Zone Set Activation: The Essential Step After Configuring Zones
A server administrator reports that a newly provisioned application server cannot access its LUN on the storage array. The SAN zoning uses WWPNs. The administrator verifies that the server's HBA WWPN is correctly zoned with the storage port's WWPN. Which additional check should the engineer perform to isolate the issue?
Quick Answer
The answer is to verify that the zone set is activated and that the zones are in the active zone set. This is correct because in Fibre Channel SAN zoning, configuring WWPNs into a zone only creates a pending configuration; the zone set must be explicitly activated for the fabric to enforce the access controls. Without activation, the zoning remains in the offline or pending zone set, so the server’s HBA cannot reach the storage LUN even though the WWPNs are correctly paired. On the Cisco DCCOR 350-601 exam, this scenario tests your understanding of the difference between the full zone set and the active zone set, a common trap where candidates assume configuration equals enforcement. A reliable memory tip is “Configure, then Activate” — think of the zone set as a light switch: wiring the circuit (zoning) does nothing until you flip the switch (activate the zone set).
⚠ Common exam trap
Cisco often tests the distinction between configuring a zone and activating the zone set, because candidates assume that creating a zone automatically applies it to the fabric.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Verify that the zone set is activated and that the zones are in the active zone set
Even if the WWPNs are correctly configured in the zone, the zone set must be activated for the zoning to take effect. Without activation, the zone configuration remains in the pending or offline zone set, and the Fibre Channel fabric will not enforce the access controls. The engineer should verify that the zone set is activated and that the zones appear in the active zone set using commands like 'show zoneset active' on the MDS switch.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Confirm that VSAN interop is enabled on the MDS switch
Why it's wrong here
VSAN interop is not needed for a single-vendor fabric.
- ✓
Verify that the zone set is activated and that the zones are in the active zone set
Why this is correct
Zone set must be active for zoning to take effect.
- ✗
Ensure that the switch port is configured in F mode and local switching is enabled
Why it's wrong here
Local switching is default; not the issue.
- ✗
Check whether FCIP is configured on the storage array
Why it's wrong here
FCIP is for long-distance connectivity, not local SAN.
Go deeper
Related to this question
About these practice questions
Courseiva writes every 350-601 question from scratch — 984 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
Same concept, more angles
1 more way this is tested on 350-601
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. A storage administrator reports that a new host cannot log into the SAN. The host is connected to a Cisco MDS switch. The switch interface shows up/up but the host is not in the active zone. What is the most likely cause?
easy- ✓ A.The zone set is not activated.
- B.The switch port is in an isolated state.
- C.The FC cable is faulty.
- D.The host's WWPN is not in the zone configuration.
- E.The host's driver is not installed.
Why A: The host cannot log into the SAN despite the interface showing up/up because the zone set is not activated. In Cisco MDS Fibre Channel SANs, zone configurations are stored in the zone database but only take effect when the zone set is activated (using the 'zone activate' command). Without an active zone set, no zoning is enforced, and the host's WWPN is effectively invisible to other devices, preventing login even though the physical link is operational.
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 350-601 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-601 exam.