350-601 Storage Network Practice Question
An engineer is designing a SAN for a virtualized environment. Which two best practices should be followed for Fibre Channel zoning?
⚠ Common exam trap
Cisco often tests the misconception that soft zoning is sufficient for security, but the trap here is that soft zoning only filters name server queries and does not prevent a device from directly addressing another device's port if it knows the Fibre Channel address.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Use single-initiator zoning.
Single-initiator zoning (also known as one-to-one zoning) is a best practice because it restricts each Fibre Channel zone to exactly one initiator (host HBA) and one or more target ports. This eliminates the risk of RSCN storms propagating across multiple initiators, reduces fabric instability, and simplifies troubleshooting by ensuring clear, predictable paths between each host and its storage.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Use single-initiator zoning.
Why this is correct
Simplifies troubleshooting and security.
- ✗
Use multiple initiators in a single zone.
Why it's wrong here
Increases risk of misconfiguration.
- ✗
Use soft zoning exclusively.
Why it's wrong here
Soft zoning is less secure.
- ✗
Disable zoning for performance.
Why it's wrong here
Zoning is required for security.
- ✓
Zone by WWPN rather than WWNN.
Why this is correct
More granular control.
Go deeper
Related to this question
About these practice questions
This 350-601 question is part of Courseiva's 984-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 350-601 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-601 exam.