Question 390
In a technical design review: During a predeployment review for a mixed-use industrial campus, the team discovers this design gap: a university has separate tenant networks that share physical core routers but must have isolated routing tables. An approval gate requires both a measurable acceptance check and a durable prevention control. Which technical principle BEST explains the design decision?
Explanation
Correct Answer
VRFs maintain logically separate routing and forwarding contexts on capable shared devices. The correct engineering response is: Use VRFs with explicit route-leak policy only for approved shared services. The observable check is: Tenant prefixes remain isolated while selected shared-service routes appear only where authorized. The mixed-use industrial campus acceptance record also captures this result.
Incorrect Answers
VRFs maintain logically separate routing and forwarding contexts on capable shared devices. The offered choice instead concerns a different principle: a documented hierarchy can limit topology complexity while preserving critical backup paths. Those technical conditions are not interchangeable.
VRFs maintain logically separate routing and forwarding contexts on capable shared devices. The offered choice instead concerns a different principle: Two-way redistribution can reintroduce routes into their source protocol without policy guards. Those technical conditions are not interchangeable.
VRFs maintain logically separate routing and forwarding contexts on capable shared devices. The offered choice instead concerns a different principle: DHCP snooping separates trusted DHCP sources from untrusted access ports and can block rogue server messages. Those technical conditions are not interchangeable.