An auditor asks for proof that Parks servers cannot ARP Courts servers across the municipal fabric. Which verification concept matters most for Layer 2 isolation?
Select an answer to reveal the explanation.
Short Explanation
Auditors love simple pictures: different VNIs means Parks ARP never rings the Courts doorbell. If they share an L2 domain, no amount of matching OSPF metrics will satisfy that ARP question. Show separate L2 domains—then sleep well.
Full Explanation
Proof of L2 isolation centers on demonstrating distinct broadcast domains (VLANs/VNIs/bridge-domains) so ARP and flooded frames cannot traverse tenant boundaries. Shared VNIs, underlay metric symmetry, and global DHCP-relay state do not answer the ARP-crossover question. Capture show commands and design artifacts that evidence separate L2 contexts per tenant.