nerdexam
CompTIA

SG0-001 · Question #438

A SAN administrator has been advised that access to manage storage and switching devices has been changed to a different VLAN for security reasons. The administrator cannot log into one storage system

The correct answer is A. Incorrect firewall settings. If an administrator cannot access a storage system after a VLAN change for management access, the most likely cause is incorrect firewall settings preventing communication to the new management VLAN.

Storage Management

Question

A SAN administrator has been advised that access to manage storage and switching devices has been changed to a different VLAN for security reasons. The administrator cannot log into one storage system from the management workstation. Which of the following is the MOST likely cause of this issue?

Options

  • AIncorrect firewall settings
  • BJumbo frames not supported
  • CIncorrect NIC configuration
  • DZoning misconfiguration

How the community answered

(30 responses)
  • A
    77% (23)
  • B
    3% (1)
  • C
    7% (2)
  • D
    13% (4)

Why each option

If an administrator cannot access a storage system after a VLAN change for management access, the most likely cause is incorrect firewall settings preventing communication to the new management VLAN.

AIncorrect firewall settingsCorrect

When management access is moved to a different VLAN, firewalls must be updated to permit traffic from the management workstation's IP address or network to the storage system's management IP address on the new VLAN. If the firewall rules are not updated, the connection will be blocked, making it impossible to log in.

BJumbo frames not supported

Jumbo frames are typically related to data transfer efficiency for iSCSI or FCoE, not initial management access or login issues, and are unlikely to prevent a basic management connection.

CIncorrect NIC configuration

While an incorrect NIC configuration could cause network issues, it's less likely to be the *most* likely cause than a firewall blocking a specific VLAN, especially since other storage systems might be accessible, indicating the workstation's NIC is generally functional.

DZoning misconfiguration

Zoning misconfiguration is specific to Fibre Channel (FC) storage networks and affects data path access to LUNs, not management access for logging into the storage system itself.

Concept tested: Troubleshooting network access after VLAN change

Source: https://learn.microsoft.com/en-us/windows-server/networking/firewall/best-practices-for-configuring-windows-firewall

Topics

#troubleshooting#management access#VLANs#firewall settings

Community Discussion

No community discussion yet for this question.

Full SG0-001 Practice