Exam 350-401 topic 1 question 29 discussion

Provided answer is correct

C is correct Each VPN can have its own policies, routing, and security configurations, allowing different types of traffic to be securely transported over the SD-WAN fabric while maintaining isolation from other VPNs.

C is correct

C - From Cisco: [...] VPN Segmentation: Traffic isolation is key to any security strategy. Traffic that enters the router is assigned to a VPN, which not only isolates user traffic, but also provides routing table isolation. This ensures that a user in one VPN cannot transmit data to another VPN unless explicitly configured to do so. When traffic is transmitted across the WAN, a label is inserted after the ESP header to identify the VPN that the user’s traffic belongs to when it reaches the remote destination. <<<<< C IS CORRECT>>>>> Cisco SD-WAN Design Guide SOURCE: https://www.cisco.com/c/en/us/td/docs/solutions/CVD/SDWAN/cisco-sdwan-design-guide.html

C is the correct answer.

anyone can enlight me where the B answer is wrong? thank you

C is correct

Ref: Cisco SD-WAN (Viptela) Configuration Guide, Release 18.1 “… Segmentation (VPN) Overview This article illustrates the segmentation and VPN capabilities of the Viptela overlay network solution. Network segmentation has existed for over a decade and has been implemented in multiple forms and shapes. At its most rudimentary level, segmentation provides traffic isolation. The most common forms of network segmentation are virtual LANs, or VLANs, for Layer 2 solutions, and virtual routing and forwarding, or VRF, for Layer 3 solutions. …” A. common exchange point between two different services Wrong answer. B. attribute to identify a set of services offered in specific places in the SD-WAN fabric Wrong answer. C. virtualized environment that provides traffic isolation and segmentation in the SD-WAN fabric Correct answer. D. virtual channel used to carry control plane information Wrong answer.

voting. provided answer is correct.

The correct answer is C, the VPN service is not alway related with "Secure", into MPLS architecture is used for provide isolated traffic without "Secure" component, same as SD-WAN.

the V in VPN is for virtual.A vpn is a secure encrypted tunnel that does provide traffic segmentation so the answer is C 100%