A stormwater bureau wants OT/SCADA endpoints kept out of the same routed fabric space as office users. Which SD-Access construct provides that macro segmentation?
Select an answer to reveal the explanation.
Short Explanation
Macro segmentation is the big wall between neighborhoods—office folks on one side, plant gear on the other. In SD-Access that wall is a Virtual Network: its own overlay VRF-like space. Put SCADA in a different VN from office users and they do not share that routed fabric world unless you deliberately stitch them.
Full Explanation
In Cisco SD-Access, Virtual Networks implement macro segmentation by providing separate overlay routing instances (commonly VRF-backed) for classes of users or systems. Placing OT/SCADA in a distinct VN from office users isolates east-west and north-south reachability at the routing layer before group policy is applied. Micro-segmentation with SGTs can further restrict talkers inside a VN, but separating VNs is the primary macro control for keeping industrial and enterprise spaces apart.