In ZPA, Server Groups define back-end server reachability and are associated with App Connector Groups that can resolve and check those servers. Dynamic Server Discovery lets the mapped connector groups discover or resolve application servers and perform health checks before traffic is steered. Option D (Server Groups are configured for Dynamic Server Discovery so that mapped Connector Groups can DNS resolve and make health checks toward the application) is correct because Server Groups provide the discovery/health-check relationship to the mapped Connector Groups.

Why the other options are incorrect:

A. Server Groups are configured for Dynamic Server Discovery so that mapped Connector Groups can then DNS resolve individual application Segment Groups: A Server Group groups application servers and maps them to App Connector Groups that can reach those servers.

B. Connector Groups are configured for Dynamic Server Discovery so that mapped Server Groups can DNS resolve and advertise the applications: A Server Group groups application servers and maps them to App Connector Groups that can reach those servers.

C. Connector Groups are configured for Dynamic Server Discovery so that ZPA can steer traffic through the appropriate Server Group: A Server Group groups application servers and maps them to App Connector Groups that can reach those servers.