A library validated Distributed Firewall policy in test and must apply the same intent in production. What is the preferred promotion method?
Select an answer to reveal the explanation.
Short Explanation
Groups are the labeled drawers: test catalog VMs in one, production in the other. Promote by swapping who sits in the group, not by photocopying IP scraps.
Full Explanation
Operational policy management uses group semantics so the same Distributed Firewall intent can move from test to production by changing membership. Copy-pasted IPs drift and skip the group model. Ethernet-only recreation and guest iptables are not NSX-T promotion practice.