VCP-NV validates network virtualization expertise centered on NSX, micro-segmentation, and software-defined networking, while VCP-CMA validates cloud management and automation expertise centered on Aria Operations, Aria Automation, and observability, and the two serve genuinely different roles within the same VMware-managed environment.
The direct answer: Choose VCP-NV if your work is network architecture, security segmentation, and software-defined networking specifically. Choose VCP-CMA if your work is monitoring, capacity planning, automation, and infrastructure as code across a VMware environment. Both are Associate-level, both typically run around $250, and both assume foundational vSphere knowledge as a practical baseline even though neither formally requires it. Full official track details live on Broadcom’s VMware certification page.
VCP-NV vs VCP-CMA at a Glance
| Detail | VCP-NV | VCP-CMA |
| Full track name | Network Virtualization | Cloud Management and Automation |
| Core technology | NSX | Aria Operations, Aria Automation, Aria Operations for Logs, Aria Automation Orchestrator |
| Cost | Approximately $250 | Approximately $250 |
| Assumes | Networking background, vSphere fundamentals | vSphere or VCF context, since Aria integrates with both |
| Career direction | Network architect, security segmentation specialist | Cloud automation architect, platform operations |
| Pairs naturally with | VCP-VCF for SDDC architects and senior infrastructure engineers | VCP-DCV or VCP-VCF, since Aria assumes that underlying platform knowledge |
| VCAP-level follow-on | VCAP-NV Design and Deploy | VCAP-CMA, though Broadcom’s Aria-specific VCAP content is still maturing post-acquisition |
Important: Neither track is a beginner’s starting point. Both assume you already hold, or are close to holding, foundational vSphere-level knowledge. Broadcom does not formally enforce this as a prerequisite, but candidates who skip it consistently report both exams moving faster than expected. For the foundational decision that comes before either of these specialization tracks, see our VCP-DCV vs VCP-VCF comparison.
What VCP-NV Actually Tests
VCP-NV centers on NSX, VMware’s network virtualization platform, and the software-defined networking principles that increasingly replace traditional hardware-centric network security.
| Topic Area | What You Demonstrate |
| Network virtualization fundamentals | Core NSX architecture and how it abstracts networking from physical hardware |
| Micro-segmentation | Implementing granular security policies at the workload level rather than the network perimeter |
| Distributed firewalling | Configuring and managing NSX’s distributed firewall capabilities |
| Software-defined networking integration | How NSX connects with and extends vSphere and VCF environments |
Key point: Network engineers transitioning from traditional, hardware-centric networking into software-defined environments consistently find VCP-NV the most natural entry point of any VMware specialization track, since the underlying networking concepts, routing, segmentation, security zones, transfer directly even as the tooling changes completely.
What VCP-CMA Actually Tests
VCP-CMA centers on the Aria product suite, formerly branded vRealize Suite, covering the operational layer that sits on top of a VMware environment.
| Topic Area | What You Demonstrate |
| Aria Operations | Monitoring, capacity planning, and compliance across a VMware-managed environment |
| Aria Automation | Infrastructure as code, service catalogs, and cloud account management |
| Aria Operations for Logs | Log aggregation and analytics for troubleshooting and security visibility |
| Aria Automation Orchestrator | Workflow automation connecting Aria’s components together |
Note: VCP-CMA also touches how Aria integrates with both vSphere and NSX specifically, which is why Broadcom positions it as the entry point for candidates who already hold VCP-DCV or VCP-VCF rather than a true standalone starting certification. Aria’s product scope continues evolving as Broadcom’s post-acquisition consolidation matures, so candidates pursuing this track should expect to revisit their study plan periodically as the platform’s scope shifts.
The Career Fork Explained
| If Your Work Involves | Choose |
| Designing and securing virtualized networks | VCP-NV |
| Micro-segmentation and distributed firewall policy | VCP-NV |
| Monitoring and capacity planning across a VMware estate | VCP-CMA |
| Building automation workflows and infrastructure as code | VCP-CMA |
| Security architecture within a software-defined network | VCP-NV |
| Observability, logging, and operational analytics | VCP-CMA |
| Becoming an SDDC architect or senior infrastructure engineer | Consider both, paired with VCP-VCF |
| Platform engineering, SRE, or cloud operations roles | VCP-CMA |
Some senior infrastructure and architecture roles genuinely draw on both tracks, particularly as organizations consolidate around VMware Cloud Foundation, where NSX and Aria both operate as integrated components rather than standalone products.
Cost and Preparation
Required Costs
| Item | VCP-NV | VCP-CMA |
| Exam fee | Approximately $250 | Approximately $250 |
| Retake fee | Full price again | Full price again |
Strongly Recommended Supplementary Costs
| Item | Amount | Notes |
| Study guides and video courses | $100 to $400 | Not mandatory since May 2024, still widely used |
| Hands-on lab environment | $0 to $300 | NSX-specific labs benefit from dedicated network topology practice |
| Practice exam platform | $50 to $150 | Especially useful given Aria’s evolving scope for VCP-CMA specifically |
The honest total: Most candidates preparing seriously for either exam spend $350 to $650 all in. VCP-NV candidates typically invest more heavily in dedicated network lab topology practice, while VCP-CMA candidates need to stay current with Aria’s product documentation specifically, since its scope shifts more than NSX’s more settled architecture.
Who Should Pursue VCP-NV, and Who Should Pursue VCP-CMA
Network engineers moving from traditional hardware networking into software-defined environments. VCP-NV is the most natural entry point, since core networking concepts transfer directly even as the underlying tooling changes completely.
Security-focused engineers responsible for micro-segmentation and workload-level policy. VCP-NV directly validates this increasingly important security architecture skill, as organizations move away from perimeter-only network security models.
Platform engineers, SREs, and cloud operations teams responsible for observability and automation. VCP-CMA directly validates the monitoring, capacity planning, and infrastructure-as-code skills these roles require daily.
Anyone targeting an SDDC architect or senior infrastructure engineer role. Pairing VCP-VCF with VCP-NV specifically is an increasingly expected combination for this career stage, since it demonstrates both deep platform knowledge and deep networking knowledge together. For the complete tier-by-tier roadmap across all 6 VMware tracks, see our VMware Certification Path guide.
Common Mistakes When Choosing Between These Tracks
Assuming either track is a beginner starting point. Both assume vSphere-level foundational knowledge as a practical baseline, and candidates who skip that foundation consistently struggle more than expected with either exam.
Choosing VCP-CMA without holding VCP-DCV or VCP-VCF first. Aria’s content assumes you already understand the underlying vSphere or VCF platform it operates on top of, and skipping that context makes VCP-CMA meaningfully harder to prepare for.
Treating NSX and Aria as competing rather than complementary skill sets. Many senior infrastructure and architecture roles, particularly SDDC architect positions, genuinely draw on both, and pursuing only one can leave a real gap for candidates targeting that career stage.
Assuming VCP-CMA’s scope is stable and settled. Broadcom’s ongoing Aria product consolidation means this track’s content continues to evolve more than NSX’s, and candidates should expect to revisit study materials closer to their actual exam date.
Pursuing the VCAP-level follow-on for either track without confirming current availability and structure. VCAP-CMA specifically remains less standardized than other VCAP tracks as Broadcom’s Aria product line continues maturing post-acquisition.
Frequently Asked Questions
What is the difference between VCP-NV and VCP-CMA?
VCP-NV validates network virtualization expertise centered on NSX, micro-segmentation, and software-defined networking. VCP-CMA validates cloud management and automation expertise centered on Aria Operations, Aria Automation, and observability tooling.
Do I need VCP-DCV or VCP-VCF before pursuing VCP-NV or VCP-CMA?
Not formally required by Broadcom, but both tracks assume foundational vSphere or VCF knowledge as a practical baseline. VCP-CMA specifically integrates with and assumes that underlying platform context more directly than VCP-NV does.
Which track is better for a network security career?
VCP-NV, since it centers directly on NSX’s micro-segmentation and distributed firewall capabilities, which map closely to modern software-defined network security responsibilities.
Which track is better for a platform engineering or SRE career?
VCP-CMA, since it validates the monitoring, capacity planning, and automation skills central to platform engineering and site reliability roles in a VMware-managed environment.
Can I hold both VCP-NV and VCP-CMA?
Yes, and this combination is increasingly common for senior infrastructure engineers and SDDC architects, particularly at organizations running the full VMware Cloud Foundation stack where both NSX and Aria operate as integrated components.
How much does VCP-NV or VCP-CMA cost?
Both cost approximately $250 for the exam, consistent with Broadcom’s standardized VCP-level pricing introduced in May 2024.
Is VCP-CMA’s content stable, or does it change frequently?
It changes more than most VMware certification tracks, reflecting Broadcom’s ongoing consolidation of the Aria product line following the VMware acquisition. Candidates should verify current exam content close to their actual test date.
What career comes after VCP-NV?
VCAP-NV Design and Deploy, for candidates specializing deeply in network virtualization architecture, followed eventually by VCIX-NV and potentially VCDX-NV for those pursuing the highest tier of network architecture expertise.
What career comes after VCP-CMA?
VCAP-CMA, though this track remains less standardized than other VCAP-level credentials as Broadcom continues maturing the Aria product line post-acquisition.
Is NSX or Aria more relevant to VMware Cloud Foundation specifically?
Both are integrated components of VCF. NSX handles network virtualization within the platform, while Aria handles the operational and automation layer on top of it, and VCF-focused architects typically need working knowledge of both.
