Which virtualization deployment an engineer will execute to separate to accomplish security policies?

Which virtualization deployment an engineer will execute to separate to accomplish security policies?
A. Same corporate Network with NAC capabilities.
B. Something using VLANs