Clinic VMs on the same overlay segment must not talk east-west except for approved application ports. Which NSX-T feature enforces that micro-segmentation?
Select an answer to reveal the explanation.
Short Explanation
Micro-segmentation is a lock on each clinic vNIC, not a trip to a hardware firewall. That lock is Distributed Firewall. vMotion moves VMs, vSAN encrypts disks, and BLAST draws desktops.
Full Explanation
Distributed Firewall enforces east-west policy at the virtual NIC, which is NSX-T micro-segmentation. Workloads on the same segment can still be isolated except for approved ports. vMotion is live migration, not a firewall. vSAN encryption protects data at rest. Horizon BLAST is a display protocol and is not micro-segmentation.