What is the purpose of VPN segmentation in Cisco SD-WAN?

• A. To isolate traffic into separate VPNs for security
• B. To reduce VLAN counts
• C. To optimize STP
• D. To enable NAT translation

Answer: (A)

VPN segmentation in Cisco SD-WAN creates multiple logical overlay networks, each representing its own traffic domain. By placing devices and applications into separate VPNs, traffic is isolated from other VPNs, so resources in one VPN cannot access those in another unless explicitly allowed. This isolation enables strict security controls, independent routing and policy rules, and separate encryption domains for each VPN, which is especially important in multi-tenant or multi-domain deployments. The focus here is security and control of who can talk to whom, not simply reducing VLANs, optimizing a layer-2 protocol, or performing NAT translation.