PracticeVideosBlogFlashcardsEspañol
All Practice Exams

100+ Free VCAP-NV Design Practice Questions

Pass your VMware Certified Advanced Professional - Network Virtualization Design (NSX 4.x) exam on the first try — instant access, no signup required.

✓ No registration✓ No credit card✓ No hidden fees✓ Start practicing immediately
Not published Pass Rate
100+ Questions
100% Free
1 / 100
Question 1
Score: 0/0

A design requires stateful NAT and stateful Gateway Firewall at the perimeter. Which Tier-0 HA configuration must the architect document?

A
B
C
D
to track
Same family resources

Explore More VMware Certifications

Continue into nearby exams from the same family. Each card keeps practice questions, study guides, flashcards, videos, and articles in one place.

VMware VCP-DCV Data Center Virtualization (Retired Dec 2025)

Practice Questions

VMware VCP-NV Network Virtualization

Practice Questions

VMware VCP-VCF VMware Cloud Foundation

Practice Questions

VMware Aria Automation 8.10 Professional V2 (2V0-31.24)

Practice Questions

VMware Cloud Foundation 5.2 Administrator (2V0-11.25)

Practice Questions

VMware Cloud Foundation 9.0 Architect (2V0-13.25)

Practice Questions
2026 Statistics

Key Facts: VCAP-NV Design Exam

55

Total Questions

Broadcom 3V0-42.23 exam guide

135 minutes

Time Limit

Broadcom 3V0-42.23 exam guide

300

Passing Score (100-500 scaled)

Broadcom 3V0-42.23 exam guide

$450

Exam Fee (USD)

Broadcom 2026

5

Exam Sections

Broadcom 3V0-42.23 blueprint

Pearson VUE

Test Delivery

Broadcom

The VCAP-NV Design exam (3V0-42.23) is a 55-question, 135-minute exam scored on a 100-500 scale with a passing score of 300, delivered through Pearson VUE for $450 USD. Items are scenario-driven and span IT design methodology, the VMware NSX 4.x solution stack, Plan and Design (the heaviest section), Install/Configure/Administrate, and Troubleshoot/Optimize. Candidates typically hold VCP-NV and have hands-on NSX 4.x design experience.

Sample VCAP-NV Design Practice Questions

Try these sample questions to test your VCAP-NV Design exam readiness. Each question includes a detailed explanation. Start the interactive quiz above for the full 100+ question experience with AI tutoring.

1An architect is documenting the early phase of an NSX engagement and must capture business outcomes such as 'reduce time-to-market for new tenants' without specifying NSX components. Which design artifact best represents this work?
A.Conceptual design
B.Logical design
C.Physical design
D.Implementation plan
Explanation: Conceptual design captures high-level business goals, success criteria, and outcomes without prescribing technologies or component placements. Logical and physical designs translate those outcomes into NSX constructs and concrete sizing later in the lifecycle.
2During requirements gathering, a stakeholder states 'we cannot allow any East-West traffic to bypass inspection.' How should an architect classify this statement?
A.Assumption
B.Constraint
C.Risk
D.Requirement
Explanation: A statement of what the solution must do or enforce is a requirement. It will drive design choices such as Distributed Firewall everywhere, applied-to scoping, and possibly East-West Service Insertion for advanced inspection.
3An architect must justify why Geneve was chosen as the NSX overlay encapsulation rather than VXLAN for a greenfield NSX 4.x design. Which technical attribute is the strongest justification?
A.Geneve uses a smaller header so MTU planning is simpler
B.Geneve carries variable-length TLV metadata that NSX uses for service context
C.Geneve does not require IP multicast in the underlay
D.Geneve performs hardware offload while VXLAN does not
Explanation: NSX uses Geneve's extensible TLV options to carry per-packet metadata such as logical switch IDs, service context, and policy markers between transport nodes. This extensibility is the architectural reason NSX adopted Geneve over VXLAN.
4Which underlay MTU value is the minimum recommended for an NSX Geneve overlay carrying standard 1500-byte tenant frames without fragmentation?
A.1500
B.1600
C.1700
D.9000
Explanation: VMware's NSX-T/NSX 4.x reference design recommends a minimum underlay MTU of 1700 to safely carry 1500-byte payloads after Geneve encapsulation, including future TLV growth. The hard floor is 1600, but 1700 is the recommended minimum to leave headroom; 9000 (jumbo) is preferred where the fabric supports it.
5An architect must document a traceable link between a customer requirement ('99.99% North-South availability') and an NSX design decision ('deploy active-active Tier-0 with ECMP across two Edge nodes'). Which deliverable is the correct place to record this linkage?
A.Risk register
B.Design Decision document with requirement-to-decision matrix
C.As-built configuration document
D.Operational runbook
Explanation: Design decisions, their justifications, alternatives considered, and the requirement(s) they satisfy belong in a formal Design Decision document, often expressed as a requirement-to-decision matrix. This is the artifact a VCDX-style review expects.
6Which item belongs in the physical design rather than the logical design of an NSX deployment?
A.Tier-0 to Tier-1 hierarchy and stateful service placement
B.Transport Zone overlay vs VLAN classification
C.Specific VLAN IDs, IP subnets, and Edge node form factor
D.Micro-segmentation policy intent and zone model
Explanation: Logical design captures relationships and intent that are technology-aware but vendor-config-agnostic. Concrete VLAN IDs, IP/IPv6 subnets, Edge appliance form factors (medium/large/extra-large), rack placement, and uplink mapping are physical-design artifacts.
7An organization's compliance team mandates 'data must remain encrypted in flight between data centers.' Which NSX feature most directly satisfies this requirement at the network layer?
A.NSX IPSec VPN between Tier-0 gateways
B.Distributed Firewall with TLS inspection
C.NSX Federation Global Manager replication
D.Geneve TEP-to-TEP encryption is on by default
Explanation: IPSec VPN terminated on Tier-0 gateways (route-based or policy-based) provides authenticated, encrypted tunnels between sites. Geneve overlay traffic is not encrypted by default, so an explicit IPSec design is required to meet in-flight encryption mandates.
8A retail customer cites 'we must reuse the existing Cisco Nexus underlay; no new hardware budget for two years.' How should the architect treat this in the design?
A.As an assumption that may be revisited
B.As a constraint that bounds design choices
C.As a risk with mitigation owners
D.As a non-functional requirement
Explanation: A firm restriction imposed on the design (existing fabric, no new hardware) is a constraint. It bounds Edge form factor, MTU validation, and uplink design choices throughout the project.
9Which standards body publishes the Geneve specification used by NSX 4.x as the overlay encapsulation?
A.IEEE
B.IETF (RFC 8926)
C.ITU-T
D.ONF
Explanation: Geneve (Generic Network Virtualization Encapsulation) is defined in IETF RFC 8926. Architects often cite the standard when justifying multi-vendor interoperability and TLV extensibility in design decisions.
10Which deliverable best documents the order, dependencies, and rollback path for bringing an NSX environment from racked hardware to production handover?
A.Conceptual design
B.Logical design
C.Implementation plan
D.Operational verification test
Explanation: The implementation plan defines the sequence, dependencies, owners, and rollback steps for delivering the design. The Operational Verification Test (OVT) validates the running system once implementation is complete.

About the VCAP-NV Design Exam

VCAP-NV Design (3V0-42.23) validates an architect's ability to design enterprise-scale VMware NSX 4.x solutions, including Tier-0/Tier-1 routing, micro-segmentation with the Distributed Firewall, advanced threat prevention, multi-site Federation, and integration with vSphere, Tanzu Kubernetes, and partner security ecosystems.

Questions

55 scored questions

Time Limit

135 minutes

Passing Score

300 (scaled 100-500)

Exam Fee

$450 USD (Broadcom (VMware by Broadcom) via Pearson VUE)

VCAP-NV Design Exam Content Outline

Section 1

IT Architectures, Technologies, Standards

Conceptual, logical, and physical design; requirements, constraints, assumptions, and risks; Geneve overlay standards; underlay MTU and routing fundamentals; design documentation and decision traceability.

Section 2

VMware Solution

NSX 4.x management, control, and data planes; NSX Manager cluster and VIP; transport zones, segments, host preparation; Edge form factors; NAPP, NCP, Federation; NSX licensing editions.

Section 3

Plan and Design the VMware Solution

Tier-0 active-active vs active-standby; ECMP, BGP, BFD; Tier-1 stateful services; DFW micro-segmentation, IDS/IPS, malware prevention, NDR; load balancing; NAT; IPSec and L2 VPN; service insertion; multi-tenant VRF-Lite; Federation stretched gateways and DR.

Section 4

Install, Configure, Administrate the VMware Solution

Transport Node Profiles and uplink profiles; Edge cluster sizing, sub-clusters, and placement; certificate strategy; SFTP backups; Upgrade Coordinator order and parallelism; VDS-based host preparation.

Section 5

Troubleshoot and Optimize the VMware Solution

Observability with NSX Intelligence and Aria Operations for Networks; IPFIX, Port Mirror, TraceFlow; BFD timer tuning; LB active monitors; DFW rule-hit lifecycle; ECMP validation; Federation Global Manager promotion safety.

How to Pass the VCAP-NV Design Exam

What You Need to Know

  • Passing score: 300 (scaled 100-500)
  • Exam length: 55 questions
  • Time limit: 135 minutes
  • Exam fee: $450 USD

Keys to Passing

  • Complete 500+ practice questions
  • Score 80%+ consistently before scheduling
  • Focus on highest-weighted sections
  • Use our AI tutor for tough concepts

VCAP-NV Design Study Tips from Top Performers

1Study the official VMware NSX-T Reference Design Guide cover-to-cover; the exam mirrors its decision frameworks
2Practice differentiating Tier-0 active-active ECMP vs active-standby and where stateful services land on Tier-1
3Drill DFW Applied To scoping, Security Group strategies, and Layer 7 context profile use cases
4Master NSX Federation: Global Manager, Local Manager, RTEPs, stretched gateways, and location-primary failover
5Memorize Edge form-factor sizing limits for LB, IPSec, and ECMP throughput plus Manager form-factor host scale

Frequently Asked Questions

What is the current VCAP-NV Design exam code in 2026?

The current code is 3V0-42.23 (VMware NSX 4.x Advanced Design). The earlier 3V0-42.20 (NSX-T Data Center 3.0 Design) is also accepted as the qualifying exam for VCAP-NV Design under Broadcom's published certification preparation guide.

How many questions does the VCAP-NV Design exam have and how long is it?

The 3V0-42.23 exam contains 55 items delivered in 135 minutes. Item types include multiple-choice, multiple-selection, build-list, matching, drag-and-drop, point-and-click, and hot-area.

What is the passing score for VCAP-NV Design?

The passing score is 300 on a scaled range of 100-500. Broadcom does not publish item weights, so candidates should target broad coverage across all five exam sections.

How much does the VCAP-NV Design exam cost?

The exam fee is $450 USD, paid to Pearson VUE at scheduling. The exam is offered in person at Pearson VUE test centers or online via OnVue remote proctoring.

What are the prerequisites to sit VCAP-NV Design?

Candidates must hold a current VMware NSX VCP-level certification (or accepted equivalent path) and pass the 3V0-42.23 (or 3V0-42.20) exam. The recommended training is the VMware NSX: Design course.

How is VCAP-NV Design different from VCAP-NV Deploy?

VCAP-NV Design tests architectural decisions (justifying choices for routing, security, HA, multi-site, scale) using scenario-based items, while VCAP-NV Deploy is a hands-on lab exam testing implementation skills. Many candidates pursue both for the full advanced track and as steps toward VCDX-NV.