Which command is used to verify the application of Distributed Firewall Rules applied to a VM on a KVM transport node?

Which command is used to verify the application of Distributed Firewall Rules applied to a VM on a KVM transport node?
A. esxcli network firewall get
B. esxcli network ip connection list
C. ovs-vsctl add-br br-int
D. ovs-appctl -t /var/run/openvswitch/nsxa-ctl dfw/rules <Vif ID>