Dynamic Address Groups in a non-NSX firewall?

Which configuration is requiredto share NSX security groups as tags to be used by

Dynamic Address Groups in a non-NSX firewall?
A . notify device groups within VMware Services Manager
B . a User-ID agent on a Windows domain server
C . VMware Information Sources
D . none, sharing happens by default

Answer: B