Free 3V0-25.25 Practice Test Questions 2026

An administrator is troubleshooting BGP flapping in a VMware Cloud Foundation (VCF) 9 environment. A Tier-0 Gateway is running in Active/Active mode with two Edge nodes. BFD is enabled on the eBGP sessions to the upstream routers. Each Edge node uses its own uplink IP for BGP. After some network maintenance, one BGP session starts flapping every few minutes. The other BGP sessions stay stable. On the affected Edge node, the command get bfd-sessions shows:

• State: Down
• Diag: Detect Time Expired

Symptoms:

• The upstream router also shows the BFD session as Down with control Detection Time Expired.
• There are no interface errors, no packet loss for normal traffic, and clearing the BFD session temporarily brings it back up - but it flaps again after few minutes.

What is the root cause?

A. BFD timers are mismatched between Tier-0 Gateway and the upstream routers.

B. The MTU does not match on the end-to-end between Tier-0 Gateway and upstream routers.

C. BFD is configured in echo mode on the upstream routers.

D. The Edge nodes are undersized and are experiencing high contention on CPU and drops BFD packets.

An administrator is investigating packet loss reported by workloads connected to VLAN segments in an NSX environment. Initial checks confirm:

• All VMs are powered on
• VLAN segment IDs are consistent across transport nodes
• Physical switch configurations are correct.

Which two NSX tools can be used to troubleshoot packet loss on VLAN Segments? (Choose two.)

A. Flow Monitoring

B. Traceflow

C. Packet Capture

D. Activity Monitoring

E. Live Flow

The administrator must configure Border Gateway Protocol (BGP) on the Tier-0 Gateway to establish neighbor relationships with upstream routers. Which two statements describe the Border Gateway Routing Protocol (BGP) configuration on a Tier-0 Gateway? (Choose two.)

A. EIGRP is configured by default.

B. Can be used as an Exterior Gateway Protocol.

C. The network is divided into areas that are logical groups.

D. It supports a 4-byte autonomous system number.

In an NSX environment, an administrator is observing low throughput and intermittent congestion between the Tier-0 Gateway and the upstream physical routers. The environment was designed for high availability and load balancing, using two Edge Nodes deployed in Active/Active mode. The administrator enables ECMP on the Tier-0 gateway, but the issues persist. Which action would address low throughput and congestion?

A. Convert Tier-1 gateways to be edgeless.

B. Disable NAT on the Tier-0 gateway.

C. Add an additional vNIC to the NSX Edge node.

D. Deploy additional Edge nodes.

Which two requirements are part of the registration process for Local Manager (LM) to a Global Manager (GM) in NSX for centralized management of network and security services across different workload domains deployed in separate locations? (Choose two.)

A. The LM will validate the GM license to perform the GM registration.

B. The external load balancer VIP is used for NSX Managers without requiring node API certificate updates.

C. The LM Cluster VIP / FQDN is provided for GM-LM communication.

D. The IP / FQDN of any of the 3 LM must be used for registration.

E. The GM-Active requests the LM IP / FQDN and admin credentials for registration.

An administrator is enabling IPv6-to-IPv4 communication for workloads hosted in an NSX environment. The workloads use IPv6-only addressing, but the external systems they must reach are IPv4-only. To provide this translation service, the administrator decides to configure NAT64. Which two following characteristics about NAT64 are true? (Choose two.)

A. NAT64 is stateless and requires gateways to be deployed in active-standby mode.

B. NAT64 requires the Tier-1 gateway to be configured in active-standby mode

C. NAT64 is supported on Tier-1 gateways only.

D. NAT64 is supported on Tier-0 and Tier-1 gateways.

E. NAT64 requires the Tier-1 gateway to be configured in active-active mode.

When using a DHCP Relay on a segment, which design restriction must be considered?

A. DHCP settings, DHCP options, and static bindings cannot be configured on the segment.

B. DHCP client requests cannot be relayed to the external DHCP servers.

C. DHCP settings, DHCP options, and static bindings can be configured on the segment.

D. DHCP Relay service is available to all the other segments in the network.

An administrator is troubleshooting why workloads in NSX cannot reach the external network 10.100.0.0/16. The Tier-0 Gateway is in Active/Active mode and has the following configuration:

• Uplink-1 (VLAN 100): 192.168.100.0/24 -> router R1 at 192.168.100.1
• Uplink-2 (VLAN 101): 192.168.101.0/24 -> router R2 at 192.168.101.1
• A static route for 10.100.0.0/16 was added with both next-hops (192.168.100.1 and 192.168.101.1).
• The Scope of this route is set to Uplink-1.

Symptoms:

• Virtual Machines (VMs) cannot reach 10.100.0.0/16
• Traceroute from the VM stops at the Tier-0 gateway with "Destination Net Unreachable"
• Pings from the Edge nodes to both 192.168.100.1 and 192.168.101.1 are success

What explains why workloads in NSX cannot reach the external network?

A. Static routes do not support Equal Cost Multi-Pathing (ECMP) in NSX.

B. The static route Scope is set to only one uplink interface, but the next-hops are on two different VLANs.

C. The next-hops should have been configured as the Tier-0's own uplink IPs instead of the routers IPs.

D. The physical routers are missing return routes.

An administrator is tasked to create a development environment with a Tier-1 gateway to host overlay segments for only East/West workload communication. North/South communication is also required. The solution will not include the following services: NAT, DHCP, VPN. Which step must the administrator take when creating the Tier-1 gateway?

A. Configure a Service Interface on the Tier-1 gateway to connect each overlay segment to provide the East/West communication.

B. Enable route advertisement and connect the Tier-1 gateway to the Tier-0 gateway.

C. Assign the Tier-1 gateway to an Edge Cluster before any segments are created.

D. Keep route advertisement disabled and leave the Tier-1 gateway disconnected from any Tier-0 gateway.

An administrator is upgrading an existing VMware Cloud Foundation (VCF) environment. An NSX Edge Cluster is required to support north-south traffic for a workload domain. How would the administrator initiate the edge cluster deployment?

A. From the VCF Installer.

B. Through VCF Operations Fleet Manager.

C. From vCenter Network Connectivity wizard.

D. From the vCenter Server Appliance Management Interface (VAMI).

An administrator needs to prevent the datacenter from advertising any internal prefixes toward a new VPC, while still ensuring the VPC receives a default route learned from the datacenter's upstream network. Where should the routing policy be applied?

A. On each segment default gateway.

B. On the Tier-1 gateway.

C. On the VPC transit gateway.

D. On the provider Tier-0 neighbor.

The network team has decided to use a single Edge Cluster to provide Tier-0 A/A Gateway routing and Tier-1 Gateway A/S services.
The active Tier-1 with a Gateway Firewall service is on EN2.

Which highlighted options will show the ECMP paths used by that Tier-1 GFW?