SG0-001 · Question #233
An administrator has configured storage for a server, and would like to ensure that other systems do not accidentally gain access to this server's storage by plugging into the system's port. Which of
The correct answer is D. WWN zoning. To prevent unauthorized systems from accessing a server's storage, even if physically connected, WWN zoning provides a solution by restricting access based on the unique identifier of the host bus adapter.
Question
An administrator has configured storage for a server, and would like to ensure that other systems do not accidentally gain access to this server's storage by plugging into the system's port. Which of the following would provide a solution?
Options
- ARCSN
- BPort zoning
- CVirtual fabric
- DWWN zoning
How the community answered
(56 responses)- A2% (1)
- B2% (1)
- C4% (2)
- D93% (52)
Why each option
To prevent unauthorized systems from accessing a server's storage, even if physically connected, WWN zoning provides a solution by restricting access based on the unique identifier of the host bus adapter.
RCSN (Registered State Change Notification) is a Fibre Channel feature for notifying devices of changes in the fabric, not for access control.
Port zoning restricts access based on the physical switch port, which can be circumvented if an unauthorized system plugs into an authorized port.
Virtual fabric (or Virtual SAN - VSAN) segments a physical SAN into multiple logical SANs, providing isolation but not directly preventing unauthorized access to specific storage based on an HBA's identity within a zone.
WWN zoning (World Wide Name zoning) ensures that only Host Bus Adapters (HBAs) with specific, authorized WWNs can access particular storage resources within the SAN. This method provides robust access control because it is tied to the unique identity of the HBA, preventing unauthorized systems from gaining access by simply plugging into a physical port, as their WWN would not be authorized for that storage.
Concept tested: Fibre Channel SAN zoning for access control
Source: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/mds9000/sw/4_1/configuration/guides/zoning/zoning.html
Topics
Community Discussion
No community discussion yet for this question.