If Access Control is enabled, the selected DNS in the profiles takes precedence. Otherwise, DNS over HTTPS (DoH) takes precedence over VPN DNS service. So if you configured NextDNS with DoH, then NextDNS will be used instead of the DNS from your VPN service.
That said, you can override the behavior in the VPN client configuration by checking the “Force VPN DNS” box.