How is security managed in multi-tenant MEF SD-WAN services?

• A. Tenants have isolated policies and encryption keys, with dedicated overlays or segmentation within shared infrastructure, controlled via role-based access and tenant isolation.
• B. Tenants share all encryption keys and overlays to simplify management.
• C. Security is managed only at the provider's core network boundary.
• D. Tenants have no access control separation.

Answer: (A)

Security in a multi-tenant MEF SD-WAN service hinges on strong isolation and precise access controls. Each tenant has its own policies and encryption keys, and traffic is kept separate inside the shared fabric through dedicated overlays or network segmentation. This means tenants can operate securely without exposes to each other’s data, even though the physical network is shared. Managing who can do what is also restricted with role-based access control, so users can only manage resources within their own tenant scope. The other approaches would undermine security: sharing encryption keys and overlays breaks data isolation; handling security only at the provider’s core boundary leaves tenant traffic exposed inside the network; and lacking access control separation would allow cross-tenant access.