A security team bans Layer-2 stretch for a PCI segment between city data centers. Which policy-driven DCI choice follows?
Select an answer to reveal the explanation.
Short Explanation
When compliance says "no L2 stretch for PCI," the DCI answer is L3-only for that tenant. Keep the sensitive broadcast domain site-local.
Full Explanation
Compliance and security policy can forbid Layer-2 stretch for sensitive segments such as PCI so that broadcast domains and L2 attack surface remain site-local. In that case DCI for the tenant should be Layer-3 only. Policy-driven stretch selection is a valid professional DCI decision, not an invitation to bypass isolation on the underlay.