To activate Malware Prevention on the NSX Application Platform, the steps are:
In the NSX Manager UI, select System and in the Configuration section, select NSX Application Platform.
Navigate to the Features section, locate the NSX Malware Prevention feature card, and click Activate or anywhere in the card.
In the NSX Malware Prevention activation window, select one of the available cloud regions from which you can access the NSX Advanced Threat Prevention cloud service. Click Run Prechecks.
This precheck process can take some time as the system validates that the minimum license requirement is met and that it is eligible for use with the NSX Advanced Threat Prevention cloud service. The system also validates that the selected cloud region is reachable. Click Activate.
This step can take some time.

IP Pool: This allows you to define a range of IP addresses within NSX that the TEPs can use.
DHCP Server: This enables the TEPs to automatically obtain IP addresses from a DHCP server configured in the network.

NSX Intelligence is a distributed analytics solution within the VMware NSX Portfolio that provides visibility and dynamic security policy enforcement in NSX environments. It enables detailed traffic analysis, identifies security threats, and helps in the automated creation and enforcement of security policies based on observed network traffic patterns and behaviors.

Tags are metadata that can be applied to physical servers, virtual machines, logical ports, and logical segments in NSX. Tags can be used for dynamic security group membership, which allows for granular and flexible enforcement of security policies based on various criteria. In the scenario, the company is deploying NSX micro-segmentation to secure a simple application composed of web, app, and database tiers.