Which mechanism ensures data stays within approved geographic boundaries in MEF SD-WAN?

• A. Tenancy isolation
• B. Encryption of data in transit
• C. Policy-based data flow control
• D. Centralized logging

Answer: (C)

Policy-based data flow control enables geo-fenced data handling by defining allowed paths, egress points, and regions for traffic. In MEF SD-WAN, a policy engine enforces these rules on the data plane, so data stays within approved geographic boundaries. Encryption in transit secures payloads but doesn’t restrict where traffic can travel, tenancy isolation focuses on separating tenants rather than restricting geography, and centralized logging records activity without enforcing data flows.