During GBP design review, stakeholders debate default deny between groups versus default allow with explicit denies. What should the team recognize about that choice?
Select an answer to reveal the explanation.
Short Explanation
Zero-trust folks usually lock every interior door then hand out keys (default deny). Open-floor folks leave doors unlocked and post a few “keep out” signs (default allow). GBP lets the city pick that posture on purpose—it is not hard-wired by VXLAN.
Full Explanation
GBP deployments choose a policy posture such as default deny between groups (explicit allows) or a more permissive default with explicit denies. That choice is a security design decision, not an immutable property of VXLAN or underlay BGP. EVPN-distributed GBP can express deny as well as allow outcomes for overlay group relationships.