What does placing a policy in Monitor mode accomplish?

The most professional way to evaluate this question is to map the symptom to the Nutanix feature responsible for that function rather than reacting to secondary details in the prompt. The correct response is A, meaning “Visualizes discovered traffic that matches the policy.”. Monitor mode is designed for observation rather than enforcement. In Nutanix Flow, it discovers and visualizes matching traffic so an administrator can validate real application behavior before converting the policy to active enforcement. That is why the correct response focuses on visibility, not blocking. Policy hitlogs provide precise evidence of what Flow evaluated, including source, destination, protocol, and rule outcome. In troubleshooting, that makes hitlogs one of the best places to confirm whether traffic matched an allow or deny decision. This is a Flow policy design question, so categories, secured entities, rule direction, policy mode, and policy precedence matter more than simple IP connectivity assumptions. Notice that B does not fit because it targets a different layer of the Nutanix networking and security stack than the one causing the outcome here. C does not fit because it targets a different layer of the Nutanix networking and security stack than the one causing.