SG0-001 · Question #210
SAN zoning provides which of the following?
The correct answer is C. A means of partitioning a SAN fabric at the network layer. SAN zoning partitions a Fibre Channel storage area network fabric into smaller, isolated groups, allowing specific servers to access only their designated storage resources.
Question
SAN zoning provides which of the following?
Options
- AA means to mask LUNs for clients
- BA method with which to divide the fabric into VSANs
- CA means of partitioning a SAN fabric at the network layer
- DA means of controlling access to storage at layer 4
How the community answered
(29 responses)- A3% (1)
- C93% (27)
- D3% (1)
Why each option
SAN zoning partitions a Fibre Channel storage area network fabric into smaller, isolated groups, allowing specific servers to access only their designated storage resources.
LUN masking is typically done at the storage array level, not directly by SAN zoning, though zoning helps control the path to the LUNs that are then masked.
VSANs (Virtual SANs) are a Cisco-specific feature that divides a physical SAN fabric into multiple logical fabrics, which is a related but distinct concept from zoning which operates within or across VSANs.
SAN zoning segments the Fibre Channel fabric into logical private networks, controlling which hosts can see and access which storage devices or targets at the fabric level (akin to a network layer control within the SAN). This partitioning enhances security and prevents unauthorized access by isolating traffic paths.
Controlling access at Layer 4 (transport layer) is not the primary function of SAN zoning, which operates more at the Fibre Channel fabric level, below typical network layer definitions.
Concept tested: SAN Fibre Channel zoning purpose
Source: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/mds9000/sw/4_x/configuration/guides/san_config/zoning.html
Topics
Community Discussion
No community discussion yet for this question.