In which way should the administrator meet this requirement?

An administrator is deploying a three-tier application on a Nutanix Enterprise Cloud consisting of web, application, and database VMs. Traffic between the servers must be limited to specific services/ports. There is an application layer firewall VM deployed on one host in the cluster.

In which way should the administrator meet this requirement?
A . Create a network for each type of VM, and use policy-based routing to control the traffic flow
B. Configure a security policy and service chain redirecting the server traffic through the firewall
C. Separate the web. application and database VMs on to dedicated VLANs
D. Categorize the VMs in Prism Central and utilize Flow to set a security policy

Answer: D