CV0-003 · Question #250
Tenants in a shared datacenter environment are concerned with the privacy of their data as it moves from the application to the database servers in clear text. Which of the following can the…
The correct answer is D. VLANs. This question tests knowledge of network segmentation techniques that isolate tenant traffic in shared datacenter environments to protect data in transit.
Question
Tenants in a shared datacenter environment are concerned with the privacy of their data as it moves from the application to the database servers in clear text. Which of the following can the provider implement to isolate tenants' data?
Options
- ABandwidth hard limits
- BReservations
- CResource pooling
- DVLANs
How the community answered
(44 responses)- A5% (2)
- B9% (4)
- C14% (6)
- D73% (32)
Why each option
This question tests knowledge of network segmentation techniques that isolate tenant traffic in shared datacenter environments to protect data in transit.
Bandwidth hard limits cap the maximum throughput a tenant can consume to enforce fair usage, but apply no isolation or access control to network traffic content.
Reservations guarantee a minimum resource allocation - such as compute or memory - for a tenant to ensure performance, which is unrelated to network traffic isolation or data privacy.
Resource pooling aggregates shared physical resources for dynamic allocation among tenants and is a provisioning and efficiency concept, not a mechanism for isolating network traffic between tenants.
VLANs (Virtual Local Area Networks) use IEEE 802.1Q tagging to create logical Layer 2 segments on shared physical switches, ensuring that frames from one tenant's application-to-database traffic are invisible to other tenants' network segments. By assigning each tenant to a dedicated VLAN, the provider enforces traffic isolation so that even though data flows in clear text, no other tenant on the shared infrastructure can intercept or observe those frames.
Concept tested: VLAN-based Layer 2 tenant isolation in shared datacenter networks
Source: https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst9300/software/release/17-1/configuration_guide/vlan/b_171_vlan_9300_cg/configuring_vlans.html
Topics
Community Discussion
No community discussion yet for this question.