CCNP Data Center 350-601 DCCOR Practice Test 19

Correct Answer: To allow multiple hosts to access a shared file-level storage volume over an IP network as if it were local storage
Explanation: NFS is a network file-sharing protocol that allows multiple hosts to access shared file-level storage over an IP network, presenting remote files and directories as if they were part of the local filesystem.

Correct Answer: The NFS export's access control list (such as allowed client IPs or user/group mapping) does not grant the required permissions to that host or user
Explanation: NFS exports typically have access control lists specifying which client IPs or networks are permitted, along with user/group ID mapping rules; a mismatch or overly restrictive configuration here commonly results in permission denied errors even when the export is otherwise reachable.

Correct Answer: iSCSI can leverage existing Ethernet/IP network infrastructure, avoiding the need for a dedicated Fibre Channel fabric and separate HBAs
Explanation: iSCSI encapsulates SCSI commands within IP packets, allowing it to run over standard Ethernet/IP infrastructure rather than requiring a dedicated Fibre Channel fabric and specialized HBAs, which can reduce infrastructure cost and complexity in some designs.

Correct Answer: That the iSCSI target's IQN (iSCSI Qualified Name) and discovery/CHAP authentication settings are correctly configured and match on both initiator and target
Explanation: iSCSI discovery and connection depend on correctly matching IQNs and, if used, CHAP authentication credentials between initiator and target; a mismatch in these settings is a common cause of discovery or login failures even when basic IP connectivity is functional.

Correct Answer: Use NFS for the file-level shares and either iSCSI or Fibre Channel (based on latency/performance requirements) for the block-level database storage
Explanation: NFS is designed for file-level sharing, while iSCSI or Fibre Channel are designed for block-level access; a mixed environment with both general file-sharing needs and low-latency database requirements typically uses NFS for the former and iSCSI or FC (chosen based on latency needs) for the latter.

Correct Answer: Isolating storage traffic onto dedicated VLANs helps reduce contention with other traffic types and limits exposure of storage protocols to only authorized network segments
Explanation: Placing NFS or iSCSI traffic on dedicated VLANs helps reduce contention with general-purpose network traffic (improving performance predictability) and limits which network segments can reach the storage protocols, improving both performance and security posture.

Correct Answer: Whether the application requires file-level access semantics (shared files/directories) or block-level access semantics (a raw disk device, such as for a database)
Explanation: The fundamental distinction between NFS (file-level access) and iSCSI (block-level access) is usually the primary decision factor, since applications requiring raw block storage devices (like databases) need iSCSI or FC, while those needing shared file access are better served by NFS.

Correct Answer: Checking the iSCSI session status (such as via 'show iscsi session' or the initiator's session manager) to confirm the connection is in an active/logged-in state
Explanation: Verifying iSCSI session status through the appropriate command or GUI session manager confirms whether the initiator has successfully logged into the target and established an active session, which is essential before troubleshooting further at the application layer.

Correct Answer: CHAP authentication verifies the identity of the initiator (and optionally the target) before allowing an iSCSI session, reducing the risk of unauthorized access on a shared IP network
Explanation: CHAP (Challenge-Handshake Authentication Protocol) is used in iSCSI to authenticate the initiator (and optionally mutually authenticate the target) before allowing a session, which helps prevent unauthorized hosts on a shared IP network from accessing iSCSI targets, though it does not itself encrypt the data payload.

Correct Answer: Maintaining consistent export paths/mount points and access control configuration on the new array, potentially using DNS or IP migration techniques to minimize client-side remount requirements
Explanation: A smooth NFS migration typically requires preserving export paths, mount points, and access control settings on the new array (and often using techniques like IP/DNS migration) so that client hosts can continue accessing shares with minimal disruption or required remounting.