A service provider uses ONTAP to host multiple customer environments on a single cluster. Each customer requires their own network namespace, authentication settings, and storage volumes, while remaining isolated from other tenants. Which statement accurately describes this configuration?

• A. Each customer is assigned a dedicated FlexGroup volume for data separation
• B. Each customer operates within their own SVM, which contains unique LIFs and volumes
• C. Each customer requires a separate ONTAP cluster for complete isolation
• D. Each customer shares one SVM but uses different aggregates for logical separation

Answer: (B)

The key idea is that isolation for multiple tenants in ONTAP is achieved by giving each tenant a separate Storage Virtual Machine. An SVM acts as its own data and access boundary on the cluster. Inside an SVM, you configure network access through unique LIFs (the tenant’s network namespace), you create storage volumes that belong only to that tenant, and you set authentication settings (users, groups, and security policies) that are specific to that tenant. Because these boundaries are enforced by the SVM, each customer can access only their own namespace, their own LIFs, and their own volumes, without visibility into or impact on other tenants.

That’s why having each customer operate within their own SVM, which contains unique LIFs and volumes, is the correct approach. Alternatives such as using a FlexGroup for data separation, maintaining a separate ONTAP cluster for each tenant, or sharing one SVM with different aggregates do not provide the same isolation guarantees within a single cluster, because the network, authentication, and data boundaries would not be independently enforced for each tenant.