An administrator is using Flow Network Security to secure a 3-tier application and has already...

From a Nutanix exam perspective, this question is really testing whether the administrator understands the control point that actually governs the behavior shown in the scenario. The correct response is C, meaning “Create the Policy in Monitor mode, review the discovered traffic, allow the required traffic flows, and move Policy to Enforce mode.”. Monitor mode is designed for observation rather than enforcement. In Nutanix Flow, it discovers and visualizes matching traffic so an administrator can validate real application behavior before converting the policy to active enforcement. That is why the correct response focuses on visibility, not blocking. Enforce mode is the stage where Flow stops acting like a discovery tool and starts behaving like a stateful control point. Traffic allowed by the policy continues normally, while traffic that does not match an allowed rule is denied according to policy logic. This is a Flow policy design question, so categories, secured entities, rule direction, policy mode, and policy precedence matter more than simple IP connectivity assumptions. Notice that A sounds plausible, but it does not align with the specific Flow policy object or precedence rule that controls this case. B sounds plausible, but it does not.