Parks wants ICMP allowed for monitoring between environments but must not allow RDP. What should the administrator write?
Select an answer to reveal the explanation.
Short Explanation
Any-any is a master key; ICMP-only is a labeled spare. Write the monitoring allow on ICMP and keep RDP out of the path. Gateway-only thinking and treating ping as malware miss the least-privilege service list.
Full Explanation
NSX-T firewall rules should specify the services that are actually required. Allowing ICMP for parks monitoring while denying or omitting RDP is least privilege; an any-any allow defeats that goal. Distributed Firewall can match ICMP as a service, so gateway-only is not required. Carbon Black Cloud prevention is not the tool for allowing ICMP between environments.