blocking policies on a vnetwork distributed switch

At what level can blocking policies be applied on a vNetwork Distributed Switch (Choose Two)?