An administrator configures a new NSXoverlay segmentfor virtual desktops using default segment policies.

In NSX 4.x integrated with VCF 9.0,default segment security profiles block DHCP servers by default. TheNSX Admin Guidestates: “To allow DHCP servers on a segment, edit the applied segment security profile and set the DHCP Server Block option to NO.”

Cloning profiles (B, C) is an optional best practice but not required for functionality. The DHCP server block resides in thesecurity profile, not the IP discovery profile, making C and D incorrect. Therefore, the required step is toedit the default segment security profile, set DHCP Server Block = NO, and apply it.