SY0-301 · Question #559
Which of the following can be used to maintain a higher level of security in a SAN by allowing isolation of mis-configurations or faults?
The correct answer is D. VSAN. VSANs (Virtual Storage Area Networks) logically partition a SAN fabric to isolate traffic, faults, and misconfigurations between groups of devices.
Question
Which of the following can be used to maintain a higher level of security in a SAN by allowing isolation of mis-configurations or faults?
Options
- AVLAN
- BProtocol security
- CPort security
- DVSAN
How the community answered
(37 responses)- A5% (2)
- B3% (1)
- D92% (34)
Why each option
VSANs (Virtual Storage Area Networks) logically partition a SAN fabric to isolate traffic, faults, and misconfigurations between groups of devices.
VLANs partition Ethernet/IP networks at Layer 2 and are not applicable to SAN fabric segmentation, which uses Fibre Channel or iSCSI protocols.
Protocol security refers to securing the communication protocols used within the SAN but does not provide logical fabric isolation between storage resources.
Port security restricts which devices can connect to a specific switch port but does not create the logical fabric isolation needed to contain faults across the SAN.
A VSAN (Virtual SAN) creates logical partitions within a physical SAN fabric, similar to how VLANs segment Ethernet networks. Each VSAN operates as an independent fabric, so a misconfiguration or fault in one VSAN cannot propagate to devices in another VSAN. This isolation improves security and stability by containing the blast radius of errors within a defined boundary.
Concept tested: VSAN isolation for SAN security and fault containment
Source: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/mds9000/sw/8_x/config/san_os/cisco_mds9000_san_os_configuration_guide_8x/configuring_vsans.html
Topics
Community Discussion
No community discussion yet for this question.