All Practice Exams

100+ Free VCAP-NV Deploy Practice Questions

Pass your VMware Certified Advanced Professional - Network Virtualization Deploy (3V0-41.22) exam on the first try — instant access, no signup required.

✓ No registration✓ No credit card✓ No hidden fees✓ Start practicing immediately
Not published Pass Rate
100+ Questions
100% Free
1 / 100
Question 1
Score: 0/0

An engineer wants critical infrastructure VMs (vCenter, NSX Manager) excluded from DFW enforcement entirely so a misconfigured rule cannot black-hole management. Where is this configured?

A
B
C
D
to track
2026 Statistics

Key Facts: VCAP-NV Deploy Exam

16

Lab Items

Broadcom 3V0-41.22 Exam Guide

220 min

Actual Exam Time

Broadcom 3V0-41.22 Exam Guide

300

Scaled Passing Score

Broadcom 3V0-41.22 Exam Guide

$250

Exam Fee

Pearson VUE 2026

4

Tested Sections

Broadcom 3V0-41.22 Exam Guide

VCP-NV

Required Prerequisite

Broadcom Certification

The VCAP-NV Deploy 3V0-41.22 exam is a 16-item, 220-minute lab-based performance test delivered through Pearson VUE on the VMware Learning Platform. Candidates configure NSX Manager, transport zones, edge clusters, Tier-0/Tier-1 gateways, distributed firewall, IDS, NAT, VPN, and load balancer tasks in a live NSX-T 3.x environment. Passing requires a scaled score of 300 on a 100-500 scale.

Sample VCAP-NV Deploy Practice Questions

Try these sample questions to test your VCAP-NV Deploy exam readiness. Each question includes a detailed explanation. Start the interactive quiz above for the full 100+ question experience with AI tutoring.

1An engineer is bootstrapping a 3-node NSX Manager cluster on NSX-T 3.2 and needs to add the second and third Manager appliances after the first node is running. Which workflow correctly adds the additional Managers?
A.Deploy two more OVAs manually from vCenter and rerun the install wizard on each new appliance
B.From the existing NSX Manager UI, navigate to System > Appliances > Add NSX Appliance and provide vCenter compute manager, datastore, network, and IP details
C.Use the install-vcenter-extension API on each new appliance to register them with the existing cluster
D.Run join cluster on each new appliance via the CLI and supply the cluster certificate thumbprint and shared secret only
Explanation: On NSX-T 3.x the supported way to grow a Manager cluster is from System > Appliances > Add NSX Appliance in the existing Manager UI. The wizard requires a registered compute manager (vCenter), datastore, management network, IP address, and credentials, and it deploys the OVA and joins the cluster automatically.
2After deploying NSX Manager you must register a vCenter Server as a compute manager. Which credential type is required for the vCenter account?
A.vCenter Single Sign-On user with Read-only role
B.vCenter Single Sign-On user with Administrator privileges on the vCenter root object
C.Local NSX Manager admin user replicated to vCenter
D.Active Directory user added to the vSphere Network Operators group
Explanation: Adding a compute manager requires a vCenter SSO account with Administrator privileges on the vCenter root object so NSX can register its extension, deploy Edge and Manager appliances, and prepare ESXi transport nodes.
3An engineer creates an Overlay Transport Zone and an additional VLAN Transport Zone for north-south uplinks. When configuring the Transport Node Profile, where are the two Transport Zones associated with the host?
A.Directly on each ESXi host under System > Fabric > Hosts > Configure NSX
B.Within the host switch (N-VDS or VDS) configuration of the Transport Node Profile
C.On the IP Pool object that backs the TEP interfaces
D.On the Edge Transport Node template only, since hosts inherit from Edges
Explanation: Transport Zones are bound to a host switch inside the Transport Node Profile. When you add a host switch (VDS in NSX-T 3.x with vSphere 7+), you select the overlay TZ and any VLAN TZs that the switch will carry. The profile is then applied to a vSphere cluster.
4An Uplink Profile defines two active uplinks on a host switch backed by a vSphere Distributed Switch. Which teaming policy is required to use both uplinks for overlay TEP traffic simultaneously while keeping a single TEP IP per host?
A.Failover Order with one active and one standby uplink
B.Load Balance Source
C.Load Balance Source MAC
D.Load Balanced Source IP Hash
Explanation: Load Balance Source uses the source virtual port ID to map workloads to uplinks. With two TEPs (one per uplink) NSX uses both uplinks for overlay traffic. Note that to fully load-balance overlay traffic you also need two TEP IPs from the IP Pool; multi-TEP is the supported configuration.
5TEP interfaces on ESXi hosts are configured to use VLAN 1647 and obtain addresses from a 10.150.10.0/24 NSX IP Pool. Several hosts fail to install NSX with TEP IP allocation errors. Which check is most likely to identify the root cause first?
A.Confirm the IP Pool has at least one available range and that no allocations are stuck in error state
B.Verify that the management VMkernel and TEP VMkernel share the same VLAN
C.Re-deploy NSX Manager because IP Pool corruption is a known issue
D.Configure DHCP on the TEP VLAN since IP Pools are DHCP based
Explanation: The first check is that the IP Pool has free addresses and no allocations are stuck. From the UI under Networking > IP Address Pools you can see usage and any allocations in error. Stuck allocations from previous failed installs are the most common cause of new TEP IPs failing to assign.
6An engineer prepares a vSphere 7 cluster for NSX-T 3.2 using a Transport Node Profile referencing an existing VDS. Which statement about the host switch selection is correct?
A.Only N-VDS is supported on ESXi 7 hosts
B.VDS 7.0 or later is required and N-VDS for ESXi is deprecated for new deployments
C.Both VDS and N-VDS must be selected together so traffic can fail over
D.The VDS must be created by NSX Manager and cannot be reused from vCenter
Explanation: Starting with NSX-T 3.0 on vSphere 7, NSX consumes the vCenter VDS 7.0+ as the host switch. N-VDS for ESXi is deprecated for new deployments and Broadcom recommends VDS for all greenfield work. The VDS is created in vCenter and selected in the Transport Node Profile.
7Which NSX Manager certificate workflow is required so vCenter and other clients trust the cluster Virtual IP (VIP) using a CA-signed certificate?
A.Import the CA-signed certificate to each Manager node and assign it to each node individually
B.Import the CA-signed certificate that includes the cluster VIP in the SAN, then apply it to the cluster certificate using the API or UI Replace Certificate workflow
C.Generate a new self-signed certificate on the VIP and trust it on all clients
D.Replace the certificate using the cli command set service https certificate <id>
Explanation: To trust the cluster VIP, import a CA-signed certificate whose SAN includes the VIP FQDN/IP, then apply it to the cluster (not to a single node) using System > Certificates > Replace Certificate or the POST /api/v1/cluster/api-certificate?action=set_cluster_certificate API call.
8An NSX Edge node is being deployed via the Edge Transport Node wizard. Which two requirements apply to the Edge VM form factor when it must support NAT, gateway firewall, and load balancer Medium services? (Choose the answer that lists both correct requirements.)
A.Small form factor and at least 2 vCPUs
B.Medium form factor and a minimum of 4 vCPUs / 8 GB RAM
C.Large form factor and a minimum of 8 vCPUs / 32 GB RAM with reserved CPU/memory
D.Bare metal Edge required for any load balancer service
Explanation: A Medium load balancer instance requires a Large Edge VM, which has 8 vCPUs and 32 GB RAM. Broadcom requires CPU and memory reservations on Edge VMs to guarantee dataplane performance.
9When creating an Edge VM with the deployment wizard you must allocate four interfaces. Which assignment correctly maps fp-eth0 through fp-eth2 in a typical two-uplink design?
A.fp-eth0 = management, fp-eth1 and fp-eth2 = uplinks (overlay TEP also uses fp-eth1/fp-eth2)
B.fp-eth0 = TEP only, fp-eth1 = management, fp-eth2 = uplink
C.fp-eth0 and fp-eth1 = bonded TEP, fp-eth2 = management
D.All fp-ethX interfaces must connect to the same VLAN-backed segment for HA to function
Explanation: On an Edge VM the management interface (eth0) is separate from the data plane fast-path interfaces. The first fast path interface (fp-eth0) is typically used for management/control plane traffic, while fp-eth1 and fp-eth2 carry overlay TEP and the two N-S uplinks via the Edge uplink profile.
10An engineer creates an Edge cluster of four Large Edge VMs. The cluster will host two Tier-0 gateways in active-active mode and several Tier-1 gateways. What is the correct understanding of Edge node placement for a Tier-0?
A.An active-active Tier-0 can use up to 8 Edge nodes simultaneously for ECMP forwarding
B.An active-active Tier-0 supports a maximum of 2 Edge nodes
C.Tier-0 gateways always run on every Edge node in the cluster regardless of mode
D.Tier-0 gateways cannot share an Edge cluster with Tier-1 gateways
Explanation: An active-active Tier-0 supports up to 8 Edge nodes participating in ECMP forwarding to the physical fabric. This is one of the main scaling levers for north-south throughput.

About the VCAP-NV Deploy Exam

The VCAP-NV Deploy (3V0-41.22) is an advanced lab-based exam validating hands-on ability to deploy, configure, optimize, and troubleshoot a production VMware NSX-T Data Center 3.x environment. Candidates perform real configuration tasks against a live NSX Manager via the VMware Learning Platform.

Questions

16 scored questions

Time Limit

225 minutes (220 actual)

Passing Score

300 (scaled, range 100-500)

Exam Fee

$250 USD (Broadcom (VMware by Broadcom))

VCAP-NV Deploy Exam Content Outline

Section 4 (largest)

Installation, Configuration, and Setup

Prepare NSX-T infrastructure (Manager cluster, transport zones, IP pools, transport node profiles), build virtual networks (segments, L2 bridging, BGP, VRF Lite, EVPN), deploy network services (edge clusters, NAT, DHCP, DNS, load balancer, IPSec/L2 VPN), and secure the data center with DFW, gateway firewall, identity firewall, distributed IDS, URL analysis, and NSX Intelligence.

Section 5

Performance-tuning, Optimization, and Upgrades

Configure Enhanced Data Path (N-VDSe) for high-throughput workloads and apply Quality of Service (QoS) profiles and rules to segments and gateways.

Section 6

Troubleshooting and Repairing

Use TraceFlow, port mirroring, IPFIX, central CLI commands (nsxcli, get logical-router, vrf), pktcap-uw, and vsipioctl to isolate installation, connectivity, edge, L2/L3, and security failures.

Section 7

Administrative and Operational Tasks

Backup and restore the NSX configuration, monitor the deployment, manage RBAC and VIDM access policies, configure syslog, and automate operations via the NSX Policy REST API.

How to Pass the VCAP-NV Deploy Exam

What You Need to Know

  • Passing score: 300 (scaled, range 100-500)
  • Exam length: 16 questions
  • Time limit: 225 minutes (220 actual)
  • Exam fee: $250 USD

Keys to Passing

  • Complete 500+ practice questions
  • Score 80%+ consistently before scheduling
  • Focus on highest-weighted sections
  • Use our AI tutor for tough concepts

VCAP-NV Deploy Study Tips from Top Performers

1Build a nested NSX-T 3.x lab and deploy a 3-node Manager cluster, two transport zones (overlay and VLAN), and an Edge cluster from scratch repeatedly until you can do it from memory.
2Practice every Tier-0 routing scenario: BGP peering with a TOR fabric, route redistribution, ECMP enable, BFD, prefix lists, and route maps.
3Drill the distributed firewall hierarchy: sections, rules, applied-to scoping, exclude list, layer 7 context profiles, and identity firewall with VIDM/AD groups.
4Memorize the central CLI workflow: nsxcli on Manager, get logical-routers, get logical-router <UUID> bgp neighbor, and the get vrf commands on Edge.
5Learn the NSX Policy API URI patterns (/policy/api/v1/infra/...) and practice creating segments, Tier-1s, NAT rules, and DFW rules with curl or Postman before relying on the UI.

Frequently Asked Questions

What is the VCAP-NV Deploy exam format?

The 3V0-41.22 exam is a 16-item lab-based performance exam delivered on the VMware Learning Platform (VLP) through Pearson VUE. Candidates have a 225-minute appointment with 220 minutes of actual lab time and configure tasks against a real NSX-T 3.x environment.

What are the VCAP-NV Deploy exam sections?

The blueprint includes Section 4 Installation/Configuration/Setup (largest), Section 5 Performance-tuning/Optimization/Upgrades, Section 6 Troubleshooting/Repairing, and Section 7 Administrative/Operational Tasks. Sections 1-3 (Architecture, Products, and Planning/Design) are not testable on this Deploy exam.

How much does the VCAP-NV Deploy exam cost?

The VCAP-NV Deploy exam fee is $250 USD per attempt, payable to Pearson VUE at registration. There is no discounted retake price.

What are the prerequisites for VCAP-NV Deploy?

Candidates must hold an active VCP-NV certification before they can earn the VCAP-NV Deploy credential. Broadcom recommends 1-2 years of hands-on NSX-T deployment experience and the NSX-T Data Center: Troubleshooting and Operations [V3.X] course.

What is the passing score for VCAP-NV Deploy?

The passing score is 300 on a scaled range of 100 to 500. The raw lab task scores are mapped through Broadcom's scaled-scoring algorithm; individual task weights are not published.

How is the VCAP-NV Deploy exam delivered?

The exam is delivered as a proctored test-center exam through Pearson VUE on the VMware Learning Platform (VLP). Online proctored delivery is not currently offered for VCAP lab exams.