic is still denied. Which verification step is most appropriate to identify the issue quickly?