VMware VCP-NV: Network Virtualization Practice Exam

What the VMware VCP-NV exam covers

• Architecture and Technologies124 questions
• NSX Installation and Configuration120 questions
• NSX Switching and Routing131 questions
• NSX Security117 questions
• NSX Troubleshooting and Operations108 questions

Free VMware VCP-NV sample questions

A sample of 10 questions with answers and explanations. Sign up free to practice all 600.

1. Question 1Architecture and Technologies

   A senior network engineer at a logistics company is planning the deployment of NSX-T Data Center 3.2 across two vSphere clusters. She needs to understand which encapsulation protocol NSX-T uses for overlay traffic between Tunnel Endpoints (TEPs) on transport nodes. Which protocol does NSX-T rely on?

   • AGRE with per-flow entropy fields
   • BGeneve with a variable-length options headerCorrect
   • CVXLAN with a fixed 8-byte header
   • DSTT with TCP-based encapsulation
   ✓ Correct answer: B

   This question examines NSX network virtualization and micro-segmentation capabilities, which provide granular traffic control and security policies independent of physical network topology. Proper architectural design ensures scalability, maintainability, and alignment with business requirements. Implementation of network virtualization requires understanding overlay networks, logical switching, and the separation of network topology from physical infrastructure. This is a critical certification topic that directly impacts real-world vSphere deployment success and operational reliability.

   Why the other options are wrong

   • AGRE with per-flow entropy fields is incorrect because it does not align with VMware's recommended architecture or implementation best practices for this scenario
   • CVXLAN with a fixed 8-byte header is incorrect because it does not align with VMware's recommended architecture or implementation best practices for this scenario
   • DSTT with TCP-based encapsulation is incorrect because it does not align with VMware's recommended architecture or implementation best practices for this scenario
2. Question 2Architecture and Technologies

   What is the role of the NSX Manager in the NSX architecture?

   • AIt encapsulates overlay traffic using GENEVE
   • BIt acts as the distributed router on each host
   • CIt provides the management plane and policy API for NSXCorrect
   • DIt performs packet forwarding on hypervisor hosts
   ✓ Correct answer: C

   This question covers vSphere HA (High Availability), which provides automatic VM restart and cluster-level failure recovery through heartbeat monitoring and isolation response. High availability architecture ensures business continuity by automating recovery from infrastructure failures without manual intervention. Implementation of network virtualization requires understanding overlay networks, logical switching, and the separation of network topology from physical infrastructure. This is a critical certification topic that directly impacts real-world vSphere deployment success and operational reliability.

   Why the other options are wrong

   • AIt encapsulates overlay traffic using GENEVE is incorrect because it does not align with VMware's recommended architecture or implementation best practices for this scenario
   • BIt acts as the distributed router on each host is incorrect because it does not align with VMware's recommended architecture or implementation best practices for this scenario
   • DIt performs packet forwarding on hypervisor hosts is incorrect because it does not align with VMware's recommended architecture or implementation best practices for this scenario
3. Question 3Architecture and Technologies

   A virtualization engineer is evaluating the NSX-T Edge node deployment options for a mid-size company. The company has limited physical server resources. Which Edge node form factor is most appropriate for a proof-of-concept deployment with minimal resource requirements?

   • AMedium Edge VM
   • BSmall Edge VMCorrect
   • CLarge Edge VM
   • DBare-metal Edge
   ✓ Correct answer: B

   This question covers vSphere HA (High Availability), which provides automatic VM restart and cluster-level failure recovery through heartbeat monitoring and isolation response. High availability architecture ensures business continuity by automating recovery from infrastructure failures without manual intervention. Implementation of network virtualization requires understanding overlay networks, logical switching, and the separation of network topology from physical infrastructure. This is a critical certification topic that directly impacts real-world vSphere deployment success and operational reliability.

   Why the other options are wrong

   • AMedium Edge VM is incorrect because it does not align with VMware's recommended architecture or implementation best practices for this scenario
   • CLarge Edge VM is incorrect because it does not align with VMware's recommended architecture or implementation best practices for this scenario
   • DBare-metal Edge is incorrect because it does not align with VMware's recommended architecture or implementation best practices for this scenario
4. Question 4NSX Installation and Configuration

   A network administrator has deployed a three-node NSX Manager cluster and wants to provide a single access point for API and UI access. Which approach is recommended for providing a virtual IP for the NSX Manager cluster?

   • AAssign the same IP address to all three NSX Manager nodes
   • BDeploy a separate hardware load balancer that is mandatory for cluster operation
   • CConfigure the NSX Manager cluster VIP through the NSX Manager UI or APICorrect
   • DUse DNS round-robin, as NSX Manager does not support a cluster VIP
   ✓ Correct answer: C

   This question covers vSphere HA (High Availability), which provides automatic VM restart and cluster-level failure recovery through heartbeat monitoring and isolation response. High availability architecture ensures business continuity by automating recovery from infrastructure failures without manual intervention. Implementation of network virtualization requires understanding overlay networks, logical switching, and the separation of network topology from physical infrastructure. This is a critical certification topic that directly impacts real-world vSphere deployment success and operational reliability.

   Why the other options are wrong

   • AAssign the same IP address to all three NSX Manager nodes is incorrect because it does not align with VMware's recommended architecture or implementation best practices for this scenario
   • BDeploy a separate hardware load balancer that is mandatory for cluster operation is incorrect because it does not align with VMware's recommended architecture or implementation best practices for this scenario
   • DUse DNS round-robin, as NSX Manager does not support a cluster VIP is incorrect because it does not align with VMware's recommended architecture or implementation best practices for this scenario
5. Question 5NSX Switching and Routing

   What is the maximum MTU recommended for the physical network to support NSX-T GENEVE overlay traffic?

   • A4096 bytes
   • B9000 bytes
   • C1500 bytes
   • D1600 bytes (minimum 1600)Correct
   ✓ Correct answer: D

   This question covers vSphere HA (High Availability), which provides automatic VM restart and cluster-level failure recovery through heartbeat monitoring and isolation response. High availability architecture ensures business continuity by automating recovery from infrastructure failures without manual intervention. Implementation of network virtualization requires understanding overlay networks, logical switching, and the separation of network topology from physical infrastructure. This is a critical certification topic that directly impacts real-world vSphere deployment success and operational reliability.

   Why the other options are wrong

   • A4096 bytes is incorrect because it does not align with VMware's recommended architecture or implementation best practices for this scenario
   • B9000 bytes is incorrect because it does not align with VMware's recommended architecture or implementation best practices for this scenario
   • C1500 bytes is incorrect because it does not align with VMware's recommended architecture or implementation best practices for this scenario
6. Question 6NSX Security

   What is the Applied To field in an NSX DFW rule used for?

   • ASetting the VLAN ID for the traffic matching the rule
   • BDefining the source IP address of the rule
   • CChoosing the logging server for firewall events
   • DSpecifying which transport nodes or groups should have the rule programmed on their DFW, limiting the rule's scopeCorrect
   ✓ Correct answer: D

   This question covers vSphere HA (High Availability), which provides automatic VM restart and cluster-level failure recovery through heartbeat monitoring and isolation response. High availability architecture ensures business continuity by automating recovery from infrastructure failures without manual intervention. Implementation of network virtualization requires understanding overlay networks, logical switching, and the separation of network topology from physical infrastructure. This is a critical certification topic that directly impacts real-world vSphere deployment success and operational reliability.

   Why the other options are wrong

   • ASetting the VLAN ID for the traffic matching the rule is incorrect because it does not align with VMware's recommended architecture or implementation best practices for this scenario
   • BDefining the source IP address of the rule is incorrect because it does not align with VMware's recommended architecture or implementation best practices for this scenario
   • CChoosing the logging server for firewall events is incorrect because it does not align with VMware's recommended architecture or implementation best practices for this scenario
7. Question 7NSX Troubleshooting and Operations

   You notice that a DFW rule is not being applied to a specific VM. What should you check first?

   • Acheck the VM's display resolution settings
   • Bcheck if the VM has enough CPU allocated
   • CVerify that the VM is included in the correct NSX Group used as the source or destination in the ruleCorrect
   • DVerify the VM's disk space usage
   ✓ Correct answer: C

   This question covers vSphere HA (High Availability), which provides automatic VM restart and cluster-level failure recovery through heartbeat monitoring and isolation response. High availability architecture ensures business continuity by automating recovery from infrastructure failures without manual intervention. Successful implementation requires careful consideration of your specific infrastructure requirements and operational procedures. This is a critical certification topic that directly impacts real-world vSphere deployment success and operational reliability.

   Why the other options are wrong

   • Acheck the VM's display resolution settings is incorrect because it does not align with VMware's recommended architecture or implementation best practices for this scenario
   • Bcheck if the VM has enough CPU allocated is incorrect because it does not align with VMware's recommended architecture or implementation best practices for this scenario
   • DVerify the VM's disk space usage is incorrect because it does not align with VMware's recommended architecture or implementation best practices for this scenario
8. Question 8Architecture and Technologies

   During troubleshooting, an engineer needs to identify which component runs on each ESXi transport node to receive runtime state from the CCP and program the local data plane. Which component is this?

   • AThe Local Control Plane (LCP), which runs on each transport node and programs the data plane with state received from the CCPCorrect
   • BThe Central Control Plane (CCP), which is installed locally on each ESXi host
   • CThe CORFU datastore, which runs on each ESXi host to persist host configuration
   • DThe NSX Policy role, which is pushed to each host to reconcile declarative intent locally
   ✓ Correct answer: A

   This question tests knowledge of vSphere architecture and core operational concepts. Proper architectural design ensures scalability, maintainability, and alignment with business requirements. Successful implementation requires careful consideration of your specific infrastructure requirements and operational procedures. This is a critical certification topic that directly impacts real-world vSphere deployment success and operational reliability.

   Why the other options are wrong

   • BThe Central Control Plane (CCP), which is installed locally on each ESXi host is incorrect because it does not align with VMware's recommended architecture or implementation best practices for this scenario
   • CThe CORFU datastore, which runs on each ESXi host to persist host configuration is incorrect because it does not align with VMware's recommended architecture or implementation best practices for this scenario
   • DThe NSX Policy role, which is pushed to each host to reconcile declarative intent locally is incorrect because it does not align with VMware's recommended architecture or implementation best practices for this scenario
9. Question 9NSX Installation and ConfigurationSelect all that apply

   An administrator is configuring NAT route redistribution so SNAT/DNAT addresses on Tier-1 gateways are advertised out to the physical fabric via BGP on the Tier-0. Which two configuration actions are required end to end? (Choose two.)

   • AEnable 'Advertise All NAT IP's' under route advertisement on the Tier-1 gatewayCorrect
   • BConfigure the Tier-0 route redistribution to include the Tier-1 NAT IP source type and apply it to the BGP advertisementCorrect
   • CCreate a DHCP relay profile on the Tier-0 uplink
   • DDisable the Service Router on the Tier-1 gateway so NAT runs distributed
   ✓ Correct answer: A, B

   Configure the Tier-0 route redistribution to include the Tier-1 NAT IP source type and apply it to the BGP advertisement This question tests knowledge of vSphere architecture and core operational concepts. Understanding this concept is essential for effective vSphere management and optimization. Successful implementation requires careful consideration of your specific infrastructure requirements and operational procedures. This is a critical certification topic that directly impacts real-world vSphere deployment success and operational reliability.

   Why the other options are wrong

   • CCreate a DHCP relay profile on the Tier-0 uplink is incorrect because it does not align with VMware's recommended architecture or implementation best practices for this scenario
   • DDisable the Service Router on the Tier-1 gateway so NAT runs distributed is incorrect because it does not align with VMware's recommended architecture or implementation best practices for this scenario
10. Question 10NSX Security

    A security analyst reports that a newly created DFW deny rule for SSH between two groups is not taking effect, even though both VMs are powered on and tagged correctly. The Applied To is set to DFW. Which check is the MOST likely root cause to verify first?

    • AWhether one of the VMs is on the DFW Exclusion List, which would bypass all DFW enforcement on that vNICCorrect
    • BWhether the physical top-of-rack switch ACL is blocking SSH before the DFW sees it
    • CWhether the NSX Manager VIP is reachable from the analyst's workstation
    • DWhether the Tier-0 gateway has a BGP route to the SSH destination
    ✓ Correct answer: A

    This question covers vSphere HA (High Availability), which provides automatic VM restart and cluster-level failure recovery through heartbeat monitoring and isolation response. Security architecture is critical for protecting sensitive workloads, particularly in regulated industries requiring data protection standards and secure access controls. Successful implementation requires careful consideration of your specific infrastructure requirements and operational procedures. This is a critical certification topic that directly impacts real-world vSphere deployment success and operational reliability.

    Why the other options are wrong

    • BWhether the physical top-of-rack switch ACL is blocking SSH before the DFW sees it is incorrect because it does not align with VMware's recommended architecture or implementation best practices for this scenario
    • CWhether the NSX Manager VIP is reachable from the analyst's workstation is incorrect because it does not align with VMware's recommended architecture or implementation best practices for this scenario
    • DWhether the Tier-0 gateway has a BGP route to the SSH destination is incorrect because it does not align with VMware's recommended architecture or implementation best practices for this scenario

VMware VCP-NV practice exam FAQ