Security controls in multi-tenant MEF SD-WAN goals include which approach?

• A. Role-based access controls with tenant isolation and dedicated overlays.
• B. Tenants share encryption keys and overlays by default.
• C. Tenants have no isolation mechanisms.
• D. Security is managed only at the data center boundary with no tenant isolation.

Answer: (A)

In a multi-tenant MEF SD-WAN, security goals hinge on strict access control and complete tenant isolation carried through dedicated overlays. Role-based access controls ensure that only authorized personnel can manage or view each tenant’s resources, while tenant isolation guarantees that one tenant’s traffic and data aren’t accessible to others. Dedicated overlays provide separate data paths and encapsulation per tenant, often with per-tenant encryption keys, so security boundaries are maintained end-to-end across the WAN. This combination prevents cross-tenant leakage and meets the needs of multiple customers sharing a common network.

Why the other approaches don’t fit: sharing encryption keys and overlays by default breaks isolation and trust, exposing tenants to each other. Having no isolation mechanisms eliminates any barrier between tenants, creating obvious security risks. Limiting security to the data center boundary with no tenant isolation leaves the WAN itself unprotected from lateral movement and data exposure across tenants.