VMware Certified Advanced Professional - Network Virtualization Design Intermediate Practice Exam: Medium Difficulty 2025

An enterprise is designing NSX for three sites (prod, DR, and a dev/test site). The business requires consistent security policy intent across all sites, but allows different physical networking implementations per site. Which design approach best aligns with a structured design methodology while reducing rework during implementation?

During an NSX design workshop, stakeholders request micro-segmentation for a multi-tier application but cannot provide an accurate, complete list of east-west flows. The team must deliver a design that is implementable with minimal disruption. What is the most appropriate next step in the design?

A design must support rapid provisioning of new application environments where IP addresses may change across deployments, but security policy must remain consistent. The team also wants to minimize rule sprawl. Which NSX security design choice best meets these requirements?

A customer requires an auditable separation of duties: network administrators must manage routing and switching, while security administrators manage micro-segmentation rules. The design must support clear governance without creating duplicate policies. What NSX design recommendation best satisfies this requirement?

An organization is designing NSX overlay networking with Tier-0/Tier-1 gateways. They must ensure predictable north-south routing and support future expansion to additional edge nodes for scale. Which design decision best supports these goals?

A service provider hosts multiple tenants on a shared compute cluster. Tenants require overlapping IP address ranges and isolated L2/L3 connectivity. The provider also wants to keep the physical network simple and avoid extending VLANs per tenant. Which NSX design best addresses this requirement?

A customer plans to deploy NSX and expects large amounts of east-west traffic between application tiers on the same hosts. They want to minimize latency while maintaining granular control. Which NSX component placement and feature use is most appropriate in the design?

A regulated environment requires that only approved management stations can access NSX management components, and that management plane access is segregated from tenant/workload networks. Which design is most appropriate?

NSX is being integrated with an existing routing domain. The physical network team requires that virtual networks advertise only summarized routes to the physical core to limit route table growth, while application teams still want granular internal segmentation. What is the best design approach?

After deploying NSX, a subset of VMs on one cluster cannot reach external networks, while VMs on other clusters can. The underlay is confirmed healthy. The design calls for consistent host prep and transport node configuration across clusters. Which design-time control would most effectively prevent this class of issue and simplify troubleshooting?