Distributed Firewall rules for fleet-maintenance VMs should follow tags rather than static IP lists. Which NSX-T feature defines that dynamic membership?
Select an answer to reveal the explanation.
Short Explanation
Tag the fleet VMs and drop them in a group — the firewall then follows the name tag, not a typed IP list. Snapshots, Horizon pools, and vSAN policies are not that membership list.
Full Explanation
NSX tags and groups define dynamic membership that Distributed Firewall and gateway firewall can use as sources and destinations. That is the security-inventory feature for policy that follows workloads. vSphere snapshots capture VM state. Horizon desktop pools are EUC inventory. vSAN storage policies govern disks, not DFW membership.