Free VMware 3V0-25.25 Practice Test Questions 2026

An administrator is configuring an NSX segment used by a nested hypervisor deployment where an ESXi VM runs on an ESXi host and multiple VMs run inside the ESXi VM. Which segment profile must be created to satisfy the request?

A. IP Discovery

B. Security

C. MAC Discovery

D. Spoof Guard

An administrator is upgrading an existing VMware Cloud Foundation (VCF) environment. An NSX Edge Cluster is required to support north-south traffic for a workload domain. How would the administrator initiate the edge cluster deployment?

A. From the VCF Installer.

B. Through VCF Operations Fleet Manager.

C. From vCenter Network Connectivity wizard.

D. From the vCenter Server Appliance Management Interface (VAMI).

An administrator needs to prevent the datacenter from advertising any internal prefixes toward a new VPC, while still ensuring the VPC receives a default route learned from the datacenter's upstream network. Where should the routing policy be applied?

A. On each segment default gateway.

B. On the Tier-1 gateway.

C. On the VPC transit gateway.

D. On the provider Tier-0 neighbor.

The network team has decided to use a single Edge Cluster to provide Tier-0 A/A Gateway routing and Tier-1 Gateway A/S services.
The active Tier-1 with a Gateway Firewall service is on EN2.

Which highlighted options will show the ECMP paths used by that Tier-1 GFW?

An administrator is troubleshooting BGP flapping in a VMware Cloud Foundation (VCF) 9 environment. A Tier-0 Gateway is running in Active/Active mode with two Edge nodes. BFD is enabled on the eBGP sessions to the upstream routers. Each Edge node uses its own uplink IP for BGP. After some network maintenance, one BGP session starts flapping every few minutes. The other BGP sessions stay stable. On the affected Edge node, the command get bfd-sessions shows:

• State: Down
• Diag: Detect Time Expired

Symptoms:

• The upstream router also shows the BFD session as Down with control Detection Time Expired.
• There are no interface errors, no packet loss for normal traffic, and clearing the BFD session temporarily brings it back up - but it flaps again after few minutes.

What is the root cause?

A. BFD timers are mismatched between Tier-0 Gateway and the upstream routers.

B. The MTU does not match on the end-to-end between Tier-0 Gateway and upstream routers.

C. BFD is configured in echo mode on the upstream routers.

D. The Edge nodes are undersized and are experiencing high contention on CPU and drops BFD packets.

An administrator must provide North/South connectivity for a VPC. The fabric exposes a distributed external VLAN across all ESX hosts. But, the only BGP peer to the core is on a VLAN only accessible on the Edge Cluster. Which design is required?

A. Use a VPC Tier-0 Gateway in active/active mode with distributed eBGP peering.

B. Distributed Transit Gateway with an EVPN route reflector on the transport nodes.

C. Centralized Transit Gateway on the Edge Cluster.

D. Deploy a Provider Tier-1 with BGP and connect the VPC Transit Gateway via route leaking.

During a design review, the administrator is asked to explain which underlying technology enables the NSX Edge to perform fast packet processing and achieve near line-rate performance for Virtual Network Functions (VNFs). Which technology is leveraged in the NSX Edge for fast packet processing?

A. Data Plane Development Kit (DPDK)

B. AMD Power Now

C. Non-Uniform Memory Access (NUMA)

D. Intel Speed Step

An administrator is preparing to deploy a new workload domain that will host vSphere Kubernetes Service (VKS) clusters. Before configuring the network for the Kubernetes clusters, the administrator needs to create a Tier-0 Gateway to handle North/South connectivity. What is the requirement for creating a Tier-0 Gateway for use with a workload domain that is running the vSphere Kubernetes service (VKS) with VPC?

A. The Tier-0 Gateway route map must contain an IP prefix with only a deny rule.

B. The Tier-0 Gateway must be configured in Non-Preemptive failover mode.

C. The Tier-0 Gateway must be configured in Active/Standby mode.

D. The Tier-0 Gateway must have IPv6 enabled.