200-150 · Question #196
Which statement describes the use of zones in a VSAN?
The correct answer is C. zones limit unicast, multicast, and broadcast traffic. Fibre Channel zones enforce traffic isolation by restricting unicast, multicast, and broadcast communication between devices in different zones.
Question
Which statement describes the use of zones in a VSAN?
Options
- Azones are configured at the fabric core.
- BAn HBA or storage device can belong to one zone.
- Czones limit unicast, multicast, and broadcast traffic.
- Dzones are a group ports within a single VSAN.
How the community answered
(41 responses)- A2% (1)
- C95% (39)
- D2% (1)
Why each option
Fibre Channel zones enforce traffic isolation by restricting unicast, multicast, and broadcast communication between devices in different zones.
Zones are not configured at a single physical location such as the fabric core; they are defined per VSAN and distributed to all switches in the fabric via Cisco Fabric Services (CFS).
A single HBA or storage device can belong to multiple zones simultaneously, enabling flexible host-to-storage access mappings across different zone policies.
Zones enforce strict communication boundaries within a VSAN by permitting only intra-zone traffic. This restricts unicast (device-to-device), multicast, and broadcast Fibre Channel frames so that devices outside a zone cannot communicate with or discover devices inside it, providing both security and performance isolation.
While zones do group ports, this description is incomplete and lacks the defining characteristic of zones, which is enforcing traffic isolation between non-zoned devices.
Concept tested: Fibre Channel zoning traffic isolation within VSANs
Source: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/mds9000/sw/8_x/config/san_switching/cisco_mds9000_san_switching_config_guide_8x/configuring_and_managing_zones.html
Topics
Community Discussion
No community discussion yet for this question.