A county tags new tax-system VMs with app=tax and env=prod and wants those VMs to inherit distributed firewall policy when they are cloned. What should the administrator build?
Select an answer to reveal the explanation.
Short Explanation
Tags are name badges the group engine already knows how to read. Badge a new tax VM and it walks into the policy—no clipboard of UUIDs.
Full Explanation
NSX-T security groups can use tag criteria so membership updates when operators tag a VM. Binding DFW policy to those groups is the scale pattern for clones. Static UUID lists, Carbon Black groups, and per-IP gateway rules do not provide dynamic NSX group inheritance.