nerdexam
Cisco

352-001 · Question #613

Which two statements about VXLAN are true? (Choose two)

The correct answer is B. VXLAN is an encapsulation method used to create a Layer 3 overlay network E. VXLAN overcomes the 802.1Q virtual LAN address space limitation. VXLAN is an open standards-based encapsulation protocol that tunnels Layer 2 Ethernet frames over a Layer 3 UDP/IP underlay, and its 24-bit VNI field vastly expands on the 4,096-segment limit of 802.1Q. These two properties are the core design characteristics defined in RFC 7348.

Network Virtualization

Question

Which two statements about VXLAN are true? (Choose two)

Options

  • AVXLAN is a Cisco proprietary solution
  • BVXLAN is an encapsulation method used to create a Layer 3 overlay network
  • CVXLAN can be used to enforce Layer 2 isolation in a multitenant infrastructure
  • DVXLAN uses the Spanning Tree protocol for loop prevention
  • EVXLAN overcomes the 802.1Q virtual LAN address space limitation

How the community answered

(34 responses)
  • A
    3% (1)
  • B
    94% (32)
  • D
    3% (1)

Why each option

VXLAN is an open standards-based encapsulation protocol that tunnels Layer 2 Ethernet frames over a Layer 3 UDP/IP underlay, and its 24-bit VNI field vastly expands on the 4,096-segment limit of 802.1Q. These two properties are the core design characteristics defined in RFC 7348.

AVXLAN is a Cisco proprietary solution

VXLAN is an open industry standard defined in IETF RFC 7348 and is implemented by multiple vendors including VMware, Arista, and Juniper - it is not a Cisco proprietary protocol.

BVXLAN is an encapsulation method used to create a Layer 3 overlay networkCorrect

VXLAN (RFC 7348) is an encapsulation method that wraps Layer 2 Ethernet frames inside UDP/IP packets, enabling them to be transported across a Layer 3 routed underlay network as an overlay. This allows Layer 2 segments to be extended across geographically separated data centers or network pods that are connected only by IP routing.

CVXLAN can be used to enforce Layer 2 isolation in a multitenant infrastructure

VXLAN provides logical network segmentation through VNIs but does not by itself enforce security isolation - true multi-tenant isolation requires additional policy enforcement mechanisms such as microsegmentation or firewall policies beyond VXLAN encapsulation alone.

DVXLAN uses the Spanning Tree protocol for loop prevention

VXLAN does not use Spanning Tree Protocol for loop prevention - loop avoidance is handled by the IP underlay routing and VTEP (VXLAN Tunnel Endpoint) logic, which eliminates the need for STP within the overlay.

EVXLAN overcomes the 802.1Q virtual LAN address space limitationCorrect

The IEEE 802.1Q standard supports only 4,096 VLAN IDs due to its 12-bit VLAN tag field, which is insufficient for large-scale multi-tenant cloud environments. VXLAN uses a 24-bit VXLAN Network Identifier (VNI) supporting approximately 16 million unique network segments, directly overcoming this address space limitation.

Concept tested: VXLAN encapsulation, VNI scalability, and 802.1Q limitation

Source: https://datatracker.ietf.org/doc/html/rfc7348

Topics

#VXLAN#overlay network#VLAN scalability#multitenant

Community Discussion

No community discussion yet for this question.

Full 352-001 Practice