nerdexam
CompTIA

SG0-001 · Question #233

An administrator has configured storage for a server, and would like to ensure that other systems do not accidentally gain access to this server's storage by plugging into the system's port. Which of

The correct answer is D. WWN zoning. To prevent unauthorized systems from accessing a server's storage, even if physically connected, WWN zoning provides a solution by restricting access based on the unique identifier of the host bus adapter.

Storage Management

Question

An administrator has configured storage for a server, and would like to ensure that other systems do not accidentally gain access to this server's storage by plugging into the system's port. Which of the following would provide a solution?

Options

  • ARCSN
  • BPort zoning
  • CVirtual fabric
  • DWWN zoning

How the community answered

(56 responses)
  • A
    2% (1)
  • B
    2% (1)
  • C
    4% (2)
  • D
    93% (52)

Why each option

To prevent unauthorized systems from accessing a server's storage, even if physically connected, WWN zoning provides a solution by restricting access based on the unique identifier of the host bus adapter.

ARCSN

RCSN (Registered State Change Notification) is a Fibre Channel feature for notifying devices of changes in the fabric, not for access control.

BPort zoning

Port zoning restricts access based on the physical switch port, which can be circumvented if an unauthorized system plugs into an authorized port.

CVirtual fabric

Virtual fabric (or Virtual SAN - VSAN) segments a physical SAN into multiple logical SANs, providing isolation but not directly preventing unauthorized access to specific storage based on an HBA's identity within a zone.

DWWN zoningCorrect

WWN zoning (World Wide Name zoning) ensures that only Host Bus Adapters (HBAs) with specific, authorized WWNs can access particular storage resources within the SAN. This method provides robust access control because it is tied to the unique identity of the HBA, preventing unauthorized systems from gaining access by simply plugging into a physical port, as their WWN would not be authorized for that storage.

Concept tested: Fibre Channel SAN zoning for access control

Source: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/mds9000/sw/4_1/configuration/guides/zoning/zoning.html

Topics

#SAN security#WWN zoning#access control

Community Discussion

No community discussion yet for this question.

Full SG0-001 Practice