In a multi-tenant network, VRF primarily enables what?

• A. Isolate routing tables for different tenants
• B. Merge all tenants' routing into a single table
• C. Provide encryption for tenant data
• D. Replace BGP with OSPF

Answer: (A)

VRF, or Virtual Routing and Forwarding, creates multiple independent routing tables on a single device so each tenant has its own separate path decisions. This isolation means routes learned for one tenant aren’t visible or usable by another, even if they use overlapping IP spaces. Interfaces can be tied to a specific VRF, ensuring forwarding uses the correct tenant’s routing information. This is why the primary purpose is isolating routing tables for different tenants. VRF doesn’t merge all routes into one table, doesn’t by itself encrypt data, and doesn’t replace one routing protocol with another; it simply provides separate routing contexts that routing protocols can operate within.