An IT security team is concerned about the authentication traffic patterns that may be required to
integrate the private and public clouds. As a result, IT has elected to federate their active directory
using ADFS from the private cloud to the public cloud.
One of the design decisions is whether to use a Layer 2, 3, or 7 firewall / switch mechanism
between the public and private clouds. There are trade-offs with each choice.
Which network layer would best address this situation, and why?

A.
Layer 7, because it allows control at the application layer and is policy driven.

B.
Layer 3, because it allows segment isolation while still providing high performance levels.

C.
Layer 2, because it provides the simplest configuration to manage and it is easy to isolate and
troubleshoot problems.

D.
Layer 2, because it provides the best performance and it is easy to isolate problems.