To provide independent administration for three departments on one appliance, what configuration should be used?

• A. Admin partitions that use dedicated VLANs
• B. A SNIP in each partition, and bind a VLAN for the department
• C. Policy-based routes for each department in the nsroot partition
• D. Dedicated routes in the admin partitions for each department

Answer: (A)

Independent administration on a single appliance is achieved by creating separate admin partitions, each serving a different group, and giving each partition its own network isola­tion. When you assign dedicated VLANs to each partition, the management plane and the traffic for that department are separated at the network level. This means admins in one partition can manage only their own resources and config, while still sharing the same physical appliance, but without seeing or affecting the others.

This approach provides true multi-tenant isolation: separate admin identities and permissions per partition, plus exclusive network pathways for each department’s management traffic. The other approaches don’t establish this kind of administration boundary—routing rules or using the root partition address how traffic flows, not who can administer what—so they don’t give the independent administrative separation that admin partitions with dedicated VLANs do.