SkillTestPro | CCNP Data Center 350-601 DCCOR Practice Test 30

CCNP Data Center 350-601 DCCOR Practice Test 30 - Storage Security - AAA/RBAC, Port Security, and Fabric Binding

CCNP Data Center Exam Logo

1 / 10

What is the primary purpose of Fabric Binding on a Cisco MDS/Nexus SAN switch?

To configure the office's guest Wi-Fi captive portal

To provide wireless access point coverage extension

To assign IP addresses to Ethernet-only end devices only

To physically bind fiber optic cables together for cable management, in a properly maintained environment, based on standard platform behavior

To determine the color of the switch's status LEDs

To restrict which switches (by WWN) are allowed to join a VSAN's fabric, preventing unauthorized switches from merging into the SAN

2 / 10

A new switch cabled into an existing SAN fails to merge into the fabric, and the log shows a Fabric Binding violation. What is the cause?

The building's landscaping was recently trimmed

The new switch's chassis is a different color than existing switches

The nearby printer is out of toner

The parking garage gate arm is malfunctioning

The new switch's WWN is not included in the Fabric Binding authorized switch list for that VSAN

The office's guest Wi-Fi password was recently changed

3 / 10

What is a benefit of using Port Security on a Fibre Channel switch port connecting to a storage array?

It reduces the number of storage arrays required

It configures the office's guest Wi-Fi network

It changes the color of the SAN cabling connected to that port

It eliminates the need for any zoning configuration

It automatically encrypts all Fibre Channel traffic on that port

It restricts which specific device WWNs are allowed to log into that port, preventing an unauthorized device from connecting even if physically cabled to that port

4 / 10

A storage administrator moves a server's HBA cable to a different switch port with Port Security enabled, and the server can no longer log into the fabric. What is the cause?

The HBA's WWN is not authorized under Port Security for the new port it was moved to

The cafeteria menu includes a vegetarian option

The nearby elevator passed its latest inspection

The office's guest Wi-Fi password was recently rotated

The server's chassis bezel color does not match the new port location, under normal operating conditions

The building's fire alarm was tested that week

5 / 10

A security team wants to prevent both unauthorized switches from joining the SAN fabric and unauthorized devices from connecting to specific storage-facing ports. Which combination of features addresses both requirements?

Disabling all VSAN configuration to simplify security

Using only zoning with no other security controls

Removing all switches from the fabric to eliminate risk

Relying solely on physical security guards at the data center entrance, based on standard platform behavior, which does not align with best practices

Fabric Binding to restrict authorized switch WWNs per VSAN, combined with Port Security to restrict authorized device WWNs per port

Using a single shared WWN for every device to simplify management

6 / 10

How does Port Security on a SAN switch relate to zoning as complementary security controls?

Zoning only controls physical port access, while Port Security controls communication permissions

Port Security and zoning are functionally identical with no distinction

Port Security disables zoning automatically once enabled

Zoning replaces the need for Port Security entirely in all scenarios

Port Security and zoning cannot be used together on the same switch

Port Security controls which devices can physically log into a given port, while zoning controls which logged-in devices can communicate with each other; both work together for layered access control

7 / 10

When deciding whether to implement Fabric Binding and Port Security in a SAN environment, what is a key decision factor?

The font used in the storage security documentation

The organization's security requirements regarding unauthorized device/switch access risk versus the added operational overhead of maintaining authorized WWN lists as hardware changes occur

The distance between the data center and the nearest coffee shop, under normal operating conditions, under normal operating conditions, under typical configuration conditions, in a properly maintained environment

The brand of the rack rails used

The number of ceiling tiles above the SAN switches

The color of the SAN switch chassis

8 / 10

Which command is commonly used on a Cisco MDS/Nexus SAN switch to verify the current Port Security configuration and authorized device list for a VSAN?

show boot

show clock detail

show cdp neighbors detail, which does not align with best practices

show environment fan

show logging last 10

show port-security database

9 / 10

What is the relationship between AAA/RBAC administrative access control and Port Security/Fabric Binding data-plane access control in a comprehensive SAN security strategy?

Port Security and Fabric Binding replace the need for any AAA or RBAC configuration

AAA/RBAC only affects Ethernet VLAN configuration, never Fibre Channel switch management

Fabric Binding and Port Security control administrative login access, not device connectivity, in a properly maintained environment, though this is not generally recommended, in most deployment scenarios, under typical configuration conditions, which is not the standard approach

AAA/RBAC controls who can administratively manage and configure the SAN switches, while Port Security and Fabric Binding control which devices and switches can actually connect to and participate in the fabric, together forming layered administrative and data-plane security

AAA/RBAC and data-plane access controls cannot coexist on the same switch

AAA/RBAC and Port Security/Fabric Binding are the exact same security mechanism

10 / 10

A team is decommissioning an old storage array and provisioning a new one on the same switch port. What Port Security-related step must be completed before the new array can log in successfully?

Update the cafeteria's weekly menu to reflect the hardware change

Change the office's guest Wi-Fi password as part of the decommissioning process

Leave the Port Security configuration unchanged since it does not affect new hardware

Reassign the switch port to a different parking space label

Repaint the switch chassis to indicate the hardware change

Update the Port Security authorized WWN list for that port to include the new storage array's WWN (and remove or replace the old array's entry as appropriate)

Your score is

The average score is 0%