An administrator wants to be alerted when production VMs become idle. The VMs will be determined to be idle when CPU usage is lower than 5% for more than 5 minutes. All affected VMs are categorized as Environment:Production, since they have Flow microsegmentation rules.
What should the administrator do to satisfy this requirement?
To satisfy the requirement, the administrator should create an alert specifically for VMs in the Environment:Production category, which will ensure that only the relevant VMs are monitored. Creating a Playbook with this alert as the trigger and sending an email as the action ensures that the administrator is alerted when the production VMs become idle. This method is efficient and directly targets the specified VMs without unnecessary actions or broader scope.
You can create an alert based on vms or category, so also D is correct
D seems to be a better answer. B and C include action. Question says that admin wants to be alerted. A is targeting all VMs. Only Prod VMs are needed for the alert.
D seems more accurage
Answer is D because the target VMs are in a category