What should the administrator do to meet the requirement?

An administrator of a Nutanix Enterprise Cloud has microsegmentation enabled and a firewall VM installed. The security team notifies the administrator that one of the VMs hosted in the environment has been exhibiting suspect network activity. The administrator wants to isolate the VM from the production network, but must still be able to access it to perform diagnostics.

What should the administrator do to meet the requirement?
A . Disable the vNIC on the affected VM
B . Quarantine the VM using the Forensic Method
C . Create a firewall rule that blocks VM traffic but permits diagnostic access
D . Create a security policy with a service chain directing that VMs traffic to the firewall VM

Answer: D

Explanation:

Ref https://portal.nutanix.com/page/documents/kbs/details?targetId=kA00e000000LIelCAG