In which way should the administrator meet this requirement?

An administrator is deploying a three-tier application on a Nutanix Enterprise Cloud consisting of web, application, and database VMs. Traffic between the servers must be limited to specific services/ports. There is an application layer firewall VM deployed on one host in the cluster.

In which way should the administrator meet this requirement?
A . Create a network for each type of VM, and use policy-based routing to control the traffic flow
B . Configure a security policy and service chain redirecting the server traffic through the firewall
C . Separate the web. application and database VMs on to dedicated VLANs
D . Categorize the VMs in Prism Central and utilize Flow to set a security policy

Answer: D