SY0-301 Question #559: Real Exam Question with Answer & Explanation

The correct answer is D: VSAN. VSANs (Virtual Storage Area Networks) logically partition a SAN fabric to isolate traffic, faults, and misconfigurations between groups of devices.

Question

Which of the following can be used to maintain a higher level of security in a SAN by allowing isolation of mis-configurations or faults?

Options

AVLAN
BProtocol security
CPort security
DVSAN

Explanation

VSANs (Virtual Storage Area Networks) logically partition a SAN fabric to isolate traffic, faults, and misconfigurations between groups of devices.

Common mistakes.

A. VLANs partition Ethernet/IP networks at Layer 2 and are not applicable to SAN fabric segmentation, which uses Fibre Channel or iSCSI protocols.
B. Protocol security refers to securing the communication protocols used within the SAN but does not provide logical fabric isolation between storage resources.
C. Port security restricts which devices can connect to a specific switch port but does not create the logical fabric isolation needed to contain faults across the SAN.

Concept tested. VSAN isolation for SAN security and fault containment

Reference. https://www.cisco.com/c/en/us/td/docs/switches/datacenter/mds9000/sw/8_x/config/san_os/cisco_mds9000_san_os_configuration_guide_8x/configuring_vsans.html

Community Discussion

No community discussion yet for this question.

Full SY0-301 Practice