An administrator has been tasked with assigning a policy to a group of VMs.

The administrator should create a custom group , assign a common tag to the target VMs, and define the group membership criteria based on that tag. This satisfies the requirement for automatic updates because the group must be dynamic rather than manually maintained. VCF Operations supports custom object groups with either manual or dynamic membership. For dynamic groups, VCF Operations discovers objects that match the defined rules and keeps membership current as objects are added, removed, or changed . The custom group workspace allows the administrator to define membership criteria using object type, metrics, relationships, properties, object name, or tag . The documentation specifically identifies tag-based membership criteria as a supported method for creating dynamic custom groups . Because the VMs do not share a naming convention and are on different subnets, object name and network criteria are unsuitable. Adding each VM manually would create a static group, which would not automatically update when the application owner adds or removes VMs. Reference topic: Objective 4.5 – Managing VCF Operations with VCF Policy / Custom Groups / Dynamic Membership / Policy Assignment .