Microsegmentation was recently enabled in a Nutanix environment. The administrator wants to leverage Prism Central to create a policy that will block all traffic, regardless of direction, between two groups of VMs identified by their category. Which policy should be used to meet this requirement?

An Isolation Environment Policy in Nutanix Flow (microsegmentation) is specifically designed to completely block all traffic between designated groups of VMs. When you create an isolation policy between two categories, it prevents any communication in either direction between VMs in those categories. This is the most direct and appropriate method for implementing complete traffic blocking between VM groups identified by their categories in Prism Central.

A. A Quarantine Policy: Used to isolate individual compromised VMs, not for blocking traffic between groups.

C. An Application Security Policy: Defines allowed traffic patterns between tiers; doesn't block all traffic by default.

D. A Whitelist-Based Policy: Defines what traffic is allowed, not designed for complete blocking between groups.

1. Nutanix Flow Guide - AOS 5.20, "Isolation Environment Policies" section, pages 45-47

2. Nutanix Security Operations Guide v2.0, "Policy Types and Use Cases", pages 112-115

3. Nutanix Prism Central Guide - AOS 5.20, "Microsegmentation Policy Configuration", pages 234-237

4. Nutanix Best Practices Guide - Flow Implementation, "Policy Selection Matrix", pages 78-80

5. Nutanix University - Flow Administration Course Materials, Module 4: "Policy Types and Applications", slides 22-25