VCTA-NV practice questions
Broadcom · VCTA-NV · 300 questions
This practice test covers the VMware Certified Technical Associate – Network Virtualization (VCTA-NV) certification exam. Test your knowledge across all domains and topics outlined in the official exam guide.
This course contains the use of artificial intelligence.
About the VCTA-NV exam
This exam has been retired and can no longer be taken by new candidates. The questions below remain useful as subject-matter practice.
- Format
- Retired - no longer attainable by new candidates
Exam details published by the vendor, checked 25 August 2026. Vendors change fees and formats without notice — confirm on the vendor's own page before you book.
Practice Quizzes
Test your knowledge with standard 20-question practice sets.
Quiz 1
Quiz 2
Quiz 3
Quiz 4
Quiz 5
Quiz 6
Quiz 7
Quiz 8
Quiz 9
Quiz 10
Quiz 11
Quiz 12
Quiz 13
Quiz 14
Quiz 15
Browse by Domain
Study specific topics at your own pace.
Architecture and Technologies · 100 questions
- Harborview's city CIO tells council that the next civic data center should treat compute, storage, and networking as software rather than as three separately ordered hardware silos. What software-defined data center (SDDC) concept is the CIO describing?
- County finance proposes buying only more ESXi hosts and leaving storage and networking as dedicated hardware. Why is that purchase not yet a software-defined data center (SDDC)?
- Public-works leadership wants new virtual networks created the same way the city already clones VMs: by request, in minutes, without recabling a closet. Which SDDC idea does that request describe?
- A township clerk says the city already has a software-defined data center because email was moved to a SaaS vendor. What distinction should the candidate draw?
- Municipal GIS administrators hear that NSX reproduces switching, routing, and firewalling in software. Which SDDC concept are they identifying?
- City council wants isolated agency networks assembled in seconds on shared hypervisor hosts. Which SDDC outcome should the operator identify?
- A county architect lists vSphere, vSAN, and NSX-T Data Center as the VMware software-defined data center stack. How do those products map to the SDDC pillars?
- Parks-and-recreation IT claims the city already has an SDDC because a few file servers were virtualized years ago. What distinction should the candidate identify?
- Utility-billing operators want “who can talk to whom” policies to travel with workloads when VMs move between racks. Which SDDC trait should they identify?
- The municipal airport IT board asks whether a software-defined data center still needs physical switches. What should the candidate identify?
- A city change-advisory board thinks an SDDC means operators never use switching or routing concepts again. What should the candidate identify?
- County health wants to scale network isolation for clinic VMs without buying a larger chassis switch. Which SDDC concept does that requirement illustrate?
- Library consortium leadership asks what “resource pooling” means in an SDDC briefing. What should the candidate identify?
- A municipal court project wants a repeatable blueprint of a segment, gateway, and firewall policy instead of a unique physical design each time. Which SDDC concept is that request?
- Transit IT compares a ticket-driven VLAN request that takes weeks with a segment created from the NSX UI or API in minutes. Which core SDDC concept does that contrast identify?
- City finance asks whether an SDDC is only a cost-cut from buying fewer switches. What else should the candidate identify as part of the SDDC idea?
- Wastewater SCADA owners fear that an SDDC means plant traffic shares a broadcast domain with 311 web VMs on the same hosts. Which SDDC isolation concept should they identify?
- A county disaster-recovery drill needs to recreate agency networks at the backup site without cloning the production physical switch configuration. Which SDDC capability should the candidate identify?
- Building-permits IT hears the phrase “network hypervisor” in an SDDC briefing. What analogy should the candidate identify?
- City HR asks whether running Kubernetes for a few civic apps is, by itself, a software-defined data center. What should the candidate identify?
- Municipal 311 developers want self-service virtual network constructs for a test environment without waiting on the core-switch team. Which SDDC capability should they identify?
- A port-authority briefing lists management, control, and data planes as how NSX-T implements the software data center network. Which SDDC architecture concept should the candidate identify?
- County assessor IT wants to refresh top-of-rack switches without redesigning every agency VLAN. Which SDDC idea should the candidate identify?
- City auditors ask what still lives on physical hardware in an on-premises software-defined data center. What should the candidate identify?
- Emergency-operations wants security groups that follow VMs when those VMs move between clusters. Which SDDC network-virtualization concept should the candidate identify?
- A housing-authority project manager says the city's software-defined data center is complete because vSAN is in production. What is missing from that definition?
- Municipal elections IT virtualizes the network in the city's SDDC and asks whether east-west and north-south traffic still apply. What should the operator identify?
- City architects want new agency apps assembled from a catalog of segments, Tier-1 gateways, and distributed firewall rules instead of a unique physical bill of materials each time. Which SDDC idea is that?
- The county clerk asks whether a virtual network can be created, changed, and deleted the way the city already lifecycle-manages VMs. What should the operator identify?
- A county-run municipal hospital needs a new clinic subnet this week and cannot wait for a forklift of extra switches. Which SDDC concept covers adding that capacity from the existing pool?
- Public-safety radio-shop IT is told vCenter Server is the compute manager in the city's SDDC. What role does that identify?
- City innovation staff ask whether moving to an SDDC means the city can retire firewalls. What should the operator identify?
- A township must isolate finance VMs from public-web VMs for compliance, but both must stay on the same hypervisor cluster. Which SDDC capability is that?
- Municipal fleet-management IT asks what actually defines the logical data center in an SDDC: the cabling diagrams or the software. What should the operator identify?
- The city's core VLAN numbering is exhausted, blocking new permit-system environments. Which traditional challenge does virtual networking address?
- County web and app VMs on the same cluster send east-west traffic to a hardware firewall in another building and back. Which traditional challenge is that, and how does virtual networking address it?
- A new library-branch application waited six weeks for a VLAN and ACL change window. Which traditional challenge does virtual networking shorten?
- Transit automatic vehicle location servers cannot move to a new rack without changing subnets because each rack owns its VLANs. Which traditional challenge is that?
- Municipal court security is only a perimeter firewall, so two case-management VMs on the same VLAN have no east-west control. Which traditional gap is that?
- Water-plant IT keeps a duplicate physical switch stack per agency for isolation. Which traditional pattern does virtual networking replace?
- City Wi-Fi for guest, staff, and IoT each required more VLANs trunked to every access layer, and the same pattern is spreading in the data center. Which traditional challenge do overlays reduce there?
- A 311 application's broadcast domain is the entire VLAN spanning two civic buildings, so a noisy VM affects both. Which traditional issue is that?
- County GIS multi-tier VMs sit in one VLAN because routing and firewall tickets are too slow. Which traditional challenge is that?
- A new city API gateway is delayed because the hardware firewall's licensed feature set does not include the needed function. Which traditional challenge do software-defined network services address?
- The city's physical core is oversubscribed by east-west VM traffic that never needed to leave the rack. Which traditional challenge is that?
- Every utility-billing ACL is a manual IP line on a hardware firewall with no link to VM identity. Which traditional challenge is that?
- City disaster-recovery tests fail because stretching Layer 2 across sites on the physical network is fragile. Which traditional challenge should the operator identify?
- Capacity planning is per VLAN on chassis modules, so a small permitting application still burns a whole VLAN. Which traditional challenge is that?
- Public-safety computer-aided dispatch VMs cannot vMotion to a new cluster because the destination has no matching VLAN. Which traditional challenge is that?
- A hardware load-balancer lead time is delaying publication of the motor-vehicle portal. Which traditional challenge is that, and what identify-level alternative does virtual networking offer?
- Parks-and-recreation cutover took the civic VLAN down when spanning tree reconverged on the physical fabric. How does overlay virtual networking address that traditional Layer-2 challenge?
- During a city-festival webcam burst, top-of-rack MAC tables overflowed on a stretched civic VLAN. Which virtual-networking property addresses that traditional scale limit?
- Harborview still applies firewall policy as whatever jack the VM is plugged into. Which virtual-networking model replaces that traditional location-based security?
- Animal-services needed a new subnet, and the ticket required changes on access, distribution, core, and the hardware firewall. How does virtual networking address that multi-touch physical change?
- Utility IoT meters and the city ERP share one flat VLAN because that is what the county already had. Which virtual-networking approach addresses that traditional flat-network risk?
- Physical change control forbids Friday VLAN adds, which blocked a weekend 311-portal launch. How does software-defined networking address that change-window coupling?
- Permitting developers were told the application tiers must match the three-tier chassis layout in the civic hall. How does virtual networking address physical topology dictating application topology?
- Most Harborview VM traffic is east-west, yet the city's security budget is spent only on north-south hardware at the edge. Which virtual-networking capability addresses that mismatch?
- Two wastewater VMs on the same ESXi host exchange packets that never leave the hypervisor, so the hardware firewall never sees them. Which virtual-networking capability closes that traditional gap?
- After a bad ACL, the county cannot snapshot or roll back the physical VLAN fabric the way it rolls back a VM. Which virtual-networking property addresses that missing software lifecycle?
- Adding a vendor-partner DMZ for the permitting contractor was quoted as a new physical firewall pair. How does virtual networking address extra hardware per security zone?
- Courts still treat IP subnet, VLAN, and security zone as the same object, so a two-VM evidence app burns a whole subnet. Which virtual-networking approach loosens that rigid coupling?
- Public-works staff assume an NSX-T overlay removes the need for a physical IP fabric. What does virtual networking actually solve versus what the underlay must still provide?
- A vendor asked the library for a unique physical QoS queue on every ToR for each civic application. How does software-defined networking reduce that hardware-queue sprawl?
- Permitting developers wait on the physical-network team for every test network, which stalled the rewrite. How does virtual networking address that organizational bottleneck?
- The hardware firewall sits several racks from the GIS hosts, so east-west inspection trombones and adds latency. Which virtual-networking design addresses that inspection-path problem?
- The housing authority wants its own logical router, but the traditional design requires a dedicated hardware router per tenant. Which virtual-networking model addresses that constraint?
- City network staff are labeling the new NSX-T fabric and debate which layer is overlay versus underlay. Which identification is correct?
- A municipal engineer asks which encapsulation NSX-T uses for overlay traffic. Which protocol should the operator identify?
- County ESXi hosts must encapsulate and decapsulate overlay frames for wastewater VMs. Which SDN building block performs that function?
- Harborview operations need the SDN plane that stores user configuration and hosts the NSX UI and API. Which plane is that?
- A city architecture slide labels the plane that computes runtime state from desired configuration and pushes forwarding config. Which SDN plane is that?
- Wastewater VM packets are forwarded by tables that sit on the prepared host. Which SDN plane performs that forwarding?
- The municipal NSX deployment uses a cluster of three appliances that host the UI, API, and central control. Which SDN building block is that cluster?
- A civic fabric slide names an ESXi host that has been prepared to participate in NSX overlay networking. Which building block is that host?
- Library catalog VMs sit on two different ESXi clusters and must share one NSX segment. Which SDN building block sets the maximum span of that segment?
- City architecture slides split NSX-T control into a piece that lives on the Manager cluster and a piece that lives on every prepared host. Which pair of SDN building blocks is that?
- Municipal ESXi hosts must carry overlay traffic for agency VMs. Which host-switch building block does NSX-T use for that overlay and NSX VLAN traffic?
- The city's 311 portal needs NAT and other north-south services that cannot run only as in-kernel tables on every ESXi host. Which SDN building block provides those centralized services?
- Permit-system VMs need a shared logical Layer 2 broadcast domain even when they sit in different racks. Which SDN building block provides that virtual switching?
- A city packet walk shows guest Ethernet frames carried inside IP packets between prepared hosts. Which SDN overlay building block is that?
- Municipal operators used to log into every top-of-rack switch and type unique CLI. The city now wants desired network state stored once and pushed to the fabric. Which SDN building block replaces device-by-device CLI?
- Forwarding engines on prepared city hosts receive stateless forwarding tables from NSX. Which SDN path is that dissemination?
- City automation staff want a programmatic northbound interface so 311 environments can request virtual networks the same way they already request VMs. Which SDN building block is that interface?
- Each prepared municipal hypervisor needs an IP used only as a tunnel endpoint, typically on a dedicated underlay VLAN. Which overlay building blocks are those?
- The municipal innovation loft runs mixed ESXi and KVM hosts on one NSX-T fabric. On the KVM hosts, which virtual-switch building block does NSX-T use?
- Prepared wastewater hosts do not only consume forwarding tables; they also send topology and packet statistics back up the stack. Which SDN-plane behavior is that?
- City council staff think SDN means buying a larger physical chassis for the civic data center. Which description of SDN building blocks is correct?
- Library segments must be connected to each other in software, and the civic fabric must eventually reach the outside world. Which SDN building block does that connecting?
- Host uplinks into the NSX fabric for the permitting cluster need one policy for teaming, MTU, and the transport VLAN. Which SDN building block is that policy?
- In vCenter, a library VM's network appears as an nsx.LogicalSwitch opaque network. What does that SDN building block mean?
- Traffic from the civic Tier-0 toward the city's ISP is not an NSX-managed overlay. Which building-block contrast is correct?
- NSX must see city clusters and VMs so operators can attach segments and build groups. Which SDN building block is registered as that inventory source?
- The city design shows two transport-zone types on the same NSX-T fabric. How do those SDN span constructs differ?
- Two Edge VMs should share settings and provide high availability for city NAT. Which SDN building block groups them?
- A court VM's vNIC must attach to the virtual Layer 2 network. Which SDN attachment building block is that?
- Every prepared transport node still runs a management-plane agent, not only forwarding. Which three-plane implementation is correct for the civic fabric?
- Geneve encapsulation adds header bytes to every overlay frame on the municipal underlay. What implication should operators identify?
- A city host diagram labels both a physical server interface and a guest interface on a permitting VM. Which identification is correct?
- At a logical port for a court VM, NSX uses specific direction terms. Which official identification is correct?
Products and Solutions · 100 questions
- Harborview still carries a leftover management NIC on a virtual switch that is configured only on that ESXi host and is not shared through vCenter. Which vSphere networking construct is that?
- A county cluster of 12 ESXi hosts must use the same port-group names and VLAN IDs without operators editing a switch on each host. Which vSphere networking construct provides that centralized configuration?
- Permit-system virtual machines attach to a named vSphere network tagged VLAN 210. What is that attachment point?
- GIS mapping virtual machines must vMotion between county hosts. Which vSphere networking object carries that host service, rather than guest application traffic?
- Each library ESXi host binds two physical NICs on the VDS so one uplink can fail without dropping catalog-VM traffic. Which vSphere networking concept is that?
- City operators tag VLAN 40 on a VDS port group and treat that as identical to an NSX overlay segment. How should those two constructs be distinguished?
- A municipal top-of-rack switch delivers many VM port-group VLANs to the cluster on one physical uplink. Which vSphere and physical attachment model is that?
- Court-recording staff want a packet-capture virtual machine to see every frame on its port group, not only frames addressed to that virtual machine. Which vSphere networking setting is that request?
- The county sets the VDS MTU to 9000 so vSAN and later NSX tunnel endpoints can carry large frames without fragmentation. Which vSphere networking concept is that setting?
- A township utility virtual machine cannot ping its gateway even though the ESXi host is powered on and healthy. Operators find the virtual machine attached to the wrong vSphere network. What determines that virtual machine's Layer-2 attachment?
- Harborview keeps ESXi management on its own VLAN port group and keeps virtual-machine traffic on different port groups. Which vSphere networking concept is that separation?
- After NSX-T is introduced, the city's vSphere Distributed Switch appears as the host switch that carries overlay traffic. How should an associate identify that relationship?
- A city request for proposal asks which VMware product supplies the SDDC compute pillar—the hypervisor platform that runs municipal virtual machines. Which product is that?
- Wastewater operations wants shared storage for the municipal cluster from host disks so the county can skip buying a new SAN. Which VMware SDDC product is that storage pillar?
- Public-works wants overlay segments, a distributed firewall, and logical routing in the civic SDDC. Which VMware product is that network-virtualization pillar?
- Municipal operators want one VMware product that centrally manages ESXi hosts and virtual machines for the civic SDDC. Which product is that?
- A city architecture slide stacks the VMware compute, storage, and network products that form an SDDC. Which set is that?
- A vendor proposes VMware Horizon as the city's SDDC network-virtualization pillar. Why is that the wrong product family?
- A security reseller lists Carbon Black as the VMware product that virtualizes the city network. Which correction should the candidate make?
- Automation staff want to treat VMware Aria or vRealize as the required SDDC network product so the city can skip NSX. Which products must still be identified as the core VMware SDDC pillars?
- A hardware quote for the municipal SDDC lists only physical perimeter firewalls under network and omits VMware network virtualization. Which product is missing?
- Library IT asks whether NSX Intelligence is a required fourth SDDC pillar alongside vSphere, vSAN, and NSX. How should that product be identified?
- A city asks whether vSphere can be dropped from the SDDC because NSX-T is already licensed. What should the candidate identify?
- Each municipal rack server that runs civic virtual machines hosts a vSphere hypervisor kernel. Which vSphere component is that?
- Inventory of municipal virtual machines, clusters, hosts, and templates is kept in one vSphere management server. Which vSphere component is that?
- Harborview's building-permit application runs as a guest operating system with virtual NICs and virtual disks on a city ESXi host. Which vSphere component is that guest plus its virtual hardware?
- County operations groups several permitting ESXi hosts so vSphere High Availability and Distributed Resource Scheduler can act on them together. Which vSphere component is that collection of hosts?
- City library catalog VMs need a place to keep their virtual-disk files on VMFS or vSAN. Which vSphere component presents that storage to the VMs?
- A municipal court case-management VM needs a virtual network adapter so operators can attach it to a port group or an NSX segment. Which vSphere VM component is that adapter?
- Harborview vCenter shows one switch object whose port groups stay consistent across every host in the civic cluster. Which vSphere networking component is that object?
- County clinic operators store ISO images and VM templates in a shared inventory so new health-department guests can be deployed from one place. Which vSphere component is that inventory?
- Finance, public works, and parks must share one permitting cluster, but each department needs a reserved slice of CPU and memory. Which vSphere component carves that compute?
- A township briefing lists a vSphere object that captures and applies consistent ESXi host settings, or a host lifecycle image, so every civic hypervisor matches. Which component is that?
- A city operator needs the web user interface that opens vCenter to manage clusters, virtual machines, and vSphere networking. Which UI component should they use?
- During a top-of-rack switch replacement, GIS mapping VMs must move to another ESXi host with zero guest downtime while their disks stay on the same datastore. Which vSphere feature does that?
- A host in the city's 911 support cluster fails, and the remaining hosts automatically power on those virtual machines. Which vSphere feature provides that restart?
- CPU and memory load on the permitting cluster is uneven across hosts, and the city wants vSphere to move virtual machines so compute stays balanced. Which feature does that?
- The municipal utility-billing team needs many identical guests from a gold image. Which vSphere feature lets operators clone that standard virtual machine quickly?
- Before a court case-management patch window, operators want a rollback point of the virtual machine's disks and optional memory state. Which vSphere feature captures that?
- A water-utility historian virtual machine is attached to an NSX overlay segment. Operators must live-migrate it to another prepared host while it keeps running. Which feature still performs that live move?
- City staff use "load balancer" and "Distributed Resource Scheduler" as if they were the same tool for the permitting portal. What is the correct distinction?
- Emergency-operations-center staff want the cluster to refuse new virtual machines if leftover capacity would not cover a restart after one host fails. Which vSphere feature is that reservation?
- The city library must move a catalog virtual machine's disks to another datastore without shutting the guest down. Which vSphere feature does that?
- Elections officials propose keeping a two-vCPU ballot-reporting virtual machine continuously mirrored so a host failure does not interrupt the guest. Which vSphere feature provides that live secondary?
- Parks-and-recreation staff describe moving a running virtual machine to a host on another IP subnet as "NSX bridging." What is the correct identification?
- The civic data center needs a product to run hypervisors, keep virtual-machine inventory, and provide cluster high availability. Which product supports that use case?
- A county wants overlay networks between agency virtual machines and a distributed firewall that can isolate those VMs from one another. Which product supports that use case?
- The public library wants software-defined storage that uses the disks already in the ESXi hosts. Which product supports that use case?
- Transit needs a software application-delivery virtual IP in front of the trip-planner API, with Layer 4 and Layer 7 load balancing. Which product family matches that use case?
- Security analysts want visibility of east-west flows among permitting virtual machines and recommended Distributed Firewall policies. Which product supports that use case?
- A city network team wants path analytics and visibility across both the civic overlay hops and the physical underlay. Which product supports that use case?
- A city wants to migrate permitting VMs between the on-premises civic site and a cloud landing zone, including network stretch assist. Which product supports that use case?
- County clerks need remote virtual desktops, and the same cluster also needs overlay isolation between agency VMs. Which product should the VCTA-NV operator name for the network-virtualization use case?
- A county lists endpoint malware EDR on staff laptops and east-west isolation between tax and GIS VMs. Which product on this exam's use-case family supports the network-isolation need?
- Civic operators need the product UI that creates NSX segments and Distributed Firewall rules for the 311 application. Which product UI supports that use case?
- The city innovation loft runs both KVM and ESXi and wants one network-virtualization platform. Which product supports that mixed-hypervisor use case?
- A city wants new agency networks in minutes instead of waiting weeks for physical switch and VLAN changes. Which NSX Data Center benefit matches that use case?
- A county wants east-west controls between tax and GIS VMs that sit on the same cluster. Which NSX Data Center benefit matches that use case?
- Public works wants to move water-SCADA VMs across racks without recabling VLANs on each top-of-rack switch. Which NSX Data Center benefit matches that use case?
- City finance wants fewer dedicated physical firewall pairs per security zone for the ERP VMs. Which NSX Data Center benefit matches that use case?
- The 311 team wants repeatable network and security builds driven from the NSX API instead of one-off GUI clicks. Which NSX Data Center benefit matches that use case?
- A township KVM pilot must use the same network-virtualization platform already running on ESXi. Which NSX Data Center benefit matches that use case?
- Operators want Distributed Firewall policy to stay with a permitting VM when it vMotions to another prepared host. Which NSX Data Center benefit matches that use case?
- A city wants to stop sending east-west traffic between library VMs out to a hardware firewall and back. Which NSX Data Center benefit matches that use case?
- Agencies need their own logical routers for departmental networks without buying a hardware router per department. Which NSX Data Center benefit matches that use case?
- The county DR site should recreate the same logical topology from software objects rather than rebuilding hardware VLANs from scratch. Which NSX Data Center benefit matches that use case?
- Civic operators want one GUI for virtual switching, routing, and security of agency networks. Which NSX Data Center benefit matches that use case?
- NSX Manager pushes the desired segment configuration, but something else actually forwards frames on the civic overlay. How do those high-level components interact?
- The city runs a three-node NSX Manager cluster. One node is down for maintenance. How do the Manager nodes interact so operators can still use the UI and API?
- Operators need NSX groups to list the city's ESXi clusters, hosts, and VMs. How does vCenter interact with NSX Manager in that architecture?
- Two ESXi transport nodes in the same overlay transport zone host permitting VMs on one segment. How do those hosts interact to exchange overlay frames?
- A township Tier-1 gateway serves agency segments and must reach the city's physical core. How do the high-level routing components interact?
- The 311 VIP needs centralized NAT, while east-west isolation between 311 VMs uses the Distributed Firewall. How do Edge and host data planes interact for those services?
- Each civic transport node has a local control plane that must receive forwarding updates. How does that plane interact with the central control plane?
- A permitting VM on an overlay segment must print to a VLAN-only physical printer that is not an NSX transport node. How do the high-level components interact?
- The county assessor Edge must terminate overlay segments for land-records VMs and also uplink to a physical VLAN toward the civic core. How must that Edge interact with transport zones?
- After an operator publishes a new segment for the public-health lab, NSX Manager shows the configuration but the host must still apply it. What Manager-to-node interaction should the operator identify?
- Wastewater ESXi transport nodes must send TEP traffic onto the civic underlay. How does the host switch interact with the physical NICs?
- City-clerk operators need the component that hosts the NSX graphical user interface and the API for civic network objects. Which high-level component has that role?
- Fire-station dispatch VMs on an ESXi host need their east-west frames forwarded and Distributed Firewall enforced at the vNIC. Which component's role is that data-plane work?
- Utility-billing needs NAT and a site-to-site VPN that are not distributed to every hypervisor. Which component's role is those centralized services?
- Stormwater VMs on two prepared hosts should share one overlay segment. Which construct's role is to define how far that segment can stretch?
- The municipal airport overlay must hand off to physical routers at the civic edge. Which gateway role is that north-south peering?
- The business-license desk needs its own logical router southbound to agency segments, linking north to the city's provider gateway. Which gateway role is that?
- Vital-records VMs must share a virtual Layer 2 broadcast domain so they can talk as if they were on one civic LAN. Which object's role is that virtual L2?
- The city treasurer's NAT service must keep running if one Edge appliance fails. Which cluster role groups Edges for that high availability?
- Planning-commission operators still need the NSX UI and API when one Manager appliance is down. Which cluster role provides that high availability?
- NSX must inventory the property-appraiser ESXi hosts and VMs so groups and transport-node prep can see them. Which vSphere product role is that compute manager?
- Recycling-center hosts must carry Geneve overlay and VLAN-backed NSX traffic. Which switch role on the host carries that overlay?
- Public-housing application VMs need software Layer 2 domains that span prepared hosts without recabling the civic underlay. Which NSX-T feature provides that?
- County workforce agencies need their own logical routers, plus one ISP handoff at the civic edge. Which NSX-T feature provides that two-tier routing?
- Clinic VMs on the same overlay segment must not talk east-west except for approved application ports. Which NSX-T feature enforces that micro-segmentation?
- North-south traffic entering the city-hall public portal must be inspected at the edge gateway, not at every vNIC. Which NSX-T feature is that?
- Animal-shelter public-site VMs use RFC1918 addresses and must present a public VIP to citizens. Which NSX-T feature translates those addresses?
- A virtual IP should spread citizen connections across three court case-status web VMs. Which NSX-T feature does that?
- The city must encrypt a site-to-site path from the primary civic data center to a backup municipal site. Which NSX-T feature terminates that crypto?
- A zoning-test agency segment needs automatic IP assignment for short-lived VMs. Which NSX-T feature provides that?
- Operators must extend an overlay segment to a VLAN so a physical badge printer can share Layer 2 with HR VMs. Which NSX-T feature does that?
- Operators need to inject a synthetic packet and see the virtual path between a water-quality lab VM and a historian VM. Which NSX-T feature does that?
- Distributed Firewall rules for fleet-maintenance VMs should follow tags rather than static IP lists. Which NSX-T feature defines that dynamic membership?
Administrative and Operational Tasks · 100 questions
- A city operator must create the first segments and gateways on a brand-new NSX-T 3.x fabric that has no leftover Advanced objects. How should the operator open NSX to do that work?
- After a county upgrade, leftover Advanced objects still exist on the municipal NSX fabric. The operator needs to inspect those objects in the GUI. What should the operator do?
- County operations staff created some civic segments in Policy mode and others in Manager mode, and membership and rules no longer line up. What GUI practice should they adopt going forward?
- A library operator needs a single glance at overall NSX system, networking, security, and compliance health for the branch data center. Which NSX GUI location should the operator open?
- Public-works needs a new overlay Layer 2 network for water-meter headend VMs on the city's NSX-T fabric. How should the operator create that network in NSX?
- While adding the public-works segment, the operator must choose whether the meter-headend VMs ride an overlay or a VLAN-backed network. Where in the NSX GUI is that choice made?
- Permit-system VMs on a new city segment need a default gateway so they can reach other civic applications. How should the operator give that segment a gateway in the NSX GUI?
- The city needs a departmental southbound router so Parks workloads can have their own tenant gateway. Which NSX GUI path creates that object?
- The new Parks Tier-1 gateway must reach the city's ISP. What should the operator configure on that Tier-1 in the NSX GUI?
- The municipal NOC needs the north-south gateway that will BGP-peer with the city's ISP routers. Which NSX GUI location holds that provider gateway?
- Operators must list the compute VMs that NSX already knows from the city's vCenter compute manager. Which NSX GUI path shows that inventory?
- A Distributed Firewall rule must match every city VM tagged Finance without typing a static IP list. How should the operator build that match in the NSX GUI?
- The city adopted a tagging convention so later groups can collect permit, finance, and clinic workloads. Where should the operator apply those NSX tags?
- Clinic VMs on the same overlay must have east-west allow and deny rules between application tiers. Which NSX GUI area creates those rules?
- Operators are adding web-to-app rules for the city's 311 portal VMs in Policy-mode Distributed Firewall. Which DFW category should hold those application-tier rules?
- A county security draft for clinic micro-segmentation should be saved so reviewers can inspect it before it is published to the fabric. What Policy-mode GUI feature should the operator use?
- The city must restrict north-south access from the 311 portal segment to the internet. Which NSX GUI control applies that gateway-edge restriction?
- Utility-billing VMs need source NAT so they can reach a partner network using a public civic address. Where in the NSX GUI should the operator configure that NAT?
- Three permit-portal web VMs should share one virtual IP for citizen traffic. Which NSX GUI area creates that VIP and its server pool?
- The city needs an IPsec tunnel from the primary civic data center to the backup municipal site. Which NSX GUI path configures that session?
- A test segment for the township clerk lab needs NSX to hand out addresses. How should the operator enable that in the GUI?
- A cloud-facing civic use case needs an NSX DNS zone, which is available only in Policy mode. Which GUI path should the operator use?
- Operators need a reusable set of addresses for TEP or NAT allocations instead of tracking them only in a spreadsheet. Where should that pool live in the NSX GUI?
- An operator must confirm which overlay and VLAN transport zones exist on the municipal fabric. Which NSX GUI path shows that list?
- The county must confirm which ESXi hosts are prepared as NSX transport nodes. Which NSX GUI location shows that host-node status?
- Harborview utility-billing SNAT stopped after an Edge VM reboot. Where in NSX Manager should the operator check that Edge appliance's transport-node status?
- County finance needs to confirm which Edge VMs form the HA pair that serves tax-portal NAT. Where in NSX Manager does the operator inspect Edge cluster membership?
- A township must document the teaming and MTU its ESXi hosts use for NSX uplinks before a ToR change. Where in NSX Manager does the operator open the uplink profile those hosts use?
- The library consortium stood up a second vCenter for a new branch cluster, but NSX still shows none of those hosts. Where in NSX Manager does the operator register that vCenter as a compute manager?
- After a parks-and-rec ESXi host dropped from the fabric, the operator needs NSX's own alarm list rather than only a vSphere host alarm. Where should they look in the NSX GUI?
- Municipal-court auditors complain that idle NSX Manager browser sessions stay open too long. Which GUI location changes the UI session timeout rather than a data-path firewall rule?
- Public-works cannot open an NSX feature the vendor said is licensed, and the GUI shows a license restriction. Where does the operator apply or inspect NSX license keys?
- Before a wastewater change weekend, operations must back up NSX Manager configuration to the city's SFTP server. Which NSX GUI page is the NSX configuration backup, not a vCenter VM backup?
- City 311 helpdesk must view NSX objects without changing policy. Where in NSX Manager does the operator assign a read-only (auditor) role rather than relying on vSphere permissions alone?
- A clerk VM cannot reach a tax VM on the overlay, and the operator must inject a synthetic packet and watch where NSX delivers or drops it. Which NSX GUI tool does that?
- Building-permits security wants a SPAN-like copy of a segment's traffic sent to the city's packet-analyzer VM. Which NSX GUI feature is the NSX method, not a physical ToR SPAN?
- A new permitting operator needs the object named permits-prod quickly and does not know which menu owns it. What NSX Manager control locates objects by name across the inventory?
- A GIS operator who learned NSX-V terms cannot find a logical switch for the mapping-app network that was created in Policy mode. How should they use the NSX GUI?
- Water-SCADA routing was created years ago as a Manager-mode logical router. The Policy-mode gateway list does not show it. What should the operator do in the NSX GUI?
- City-hall change control wants NSX Manager appliances kept off Distributed Firewall enforcement so a new default-deny cannot lock operators out of the GUI. Where is that exclusion list?
- The public library must allow guest-segment internet only during open hours and deny it overnight, using NSX rather than a physical after-hours ACL. Where does the operator set that schedule?
- Permitting wants a Distributed Firewall rule that matches HTTP as an application, not only TCP/80, on the civic-web group. Where in Policy-mode NSX Manager is that L7 match defined and then used?
- HR wants Distributed Firewall rules that use Active Directory groups for city staff rather than only IP sets. Which NSX GUI path enables that identity-based control?
- Airport IT must inspect citizen HTTPS that enters the permitting Tier-0 from the internet, not east-west traffic between two overlay VMs. Which Security submenu matches that north-south goal?
- Public-health added Distributed Firewall rules for a new clinic segment, but the VMs still follow the old policy. What GUI action realizes those new rules?
- Courts IT created a new overlay segment and must confirm NSX realized it on the transport nodes before attaching VMs. Where in the NSX GUI is that realized status?
- Wastewater must keep a physical ToR VLAN for a lab-instrument network and still attach VMs in NSX. How should the operator create that network in the GUI?
- The municipal ISP handoff is a VLAN on the Edge uplinks. Where does the operator attach the county Tier-0 to that VLAN toward the ISP?
- County north-south routing must run Active-Active or Active-Standby on the shared internet Tier-0. At associate GUI depth, where is that HA mode selected rather than BGP neighbor stanzas?
- Permitting's Tier-1 must perform SNAT for department VMs, but NAT is unavailable until centralized services have an Edge. What GUI step enables those T1 services?
- Harborview's NSX operator must collect an NSX Manager support bundle for Broadcom Support after a civic outage ticket, not a vSphere host log dump. Which GUI path generates that NSX bundle?
- County GIS operators keep losing the Policy and Manager mode buttons after they collapse the NSX Manager chrome. Where should they make those buttons always visible?
- The city auditor wants a glance at NSX compliance widgets without opening every security policy. Which GUI area shows those compliance dashboard widgets?
- Permitting staff ask which Distributed Firewall policies currently apply to the license-application VM. How should the operator find that in the NSX GUI?
- Parks needs a reusable Layer-4 object for the municipal recreation portal on TCP 8443 so Distributed Firewall rules can name the service instead of typing the port each time. Where is that object created?
- Two city NSX environments must reuse a Distributed Firewall draft from staging in production. Which GUI action imports that draft?
- Transit wants Distributed IDS/IPS turned on for the fare-collection overlay, not a new Distributed Firewall allow list and not signature-tuning design. Where does the operator open that in NSX Manager?
- The city licensed NSX Endpoint Protection for guest introspection on library kiosk VMs. Which NSX Manager family is the GUI for that Policy-mode feature?
- Water treatment wants east-west traffic redirected to a partner inspection SVM (network introspection), not merely allowed by a Distributed Firewall rule. Which GUI family hosts that redirection rule?
- The municipal SOC collector must receive NSX IPFIX records for overlay and firewall flow visibility. Where does the operator enable NSX IPFIX rather than vCenter NetFlow?
- After a weekend power test, public-works needs to confirm all three NSX Manager nodes are still in the cluster. Which page shows that appliance cluster status?
- County cluster Courts-Compute must receive the same NSX host-switch settings as the other prepared clusters. Which GUI objects apply that profile without a VCP host-prep CLI lab?
- GIS wants to see which host switch (N-VDS or VDS) each ESXi transport node is using for the civic overlay. Where is that visible in NSX Manager?
- Auditors require a legal login banner on NSX Manager before civic operators authenticate. Where is that banner set?
- The NOC must check whether city Edge uplinks on the north-south Tier-0 are up after a municipal fiber cut. Which NSX GUI shows that Edge or Tier-0 interface status?
- Township ops need a reusable QoS, Spoof Guard, or IP Discovery profile to attach to civic segments. Where are those profiles created?
- County finance requires Spoof Guard on the treasury overlay so VMs cannot spoof MAC or IP addresses. How is that enabled in the NSX GUI?
- A DHCP-heavy public-health test LAN is missing discovered IPs in NSX groups. Which setting should the operator adjust in the NSX GUI?
- After the operator created a new permits overlay segment in NSX Manager, the building-permit VM still sits on an old VLAN port group. Which GUI actually moves the vNIC onto that NSX segment?
- After creating the library overlay segment in NSX Manager, operators must confirm it appeared for vSphere admins. What should they expect in vCenter?
- A junior civic operator needs the NSX REST API reference hosted on the appliance, not to write production REST. Where is that documentation or explorer?
- Courts need every Distributed Firewall rule that references the group grp-case-mgmt. How does the operator find them quickly in the NSX GUI?
- Parks already has a working Tier-1; Recreation needs a similar departmental gateway for a new agency environment. Which GUI achieves that without buying a hardware router?
- The city's isolated lab must turn Distributed Firewall off globally during a messy packet-reproduction test. Where is that enable/disable control?
- Council staff want a picture of how the city Tier-0, agency Tier-1s, and segments connect. Which NSX GUI shows that topology?
- Harborview's NOC must add BGP neighbors so the city's north-south Tier-0 can peer with the ISP. Which NSX GUI location is the NSX-side place to do that work?
- A county parks operator opens Load Balancing and finds the feature greyed out on the civic NSX fabric. How should the operator use the NSX GUI to check license enforcement?
- A township wants a junior civic operator to work in NSX without full administrative power. How should the administrator assign least privilege in the NSX GUI?
- City staff must log in to NSX Manager with Active Directory accounts instead of local users. Which NSX GUI location configures that directory-based login?
- After a city PKI rotation, the library must replace the certificate presented by the NSX Manager web UI. Which NSX GUI location holds that certificate?
- Water-utility operators see skewed NSX logs and certificate warnings after a power event. Where in the NSX GUI do they set time and NTP on the Manager appliance?
- Parks operators need to know which Edge node is currently active for a stateful Tier-1 gateway. Which NSX GUI view shows that HA locality?
- The clerk's office has a physical queue printer that must share L2 with an NSX segment. How should the operator use the NSX GUI to create that bridge-backed connection?
- Permit-system operators need to see which VMs and vNICs are attached to a civic segment and whether those ports are up. Which NSX GUI view shows that?
- A 311 operator needs to jump from the 311 web VM to its related NICs, segments, and groups. Which NSX GUI path is the fastest?
- Auditors asked the county for an inventory of NSX grouping objects used on civic workloads. Which NSX GUI page lists or exports those groups?
- Civic helpdesk staff should watch NSX health but must not prepare hosts or change Fabric. How should they use the NSX GUI?
- A municipal operator toggles Policy and Manager in the NSX Manager UI while working a mixed civic fabric. What does that GUI switch change?
- After a county operator creates a transport zone and Edge in System or Manager mode, the Policy Networking menu still omits those objects. What should the operator do in the NSX GUI?
- A library technician bookmarks the NSX graphical user interface for daily civic operations. Which URL is the NSX GUI?
- A clinic change window must power off a records VM and tighten its Distributed Firewall rules. How should the operator use GUIs to achieve both goals?
- Transit operators believe a civic web VM is dropping packets because of Distributed Firewall. Which NSX GUI tool should they use to see that drop?
- Courts need a group that includes the physical badge system's IP addresses so Distributed Firewall can reference that mixed civic system. Where is that group created?
- Security operators must apply a Distributed Firewall policy only to the courts VM group, not to the entire civic data center. Which DFW GUI field scopes that policy?
- After a public-safety drill, operators want Emergency Distributed Firewall rules to stay evaluated before Application rules. How should they use the NSX GUI?
- GIS operators must save a health-check monitor for a load-balancer pool that fronts civic map servers. Which NSX GUI area holds that object?
- A township operator cannot turn on a VPN service because the control is greyed out while the UI is in Manager mode. How should the operator use the NSX GUI to reach that service?
- Operators must configure Bridge Firewall on a civic segment that bridges a physical records VLAN. Which NSX GUI mode contains that feature?
- Harborview is told that a future NSX Federation (Global Manager) might join the civic fabric, so all GUI work must stay Federation-ready. How should operators use the NSX GUI today?
- Civic leadership wants a single screenshot of system, networking, and security health before a council briefing. Which NSX GUI page should the operator capture?
These questions are original practice material and are NOT actual exam questions or brain-dump content. All vendor marks are trademarks of their respective owners. This site is not affiliated with, endorsed by, or sponsored by Broadcom.