During a 911 failover test, an operator proposes putting restored CAD VMs on the Distributed Firewall exclusion list so recovery is faster. What should the administrator do?
Select an answer to reveal the explanation.
Short Explanation
Exclusion is pulling the fire alarm panel off the wall so the trucks can park closer. CAD still needs its groups and rules at the recovery site, not a recovery-time exclusion.
Full Explanation
The NSX-T Distributed Firewall exclusion list removes a VM from distributed enforcement and is not a recovery strategy. Restored CAD workloads must land in the same security groups and policy used in production. Leaving them excluded, disabling Guest Introspection to skip Distributed Firewall, or substituting a Workspace ONE profile does not preserve 911 isolation during failover.