nerdexam
HP

HPE7-A04 · Question #77

In a multi-tenant Data Center

The correct answer is A. VRF offers Layer 3 isolation for the tenants. VRF (Virtual Routing and Forwarding) provides Layer 3 isolation by creating separate, independent routing tables for each tenant - traffic between tenants cannot leak even if they share the same physical infrastructure, making it the correct choice for multi-tenant…

Designing for Virtualization, Automation, and Security

Question

In a multi-tenant Data Center

Options

  • AVRF offers Layer 3 isolation for the tenants
  • BMSTP offers Layer 2 isolation along with loop prevention
  • CVRF offers Layer 2 isolation for the tenants
  • DVLANs offer Layer 3 isolation for the tenants

How the community answered

(33 responses)
  • A
    91% (30)
  • B
    6% (2)
  • D
    3% (1)

Explanation

VRF (Virtual Routing and Forwarding) provides Layer 3 isolation by creating separate, independent routing tables for each tenant - traffic between tenants cannot leak even if they share the same physical infrastructure, making it the correct choice for multi-tenant environments.

Why the distractors are wrong:

  • B is partially true (MSTP does prevent loops), but MSTP is a spanning tree protocol variant - it operates at Layer 2 and does not provide tenant isolation; it just manages redundant links.
  • C is wrong because VRF operates at Layer 3 (the IP/routing layer), not Layer 2. Layer 2 isolation is handled by VLANs or similar mechanisms.
  • D flips the layers - VLANs provide Layer 2 isolation (segmenting broadcast domains), not Layer 3.

Memory tip: Think "V-R-F = Virtual Routing and Forwarding" - the word Routing anchors it to Layer 3. Conversely, "VLAN = Virtual LAN" - a LAN is a Layer 2 concept, so VLANs stay at Layer 2.

Topics

#VRF#multi-tenancy#L3 isolation#network segmentation

Community Discussion

No community discussion yet for this question.

Full HPE7-A04 Practice