Public health must immediately stop a terminated analyst’s Active Directory group from reaching the EHR segment between virtual machines. What should the administrator configure?
Select an answer to reveal the explanation.
Short Explanation
Access can hide an app tile. It cannot tackle a VM that already talks east-west to the EHR. IDFW plus DFW is the user-named stop sign on that segment.
Full Explanation
Workspace ONE Access policies govern catalog and SSO access; they do not inspect east-west VM-to-VM traffic. Identity Firewall combined with the distributed firewall can deny an AD group on the EHR segment at the hypervisor. Carbon Black isolation and a north-south gateway allow-any do not replace user-based DFW on that overlay path.