CV0-003 Question #833: Real Exam Question with Answer & Explanation

The correct answer is C: VXLAN. VXLAN extends the virtual network identifier space from 4,096 VLANs to over 16 million logical networks, resolving VLAN exhaustion while maintaining per-tenant isolation.

Cloud Architecture and Design

Question

A company is concerned it will run out of VLANs on its private cloud platform in the next couple months, and the product currently offered to customers requires the company to allocate three dedicated, segmented tiers. Which of the following can the company implement to continue adding new customers and to maintain the required level of isolation from other tenants?

Options

AGRE
BSR-IOV
CVXLAN
DIPsec

Explanation

VXLAN extends the virtual network identifier space from 4,096 VLANs to over 16 million logical networks, resolving VLAN exhaustion while maintaining per-tenant isolation.

Common mistakes.

A. GRE is a point-to-point tunneling protocol that does not provide a scalable multi-tenant identifier space comparable to VXLAN VNIs.
B. SR-IOV is a hardware virtualization feature that partitions a physical NIC into virtual functions for performance, but it does not address VLAN ID exhaustion or tenant network segmentation at scale.
D. IPsec provides encryption and authentication for traffic between endpoints but does not create additional virtual network segments or solve the VLAN limit problem.

Concept tested. VXLAN scalable overlay networking for multi-tenancy

Reference. https://datatracker.ietf.org/doc/html/rfc7348

Topics

#VXLAN#VLAN exhaustion#network segmentation#multi-tenancy

Community Discussion

No community discussion yet for this question.

Full CV0-003 Practice