What must a network administrator implement in order to run an NAE script on an AOS-CX switch?

An administrator has configured the following on an AOS-CX switch:

What is the correct ACL rule configuration that would allow traffic from anywhere to reach the web ports on the two specified servers?

An administrator wants to implement dynamic segmentation policies. The network consists of AOS-CX and Aruba gateways.
Which type of forwarding should the administrator implement for users that already connect via wireless, but will also be connecting on Ethernet switch ports?

What is correct regarding multicasting and AOS-CX switches?

An administrator is configuring BGP and has two connections to a service provider to two different local routers.
Which BGP metric should the administrator configure to influence which local router the service provider will use to reach certain routes?