What are two valid options when configuring the scope of a distributed firewall rule? (Choose two.)

What are two valid options when configuring the scope of a distributed firewall rule? (Choose two.)
A . DFW
B . Tier-1 Gateway
C . Segment
D . Segment Port
E . Group

View Answer

Answer: AE

Explanation:

A group is a logical construct that represents a collection of objects in NSX, such as segments, segment ports, virtual machines, IP addresses, MAC addresses, tags, or security policies. A group can be used to define dynamic membership criteria based on various attributes or filters. A group can also be used as the scope of a distributed firewall rule, which means that the rule will apply to all the traffic that matches the group membership criteria32

Reference:

https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.2/administration/GUID-41CC06DF-1CD4-4233-B43E-492A9A3AD5F6.html https://docs.vmware.com/en/VMware-NSX-Data-Center-for-vSphere/6.4/com.vmware.nsx.admin.doc/GUID-D44C8923-992F-4695-B9C0-5CC271679D09.html