2V0-41.24
Coming Soon
Expected availability announced soon
This course is in active development. Preview the scope below and create a free account to be notified the moment it goes live.
2V04124 NSX Professional (2V0-41.24)
VMware Certified Professional - Network Virtualization (2V0-41.24) trains IT professionals to design, deploy, and manage NSX environments, covering architecture, logical switching, routing, security, and network services.
135
Minutes
70
Questions
300/500
Passing Score
$250
Exam Cost
Who Should Take This
Network engineers, system administrators, or solutions architects who have at least two years of experience with VMware vSphere and basic networking concepts should consider this certification. They aim to validate their ability to implement NSX logical switching, routing, security policies, and advanced network services, positioning them for senior roles in data‑center and cloud networking.
What's Covered
1
Domain 1: NSX Architecture and Deployment
2
Domain 2: Logical Switching
3
Domain 3: Logical Routing
4
Domain 4: Security
5
Domain 5: Network Services
6
Domain 6: NSX Federation and Multi-Site
7
Domain 7: Monitoring and Operations
What's Included in AccelaStudy® AI
Adaptive Knowledge Graph
Practice Questions
Lesson Modules
Console Simulator Labs
Exam Tips & Strategy
20 Activity Formats
Course Outline
70 learning goals
1
Domain 1: NSX Architecture and Deployment
2 topics
Architecture
- Apply NSX 4.x architecture knowledge to deploy and configure NSX Manager clusters, transport zones, and transport node preparation.
- Apply NSX Manager cluster deployment with three nodes, VIP configuration, and backup scheduling for management plane resilience.
- Analyze NSX deployment modes (policy vs manager) and determine the appropriate approach for greenfield versus brownfield environments.
- Analyze NSX Manager cluster health, Corfu database status, and inter-node synchronization to diagnose management plane issues.
- Design an NSX deployment architecture specifying manager sizing, transport zone layout, and host preparation strategy for enterprise scale.
Transport Infrastructure
- Apply transport node preparation for ESXi hosts including N-VDS configuration, TEP IP assignment, uplink profiles, and transport zone membership.
- Apply edge node deployment with appropriate form factor, cluster configuration, and uplink connectivity for gateway services.
- Analyze transport node health including TEP tunnel status, overlay connectivity, and BFD session state for network troubleshooting.
- Analyze edge cluster sizing requirements based on throughput needs, service count, and high availability requirements.
- Design a transport infrastructure architecture specifying transport zones, TEP pools, uplink profiles, and edge cluster placement.
2
Domain 2: Logical Switching
2 topics
Segment Configuration
- Apply NSX segment creation and configuration including overlay/VLAN backing, subnet, gateway, DHCP, and segment profiles.
- Apply segment profile configuration for MAC discovery, IP discovery, SpoofGuard, segment security, and QoS policies.
- Analyze segment connectivity issues using ARP tables, TEP reachability, and Geneve encapsulation to troubleshoot overlay networking.
- Analyze the performance impact of segment profile settings including SpoofGuard enforcement and MAC learning on high-throughput workloads.
- Design a segment architecture for multi-tenant environments specifying naming conventions, profile assignments, and IPAM integration.
Bridging and Integration
- Apply edge bridging configuration to connect overlay segments to physical VLAN networks for migration and legacy integration.
- Apply VLAN segment configuration for edge uplinks, management connectivity, and physical workload access.
- Analyze bridging performance and failure scenarios including edge node failures and bridge failover behavior.
- Analyze integration options between NSX segments and external networks including routing, bridging, and VLAN trunk approaches.
- Design a network integration strategy combining overlay segments, VLAN segments, and bridging for phased migration to NSX.
3
Domain 3: Logical Routing
2 topics
Gateway Configuration
- Apply Tier-0 gateway configuration including BGP peering, OSPF adjacency, static routes, ECMP, route maps, and HA mode selection.
- Apply Tier-1 gateway configuration including connected segments, NAT rules, DHCP server/relay, DNS forwarding, and route advertisement.
- Analyze routing table outputs and BGP neighbor states to troubleshoot north-south connectivity and route propagation issues.
- Analyze the distributed routing datapath for east-west traffic and centralized routing for stateful services on edge nodes.
- Design a routing architecture specifying Tier-0/Tier-1 topology, BGP AS design, ECMP utilization, and route redistribution policies.
Advanced Routing
- Apply route redistribution between Tier-0 and Tier-1 gateways and between NSX and physical routers using route maps and prefix lists.
- Apply multi-tenancy routing with VRF-lite on Tier-0 gateways to provide isolated routing tables for different tenant workloads.
- Analyze VRF routing isolation to verify tenant traffic separation and identify route leaking between VRF instances.
- Analyze equal-cost multipath (ECMP) behavior for north-south traffic distribution across multiple edge uplinks.
- Design a multi-tenant routing architecture using VRF-lite, route distinguishers, and inter-VRF routing policies for tenant isolation.
4
Domain 4: Security
2 topics
Distributed Firewall
- Apply distributed firewall policy creation with sections, rules, groups, context profiles, and applied-to scope for micro-segmentation.
- Apply security group design using dynamic membership criteria (tags, VM names, segments, OS type) for scalable rule management.
- Analyze DFW rule hit counts, flow logs, and firewall exclusion lists to troubleshoot blocked traffic and policy violations.
- Analyze DFW context profile usage for Layer 7 application identification and its impact on firewall processing performance.
- Design a micro-segmentation strategy with policy hierarchy, zone-based rules, and emergency override procedures for enterprise environments.
Advanced Security
- Apply NSX Gateway Firewall rules for north-south perimeter security with stateful inspection and URL filtering.
- Apply NSX Distributed IDS/IPS configuration including signature profiles, exclusions, and integration with threat intelligence feeds.
- Analyze IDS/IPS alerts to distinguish true positives from false positives and tune signature sensitivity for operational environments.
- Analyze NSX malware prevention and sandboxing capabilities for detecting zero-day threats in east-west traffic.
- Design a comprehensive NSX security architecture combining DFW, Gateway Firewall, IDS/IPS, malware prevention, and NDR for defense-in-depth.
5
Domain 5: Network Services
2 topics
Load Balancing and NAT
- Apply NSX load balancer configuration with L4/L7 virtual servers, server pools, health monitors, persistence, and SSL termination.
- Apply NAT configuration (SNAT, DNAT, reflexive NAT, no-NAT) on Tier-0 and Tier-1 gateways for address translation requirements.
- Analyze load balancer health monitor failures and pool member status to troubleshoot application availability issues.
- Analyze NSX Advanced Load Balancer (Avi) integration as replacement for native NSX load balancing for advanced features.
- Design a load balancing architecture selecting between NSX native LB and NSX ALB based on feature requirements and scale.
VPN and Network Extension
- Apply IPsec VPN configuration for policy-based and route-based site-to-site tunnels between NSX edge and remote endpoints.
- Apply L2 VPN configuration for stretching Layer 2 segments between sites for disaster recovery and migration scenarios.
- Analyze VPN tunnel failures by examining IKE negotiation logs, IPsec SA status, and routing table entries.
- Analyze the tradeoffs between IPsec VPN, L2 VPN, and HCX network extension for different connectivity use cases.
- Design a VPN architecture for multi-site connectivity specifying tunnel configuration, routing, and redundancy for stated requirements.
6
Domain 6: NSX Federation and Multi-Site
2 topics
Federation
- Apply NSX Federation deployment to extend consistent networking and security policies across multiple NSX Manager instances.
- Apply Global Manager configuration for location-aware policies, stretched segments, and cross-site firewall rules.
- Analyze federation synchronization issues between Global Manager and Local Managers affecting policy consistency.
- Analyze stretched segment behavior during site failures including gateway failover and traffic rerouting.
- Design a multi-site NSX architecture using federation for consistent policy management, DR, and workload mobility.
NSX Cloud and Integration
- Apply NSX integration with VMware Cloud on AWS for consistent networking and security in hybrid cloud environments.
- Apply NSX integration with Kubernetes (Antrea, NCP) for pod networking, network policies, and load balancer services.
- Analyze NSX-Kubernetes integration issues including pod connectivity, network policy enforcement, and ingress routing.
- Analyze NSX public cloud integration options for extending micro-segmentation to AWS, Azure, and GCP native workloads.
- Design an NSX multi-cloud strategy specifying federation, cloud integration, and consistent security policies across environments.
7
Domain 7: Monitoring and Operations
2 topics
Monitoring
- Apply NSX monitoring using Manager dashboard, system alarms, Traceflow, IPFIX, port mirroring, and syslog forwarding.
- Apply Traceflow for packet path verification through logical switches, routers, and firewalls to diagnose connectivity issues.
- Analyze NSX component health using alarm history, certificate status, and edge cluster utilization metrics.
- Analyze IPFIX flow data to identify traffic patterns, policy violations, and potential security threats in the virtual network.
- Design an NSX monitoring strategy with alerting, flow analysis, and integration with Aria Operations for Networks.
Troubleshooting
- Apply NSX troubleshooting using Edge CLI, central CLI, packet capture, and support bundle analysis for network issues.
- Apply NSX Manager cluster recovery procedures for failed nodes, database corruption, and backup restoration.
- Analyze NSX upgrade failures identifying pre-check blockers, version incompatibilities, and rollback procedures.
- Analyze data plane connectivity failures differentiating between overlay issues, routing problems, and firewall blocking.
- Design NSX troubleshooting procedures with diagnostic workflows, escalation criteria, and recovery playbooks.
Scope
Included Topics
- NSX 4.x architecture, deployment, logical switching/routing, distributed/gateway firewalls, IDS/IPS, load balancing, VPN, federation, monitoring, and troubleshooting aligned to VCP-NV.
- NSX Manager, transport zones, segments, Tier-0/Tier-1 gateways, edge clusters, DFW micro-segmentation, advanced security, and NSX integration with VCF/Tanzu.
Not Covered
- VCAP-level advanced NSX design.
- Physical network vendor-specific configurations.
- NSX API development and custom plugins.
Official Exam Page
Learn more at VMware/Broadcom
2V0-41.24 is coming soon
Adaptive learning that maps your knowledge and closes your gaps.
Create Free Account to Be Notified