An administrator is deploying a multi-tier (web, app, database) application on a Nutanix cluster using AHV. The administrator needs to allow internal communication between tiers and provide external access to the web tier.
How should the administrator satisfy this requirement?

When cloning a Flow Network Security policy, what should be verified before enabling Enforce mode?

A VPC admin creates a policy to allow traffic between two IP subnets but forgets to enable reverse direction.
What happens in this scenario?

When configuring an Application policy, an administrator defines a VM Category Application:MySQL as a Secured Entity. The administrator wants to ensure that traffic between VMs in the Secured Entity is kept to only required replication traffic on the default mysql service port.
How should the administrator best accomplish this?

Which prerequisite is required before enabling Flow Network Security Next-Gen micro segmentation?