Bidirectional Forwarding Detection (BFD) provides fast failure detection independent of routing protocols. It can be integrated with multiple protocols to accelerate convergence:
* A: IS-IS supports BFD for fast hello processing.
* B: BFD can track static routes via routing tracking features.
* D: EIGRP supports BFD for link failure detection.
* E: BGP supports BFD for rapid session teardown.
Why option C is incorrect:
* C: RIP does not natively support BFD integration.
-

Explanation:

-

* B (Encrypt data when it is at rest and in motion): In hybrid cloud deployments, encryption is one of the most critical mechanisms to protect sensitive enterprise data both during storage (at rest) and while being transmitted (in motion). This ensures confidentiality and integrity across both private and public cloud environments.
Other options explained:
* A: Using standard protocols is a general best practice but insufficient without encryption.
* C: Communication of risks is part of compliance but does not enforce technical security.
* D: Using standard protocols without encryption exposes data to risks.
-

BGP-LS (BGP Link-State) distributes IGP topology information using BGP. When used in multi-area or multi-domain networks, BGP-LS allows for a centralized controller to receive topology information in a scalable way. BGP inherently runs over TCP, which provides reliable, ordered delivery using built-in flow control mechanisms.
The use ofTCP-based flow controlensures that even in large-scale networks where significant link-state information is exchanged, the flow of data between BGP peers remains efficient, controlled, and buffered according to the receiver's capacity. This makes it ideal for transporting massive amounts of LS data across wide areas and into SDN controllers for applications like traffic engineering or path computation.
Why other options are incorrect:
* A, B, and C refer to mechanisms that are not implemented or leveraged by BGP.
* TCP-based flow control is the only valid flow-control mechanism used in BGP sessions.

#Explanation:
* D: A Layer 2 trunk to the border leaf allows seamless VLAN extension between the legacy Layer 2 domain and the VXLAN-based fabric. This supports application migration without readdressing.
Border leaf switches are used to bridge the traditional and VXLAN segments while maintaining MAC learning and VLAN consistency.
Incorrect Options:
* A & B: Layer 3 links alone would require readdressing or routing, violating the constraint.
* C: Spine switches typically do not handle VLAN bridging or policy enforcement directly.