300-320 · Question #631
Large enterprises with several departments need to have the flexibility to restrict users' communication from different departments across the campus and to the data center applications based on the…
The correct answer is D. Use network virtualization, in which each department will be assigned its own virtual network to. Network virtualization (Option D) - assigning each department its own virtual network (using technologies like VLANs, VRFs, or VXLAN) - provides logical isolation over shared physical infrastructure. This avoids the capital cost of separate physical networks (Option A), the…
Question
Large enterprises with several departments need to have the flexibility to restrict users' communication from different departments across the campus and to the data center applications based on the department they belong to. Which one of the following design approaches or mechanisms would you suggest using without introducing operational complexity or cost increases?
Options
- AProvision a separate physical network per department.
- BPlace a pair of firewalls at the data center and require users to use VPN to log in and access the
- CUse lists end to end across the network to achieve the required communication restriction
- DUse network virtualization, in which each department will be assigned its own virtual network to
How the community answered
(55 responses)- A13% (7)
- B4% (2)
- C7% (4)
- D76% (42)
Explanation
Network virtualization (Option D) - assigning each department its own virtual network (using technologies like VLANs, VRFs, or VXLAN) - provides logical isolation over shared physical infrastructure. This avoids the capital cost of separate physical networks (Option A), the operational overhead of managing VPN concentrators and firewall policies (Option B), and the administrative burden of maintaining complex ACL rulesets distributed across every network device end-to-end (Option C). Virtualization centralizes policy enforcement and scales cleanly as departments grow or change, keeping both cost and operational complexity low.
Topics
Community Discussion
No community discussion yet for this question.