Question 460
A preventive architecture review covers this situation: A global enterprise needs provider-managed any-to-any routed private connectivity among hundreds of branches. Which preventive design control MOST DIRECTLY addresses this specific risk?
Explanation
Correct Answer
Document provider VPN isolation, resiliency and route-import controls in service contracts. This control targets the underlying design risk. A carrier MPLS L3VPN separates customer routing via provider VRFs and distributes eligible customer prefixes. The follow-up acceptance check remains: Routes remain in the intended VPN and all authorized branches exchange routed traffic.
Incorrect Answers
DWDM multiplexes distinct optical wavelengths onto one fiber pair to increase transport capacity. The repeat risk here is different: a carrier MPLS L3VPN separates customer routing via provider VRFs and distributes eligible customer prefixes. A directly relevant preventive control is: Document provider VPN isolation, resiliency and route-import controls in service contracts.
An SD-WAN edge participates in encrypted overlays and uses controller-distributed policy to steer traffic over eligible underlays. The repeat risk here is different: a carrier MPLS L3VPN separates customer routing via provider VRFs and distributes eligible customer prefixes. A directly relevant preventive control is: Document provider VPN isolation, resiliency and route-import controls in service contracts.
A Layer 2 VPN transports customer Layer 2 frames without making the carrier manage customer Layer 3 routes. The repeat risk here is different: a carrier MPLS L3VPN separates customer routing via provider VRFs and distributes eligible customer prefixes. A directly relevant preventive control is: Document provider VPN isolation, resiliency and route-import controls in service contracts.