nerdexam
CompTIA

SG0-001 · Question #23

In order to protect the storage area network, a new firewall has been installed at the company's datacenter. Once installed, all servers lost the remote storage and crashed. Which of the following wil

The correct answer is B. TCP port 3260 must be permitted between the two networks.. The loss of remote storage after a firewall installation indicates that the necessary iSCSI port, TCP 3260, is blocked and must be permitted to restore communication between servers and the SAN.

Storage Connectivity

Question

In order to protect the storage area network, a new firewall has been installed at the company's datacenter. Once installed, all servers lost the remote storage and crashed. Which of the following will restore communication between the servers' network and the SAN?

Options

  • AUDP port 6320 must be permitted between the two networks.
  • BTCP port 3260 must be permitted between the two networks.
  • CAll servers must be configured to use hardware iSCSI initiators.
  • DAll servers must rescan the LUNs which have been masked by the firewall

How the community answered

(30 responses)
  • A
    7% (2)
  • B
    77% (23)
  • C
    13% (4)
  • D
    3% (1)

Why each option

The loss of remote storage after a firewall installation indicates that the necessary iSCSI port, TCP 3260, is blocked and must be permitted to restore communication between servers and the SAN.

AUDP port 6320 must be permitted between the two networks.

UDP port 6320 is not the standard port for iSCSI communication; iSCSI primarily relies on TCP port 3260.

BTCP port 3260 must be permitted between the two networks.Correct

iSCSI (Internet Small Computer System Interface) uses TCP port 3260 as its well-known port for establishing and maintaining connections between iSCSI initiators and iSCSI targets. Permitting TCP port 3260 through the new firewall is essential to restore server access to iSCSI-based remote storage.

CAll servers must be configured to use hardware iSCSI initiators.

While hardware iSCSI initiators can offer performance benefits, switching to them would not resolve a firewall blocking the iSCSI protocol port.

DAll servers must rescan the LUNs which have been masked by the firewall

A firewall does not 'mask' LUNs; it blocks network traffic. Rescanning LUNs will not re-establish connectivity if the underlying network port for iSCSI communication is blocked.

Concept tested: iSCSI port requirements

Source: https://www.ibm.com/docs/en/aix/7.2?topic=protocol-ports-iscsi

Topics

#iSCSI#firewall rules#TCP port 3260

Community Discussion

No community discussion yet for this question.

Full SG0-001 Practice