A network administrator is evaluating the HPE Aruba Networking CX 10000 Series with Pensando for deployment in a multi-tenant data center. The primary goal is to provide isolated network…

Question

Options

• AVLAN Trunking
• BVRF-Based Microsegmentation
• CLayer 2 Load Balancing
• DDNS Forwarding

• A
  22% (13)
• B
  63% (37)
• C
  10% (6)
• D
  5% (3)

Explanation

VRF-Based Microsegmentation is correct because VRFs (Virtual Routing and Forwarding instances) create completely isolated Layer 3 routing domains within a single physical switch - exactly what a multi-tenant data center needs. Each tenant gets its own VRF, meaning their traffic, routing tables, and security policies are logically separated from other tenants without requiring separate hardware. The Pensando DPU in the CX 10000 accelerates stateful policy enforcement per-VRF at line rate, enabling granular microsegmentation between workloads.

A (VLAN Trunking) is wrong because VLANs provide only Layer 2 separation; they don't create isolated routing domains or enforce independent security policies across tenants - they're a component of segmentation, not a complete solution. C (Layer 2 Load Balancing) is wrong because it distributes traffic across links for redundancy/throughput, addressing availability rather than tenant isolation or security policy enforcement. D (DNS Forwarding) is wrong because it's a name resolution function with no role in network isolation or microsegmentation.

Memory tip: Think "VRF = Virtual Router per tenant." If each tenant needs their own router (not just a VLAN), VRF is your answer - and microsegmentation signals the need for policy enforcement within those isolated domains, which is the Pensando DPU's specialty.

No community discussion yet for this question.