nerdexam
CompTIA

CV0-003 · Question #250

Tenants in a shared datacenter environment are concerned with the privacy of their data as it moves from the application to the database servers in clear text. Which of the following can the…

The correct answer is D. VLANs. This question tests knowledge of network segmentation techniques that isolate tenant traffic in shared datacenter environments to protect data in transit.

Security

Question

Tenants in a shared datacenter environment are concerned with the privacy of their data as it moves from the application to the database servers in clear text. Which of the following can the provider implement to isolate tenants' data?

Options

  • ABandwidth hard limits
  • BReservations
  • CResource pooling
  • DVLANs

How the community answered

(44 responses)
  • A
    5% (2)
  • B
    9% (4)
  • C
    14% (6)
  • D
    73% (32)

Why each option

This question tests knowledge of network segmentation techniques that isolate tenant traffic in shared datacenter environments to protect data in transit.

ABandwidth hard limits

Bandwidth hard limits cap the maximum throughput a tenant can consume to enforce fair usage, but apply no isolation or access control to network traffic content.

BReservations

Reservations guarantee a minimum resource allocation - such as compute or memory - for a tenant to ensure performance, which is unrelated to network traffic isolation or data privacy.

CResource pooling

Resource pooling aggregates shared physical resources for dynamic allocation among tenants and is a provisioning and efficiency concept, not a mechanism for isolating network traffic between tenants.

DVLANsCorrect

VLANs (Virtual Local Area Networks) use IEEE 802.1Q tagging to create logical Layer 2 segments on shared physical switches, ensuring that frames from one tenant's application-to-database traffic are invisible to other tenants' network segments. By assigning each tenant to a dedicated VLAN, the provider enforces traffic isolation so that even though data flows in clear text, no other tenant on the shared infrastructure can intercept or observe those frames.

Concept tested: VLAN-based Layer 2 tenant isolation in shared datacenter networks

Source: https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst9300/software/release/17-1/configuration_guide/vlan/b_171_vlan_9300_cg/configuring_vlans.html

Topics

#VLANs#tenant isolation#multitenancy#network segmentation

Community Discussion

No community discussion yet for this question.

Full CV0-003 Practice