The city wants every new VM tagged app=erp to receive Distributed Firewall policy without a weekly ticket. Which automation mechanism should the administrator use?
Select an answer to reveal the explanation.
Short Explanation
Tags are the automatic name badges on new city VMs. Stick app=erp on the VM, let a dynamic group catch it, and Distributed Firewall follows—no Friday CSV ritual.
Full Explanation
NSX-T groups can match security tags such as app=erp so membership and Distributed Firewall attachment update as inventory changes. That is the policy-automation mechanism. Weekly static CSV imports, disabling Distributed Firewall, and routing changes do not automate security policy attachment.