What are two valid options when configuring the scope of a distributed firewall rule? (Choose two.)

A group is a logical construct that represents a collection of objects in NSX, such as segments,

segment ports, virtual machines, IP addresses, MAC addresses, tags, or security policies. A group can

be used to define dynamic membership criteria based on various attributes or filters. A group can

also be used as the scope of a distributed firewall rule, which means that the rule will apply to all the

traffic that matches the group membership criteria32

Reference: https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.2/administration/GUID41CC06DF-1CD4-4233-B43E-492A9A3AD5F6.html https://docs.vmware.com/en/VMware-NSX-Data-

Center-for-vSphere/6.4/com.vmware.nsx.admin.doc/GUID-D44C8923-992F-4695-B9C0-

5CC271679D09.html