An architect has been tasked with designing a blueprint containing web, application and database machines utilizing NSX for networking.
Upon provisioning, network traffic must be automatically restricted to allow:
The web server to communicate only to the application server

The application server to communicate to both the web and database servers

The database server to be blocked from communicating to the other servers

Which two methods could the architect use to accomplish this? (Choose two.)