A mission critical application with four VMs have been deployed inside of a six-node Nutanix cluster. An alert is generated that a node in the cluster has failed and is no longer online. After the alert, two of the VMs reboot and come back online on another node.

Which feature, when configured, would have prevented the two VMs from rebooting?