Knowledge + Practice

CCNA Storage Network Questions

75 of 271 questions · Page 3/4 · Storage Network · Answers revealed

Practice these questions Domain overview All questions

151

MCQhard

Refer to the exhibit. An engineer notices that traffic is not load-balanced across all four links. What is the most likely cause?

A.The minimum links set to 2 prevents load balancing.

B.LACP is not supported on Fibre Channel.

C.The load-balancing algorithm is based on source-dest-id, which may not evenly distribute traffic.

D.The port channel is in admin down state.

E.The links are not in the same VSAN.

AnswerC

Source-dest-id can lead to polarization if many flows share the same pair; other algorithms like source-dest-ox-id provide better distribution.

Why this answer

The load-balancing algorithm for Fibre Channel port channels uses source-dest-id (SID and DID) by default. If the traffic flows are between a small number of source-destination pairs, the hash results will map most flows to the same link, preventing even distribution across all four links. This is a common cause of perceived load imbalance even when all links are operational.

Exam trap

Cisco often tests the misconception that load imbalance is always due to a configuration error or link failure, when in fact the default hash algorithm's behavior with limited source-destination pairs is the root cause.

How to eliminate wrong answers

Option A is wrong because the minimum-links setting (e.g., 2) only prevents the port channel from coming up if fewer than that number of links are active; it does not affect load balancing once the channel is up. Option B is wrong because LACP (IEEE 802.3ad) is not used on Fibre Channel; Fibre Channel port channels use the Fibre Channel standard (FC-BB-5/6) or Cisco's proprietary PAgP for FCoE, but LACP is irrelevant here. Option D is wrong because if the port channel were in admin down state, no traffic would pass at all, not just uneven load balancing.

Option E is wrong because all links in a Fibre Channel port channel must be in the same VSAN; if they were not, the port channel would not form or would have errors, but the exhibit shows the channel is up.

Practice this question →

152

MCQmedium

An engineer is configuring intelligent zoning and wants to use device aliases to simplify zone membership. What is a characteristic of device aliases compared to zone aliases?

A.Device aliases require a specific DNS entry.

B.Device aliases are restricted to a single VSAN.

C.Device aliases are automatically assigned to the default zone.

D.Device aliases can be used in multiple zones across different VSANs.

AnswerD

Device aliases are global and can be reused across VSANs.

Why this answer

Device aliases are globally unique across all VSANs in a Cisco MDS fabric, allowing the same alias to be used in multiple zones and across different VSANs without conflict. This simplifies zone configuration because a single device alias can represent an N-port (e.g., a host HBA) and be referenced in zone memberships for different VSANs, reducing administrative overhead. In contrast, zone aliases are local to a single VSAN and cannot be shared across VSANs.

Exam trap

Cisco often tests the distinction between device aliases (global, VSAN-independent) and zone aliases (local, VSAN-specific), and the trap here is that candidates confuse the scope of these two alias types, assuming device aliases are also VSAN-restricted.

How to eliminate wrong answers

Option A is wrong because device aliases do not require any DNS entry; they are locally defined in the Cisco MDS switch configuration using the 'device-alias' command and are distributed via CFS (Cisco Fabric Services). Option B is wrong because device aliases are not restricted to a single VSAN; they are global to the entire switch fabric and can be used across multiple VSANs, unlike zone aliases which are VSAN-specific. Option C is wrong because device aliases are not automatically assigned to any zone; they must be explicitly added to a zone using the 'member device-alias' command, and the default zone behavior is independent of device aliases.

Practice this question →

153

Multi-Selectmedium

A network engineer is configuring FCoE on a Cisco Nexus switch. Which two DCB features must be enabled to support lossless Ethernet for FCoE traffic? (Choose two.)

Select 2 answers

A.PFC (Priority Flow Control)

B.IGMP snooping

C.STP (Spanning Tree Protocol)

D.ETS (Enhanced Transmission Selection)

E.LACP (Link Aggregation Control Protocol)

AnswersA, D

PFC ensures no-loss for FCoE traffic.

Why this answer

PFC (Priority Flow Control) provides per-priority pause to prevent frame loss, and ETS (Enhanced Transmission Selection) allocates bandwidth among traffic classes.

Practice this question →

154

MCQeasy

An engineer notices that the CPU utilization on a Cisco Nexus 5548UP switch is consistently above 80%. The switch is used for FCoE storage traffic. Which action is most likely to reduce CPU utilization?

A.Configure DCBx will-say mode

B.Enable FCoE NPV mode

C.Disable FIP snooping

D.Reduce the number of FCoE VLANs

AnswerD

Fewer VLANs means less FIP snooping processing, reducing CPU load.

Why this answer

High CPU utilization on a Cisco Nexus switch handling FCoE storage traffic is often caused by excessive FCoE Initialization Protocol (FIP) keepalive processing. Reducing the number of FCoE VLANs directly decreases the number of FIP sessions and associated control-plane overhead, lowering CPU load. This is the most effective action because each FCoE VLAN requires separate FIP keepalive handling, and consolidating storage traffic into fewer VLANs reduces the control-plane burden.

Exam trap

Cisco often tests the misconception that disabling FIP snooping or changing DCBx modes will reduce CPU load, but the actual root cause is the number of FCoE VLANs generating excessive FIP keepalive processing.

How to eliminate wrong answers

Option A is wrong because configuring DCBx will-say mode (willing to accept configuration from a peer) does not reduce CPU utilization; it only affects DCB parameter negotiation and may increase control-plane processing. Option B is wrong because enabling FCoE NPV mode offloads FCoE login processing to the upstream FCF, but it does not reduce the number of FCoE VLANs or FIP keepalive messages on the local switch; it may even add overhead for NPV-specific operations. Option C is wrong because disabling FIP snooping would break FCoE functionality by preventing the switch from learning FCoE MAC addresses and enforcing VLAN membership, leading to traffic loss, not CPU reduction.

Practice this question →

155

MCQeasy

A storage administrator reports that a new host cannot log into the SAN. The host is connected to a Cisco MDS switch. The switch interface shows up/up but the host is not in the active zone. What is the most likely cause?

A.The zone set is not activated.

B.The switch port is in an isolated state.

C.The FC cable is faulty.

D.The host's WWPN is not in the zone configuration.

E.The host's driver is not installed.

AnswerA

If the zone set is not activated, even if the WWPN is in the zone, it won't be effective. The host is not in the active zone because the active zone set may not include the zone.

Why this answer

The host cannot log into the SAN despite the interface showing up/up because the zone set is not activated. In Cisco MDS Fibre Channel SANs, zone configurations are stored in the zone database but only take effect when the zone set is activated (using the 'zone activate' command). Without an active zone set, no zoning is enforced, and the host's WWPN is effectively invisible to other devices, preventing login even though the physical link is operational.

Exam trap

Cisco often tests the distinction between configuring a zone (adding WWPNs) and activating the zone set; candidates mistakenly assume that simply adding a WWPN to a zone is sufficient, overlooking the mandatory activation step that enforces the zoning policy.

How to eliminate wrong answers

Option B is wrong because an isolated state occurs in PortChannel configurations when ports are incompatible (e.g., speed or mode mismatch), not due to zoning issues, and the interface shows up/up, ruling out isolation. Option C is wrong because a faulty FC cable would cause the interface to be down/down or flap, not up/up. Option D is wrong because the host's WWPN not being in the zone configuration would still allow the host to log into the fabric (FLOGI) and appear in the active zone database; the issue is that no zone set is active, so even if the WWPN were configured, it would not be enforced.

Option E is wrong because the host's driver not being installed would prevent the host from initiating a fabric login (FLOGI), but the switch interface shows up/up, indicating physical and link-level connectivity is present.

Practice this question →

156

MCQeasy

An engineer needs to design a resilient Fibre Channel SAN that eliminates single points of failure between two MDS switches and a storage array with two controllers. What is the minimum number of FC port channels required to achieve this goal?

A.Three

B.Two

C.One

D.Four

AnswerB

Two port channels allow each controller to connect to both switches.

Why this answer

To eliminate single points of failure between two MDS switches and a dual-controller storage array, you need two Fibre Channel port channels. Each port channel connects one MDS switch to both storage controllers, providing redundancy for both the switch and the controller paths. This design ensures that if one switch or one controller fails, the other port channel maintains connectivity.

Exam trap

Cisco often tests the misconception that you need a port channel per controller or per switch, leading candidates to overcount; the trap here is that two port channels—one from each switch to both controllers—are sufficient to eliminate all single points of failure.

How to eliminate wrong answers

Option A is wrong because three port channels are unnecessary; two suffice to cover both switches and both controllers without introducing extra complexity or cost. Option C is wrong because a single port channel creates a single point of failure at the switch or controller level, failing the requirement. Option D is wrong because four port channels exceed the minimum requirement, as two port channels already provide full redundancy for all components.

Practice this question →

157

MCQmedium

An administrator wants to create separate FC fabrics on a single Cisco MDS switch for isolation of production and backup traffic. Which technology should they use?

A.PortChannel

B.NPV

C.Zoning

D.VSAN

AnswerD

VSAN creates separate logical fabrics for full isolation.

Why this answer

VSANs (Virtual SANs) provide fabric isolation on the same physical switch, similar to VLANs. Each VSAN has its own fabric services, zoning, and domain ID.

Practice this question →

158

MCQmedium

A company is consolidating its storage network into a single fabric using a Cisco MDS 9509. They want to use VSANs to isolate different departments. The VSANs will be 10, 20, and 30. They have a single ISL between two MDS switches. The engineers want to carry all three VSANs over the ISL. They configure both ends of the ISL as E ports and enable trunking. After configuration, they notice that only VSAN 10 traffic passes over the ISL. The other VSANs appear isolated. The show vsan membership shows all three VSANs are present on both switches. The show interface trunk on the ISL shows that the trunk is up but only VSAN 10 is allowed. What is the most likely cause?

A.The other VSANs are not configured on the trunk interface

B.The allowed VSAN list on the trunk port is limited to only VSAN 10

C.The trunk mode is set to 'on' instead of 'desirable'/'auto'

D.The ISL is in an error-disabled state for VSAN 20 and 30

AnswerB

The allowed VSAN list must be explicitly configured to include VSAN 20 and 30.

Why this answer

The show interface trunk output indicates that only VSAN 10 is in the allowed list. The allowed VSAN list on the trunk port must be configured to include all three VSANs. The trunk mode (on/desirable) does not limit VSANs.

Error-disabled would show in different status. VSAN membership on the interface is not applicable for trunk ports.

Practice this question →

159

MCQmedium

A Cisco MDS switch is configured with two VSANs. Hosts in VSAN 1 cannot communicate with hosts in VSAN 2. What is the most likely reason?

A.The IVR is not configured.

B.The VSANs are not connected through an IVR zone.

C.The FC domain ID is conflicting.

D.The switch does not support multi VSAN.

E.The hosts are on different switches.

AnswerB

IVR zones define which devices can communicate across VSANs. Without these zones, traffic is isolated.

Why this answer

By default, VSANs are isolated from each other, meaning traffic cannot cross VSAN boundaries. Inter-VSAN Routing (IVR) must be explicitly configured to allow communication between hosts in different VSANs. Without IVR, hosts in VSAN 1 and VSAN 2 remain in separate fabrics and cannot communicate, even if they are connected to the same switch.

Exam trap

Cisco often tests the misconception that VSANs are like VLANs and can communicate by default, but in Fibre Channel fabrics, VSANs are fully isolated unless IVR is explicitly configured.

How to eliminate wrong answers

Option A is wrong because IVR not being configured is not the most likely reason; the question asks for the most likely reason, and the absence of an IVR zone is a more specific and direct cause. Option C is wrong because conflicting FC domain IDs would cause issues within a single VSAN or between switches in the same VSAN, not between different VSANs. Option D is wrong because the Cisco MDS switch supports multiple VSANs natively; the inability to communicate between VSANs is by design, not a lack of support.

Option E is wrong because hosts on different switches can still communicate if they are in the same VSAN or if IVR is configured; the issue here is the VSAN boundary, not the physical switch location.

Practice this question →

160

MCQmedium

A storage administrator needs to isolate Fibre Channel traffic between two departments in a data center using a single MDS switch. The administrator decides to create separate VSANs. Which statement about VSANs is true?

A.VSANs share the same fabric services across all VSANs.

B.VSANs provide isolation similar to VLANs in Ethernet networks.

C.VSANs require separate physical interfaces for each VSAN.

D.VSANs cannot be used with FCoE.

AnswerB

VSANs create separate logical Fibre Channel fabrics on the same physical infrastructure.

Why this answer

VSANs provide isolation similar to VLANs in Ethernet. Each VSAN has its own fabric services and does not share traffic with other VSANs.

Practice this question →

161

MCQhard

An engineer is designing a SAN for a virtualized environment with 20 hosts and 4 storage arrays. Each host requires a separate zone per storage array for security. What is the minimum number of zones required?

A.40

B.20

C.80

D.100

AnswerC

20 hosts * 4 arrays = 80 zones.

Why this answer

In a Fibre Channel SAN with N_Port ID Virtualization (NPIV), each host requires a separate zone per storage array to enforce strict isolation. With 20 hosts and 4 storage arrays, the minimum number of zones is 20 hosts × 4 arrays = 80 zones. This ensures that each host-array pair is isolated, preventing unauthorized access and aligning with security best practices.

Exam trap

Cisco often tests the concept that each host-array pair requires a separate zone, leading candidates to mistakenly multiply hosts by arrays incorrectly or forget that each host needs a zone per array, not just one zone per host.

How to eliminate wrong answers

Option A (40) is wrong because it incorrectly assumes only one zone per host (20 hosts × 2) or a miscalculation of half the required zones. Option B (20) is wrong because it assumes a single zone per host, ignoring the requirement for separate zones per storage array. Option D (100) is wrong because it overcounts, possibly by adding extra zones for redundancy or misapplying a formula like 20 hosts × 5 arrays.

Practice this question →

162

MCQhard

Refer to the exhibit. An engineer is troubleshooting poor FCoE performance. The exhibit shows output from the FCoE interface. Which observation indicates a potential issue?

A.PFC frames received is high compared to PFC frames sent

B.The CRC error count is zero

C.Data frames are 1500 bytes, which is too small for FCoE

D.The admin port mode is F instead of NP

AnswerA

Receiving many pause frames implies the peer is congested or PFC mismatch.

Why this answer

A high count of PFC frames received compared to PFC frames sent indicates that the local interface is receiving many pause frames from the peer, which suggests the peer is experiencing congestion and is forcing the local interface to pause its transmission. This asymmetry is a classic symptom of a buffer congestion or credit starvation issue in the FCoE SAN fabric, leading to poor FCoE performance.

Exam trap

Cisco often tests the misconception that CRC errors or MTU size are the primary causes of FCoE performance issues, when in reality the asymmetry in PFC frame counts is a more subtle and direct indicator of congestion in a lossless fabric.

How to eliminate wrong answers

Option B is wrong because a CRC error count of zero is normal and indicates no physical-layer errors, which is not a performance issue. Option C is wrong because FCoE data frames are typically 1500 bytes (or up to 2500 bytes with jumbo frames), and 1500 bytes is standard for FCoE; it is not too small. Option D is wrong because the admin port mode F (Fabric) is correct for an FCoE forwarder (FCF) facing an ENode; NP mode is used for NPV (N-Port Virtualization) and would be incorrect in this context.

Practice this question →

163

MCQmedium

In an FCoE deployment, a storage administrator needs to ensure that FCoE traffic is carried over a dedicated VLAN. Which configuration is required on a Cisco Nexus switch?

A.Configure the VLAN as a private VLAN.

B.Assign the VLAN as an access VLAN to the interface.

C.Enable FIP snooping and map the FCoE VLAN to a VSAN.

D.Configure the VLAN as a native VLAN on the FCoE interface.

AnswerC

FIP snooping is needed for FCoE; mapping FCoE VLAN to VSAN isolates traffic.

Why this answer

In an FCoE deployment, FIP snooping is required on the Cisco Nexus switch to enforce that only FCoE traffic is carried over a dedicated VLAN. The FCoE VLAN must be mapped to a VSAN to ensure proper isolation and forwarding of storage traffic. This configuration prevents unauthorized devices from injecting FCoE frames and maintains the integrity of the storage network.

Exam trap

Cisco often tests the misconception that a dedicated VLAN alone is sufficient for FCoE traffic, but the trap here is that FIP snooping and VSAN mapping are mandatory to enforce isolation and security, not just VLAN assignment.

How to eliminate wrong answers

Option A is wrong because a private VLAN isolates traffic at Layer 2 within a VLAN, but it does not provide the necessary FCoE-specific control or VSAN mapping; FCoE requires a dedicated standard VLAN with FIP snooping. Option B is wrong because assigning the VLAN as an access VLAN to the interface would strip 802.1Q tags and prevent FCoE frames (which are always tagged) from being properly identified and forwarded. Option D is wrong because configuring the VLAN as a native VLAN on the FCoE interface would cause untagged traffic to be placed in that VLAN, but FCoE frames must be explicitly tagged with the FCoE VLAN ID; native VLAN behavior conflicts with the requirement for a dedicated, tagged FCoE VLAN.

Practice this question →

164

MCQhard

A storage administrator is troubleshooting FCoE performance issues between a Cisco UCS FI and a storage array. The fabric is configured with FIP snooping and DCB. The administrator checks the FCoE interface counters and sees many dropped frames due to 'no buffer space'. What is the most likely root cause?

A.Jumbo frames are disabled on the switch ports

B.The FCoE VLAN is not trunked to the storage array

C.FIP snooping is not enabled on the FCoE VLAN

D.Priority flow control settings are mismatched between the upstream switch and the storage array

AnswerD

PFC mismatch can cause buffer exhaustion and drops.

Why this answer

The 'no buffer space' drops on FCoE interfaces indicate that the receive buffers are being exhausted, which is a classic symptom of Priority Flow Control (PFC) being misconfigured or mismatched between the upstream switch and the storage array. PFC (IEEE 802.1Qbb) is essential for lossless FCoE transport; if one side sends pause frames that the other does not honor, or if the PFC priorities are not aligned, buffers overflow and frames are dropped. This directly explains the observed counter behavior.

Exam trap

Cisco often tests the distinction between 'no buffer space' drops (caused by PFC/flow control mismatches) and other drop types like 'output drops' or 'CRC errors', leading candidates to incorrectly blame jumbo frames or VLAN issues.

How to eliminate wrong answers

Option A is wrong because jumbo frames (typically 9216 bytes) are required for FCoE to encapsulate large SCSI data payloads, but disabling them would cause frame oversize drops, not 'no buffer space' drops. Option B is wrong because the FCoE VLAN not being trunked would result in no connectivity or VLAN mismatch errors, not buffer exhaustion drops. Option C is wrong because FIP snooping is a security feature that prevents unauthorized FCoE devices from joining the fabric; its absence could allow rogue devices but does not cause buffer drops due to PFC mismatches.

Practice this question →

165

MCQhard

An engineer is configuring FCoE on a Cisco Nexus 5000 switch. The switch connects to a Fibre Channel storage array. The FCoE Initialization Protocol (FIP) snooping must be enabled. What is the effect of enabling FIP snooping?

A.It enables the switch to terminate FCoE VLANs.

B.It provides FC-BB_6 compliant FCoE traffic forwarding.

C.It enables the switch to act as an FCoE forwarder.

D.It constructs a database of ENode MAC addresses and FC-MAPs.

E.It allows the switch to enforce zone-based policy for FCoE traffic.

AnswerD

FIP snooping monitors FIP frames to build a database of authorized devices.

Why this answer

FIP snooping on a Cisco Nexus 5000 switch constructs a database of ENode MAC addresses and FC-MAPs by inspecting FIP discovery, advertisement, and login frames. This database is used to enforce FCoE traffic only between authorized ENodes and FCFs, preventing rogue devices from injecting FCoE traffic. It does not terminate FCoE VLANs, act as an FCoE forwarder, or enforce zone-based policies directly.

Exam trap

Cisco often tests the distinction between FIP snooping (a security feature that builds a database of MAC-to-FC-MAP bindings) and FCoE forwarding (which requires an FCF), leading candidates to mistakenly think snooping enables forwarding or termination.

How to eliminate wrong answers

Option A is wrong because FIP snooping does not terminate FCoE VLANs; VLAN termination is a function of an FCoE forwarder (FCF) or a bridge, not a snooping feature. Option B is wrong because FC-BB_6 compliance is a standard for FCoE operation, but FIP snooping itself does not provide compliant forwarding; it only monitors and filters FIP frames to secure the fabric. Option C is wrong because FIP snooping does not enable the switch to act as an FCoE forwarder; an FCoE forwarder is a separate entity that performs encapsulation and forwarding, while snooping is a passive security mechanism.

Option E is wrong because zone-based policy enforcement for FCoE traffic is handled by the Fibre Channel zoning configuration on the FCF or SAN fabric, not by FIP snooping on the switch.

Practice this question →

166

MCQmedium

A company is deploying a new storage network using Cisco MDS 9700 switches. They have multiple host servers and storage arrays. The security policy requires that each host can only access its own LUNs. The solution must be efficient and not require reconfiguration when new hosts are added. Which approach best meets these requirements?

A.Traditional zone-based zoning with pWWNs

B.VSAN zoning

C.FSPF metric tuning

D.Smart Zoning

AnswerD

Smart Zoning reduces zone objects and simplifies management by automatically handling LUN masking.

Why this answer

Smart Zoning is correct because it automatically creates LUN-specific access controls based on the host initiator and target storage port, ensuring each host can only see its own LUNs without manual reconfiguration when new hosts are added. This approach reduces the number of zone objects and simplifies management by using LUN-level granularity within a single zone, unlike traditional zoning which requires per-LUN zones.

Exam trap

Cisco often tests the misconception that VSAN zoning or traditional pWWN zoning can provide LUN-level isolation, but they only operate at the port level, failing to meet the per-host LUN access requirement without excessive administrative overhead.

How to eliminate wrong answers

Option A is wrong because traditional zone-based zoning with pWWNs only controls which initiators can talk to which targets at the port level, not at the LUN level, so it cannot enforce per-host LUN isolation without creating many separate zones that require reconfiguration when new hosts are added. Option B is wrong because VSAN zoning segments the fabric into separate virtual SANs but still operates at the port level, not LUN level, and adding new hosts would require VSAN membership changes or additional zones. Option C is wrong because FSPF metric tuning is used for routing path selection in Fibre Channel fabrics and has no role in access control or LUN masking.

Practice this question →

167

MCQhard

An iSCSI SAN is experiencing performance issues. The storage array and initiators are connected via a dedicated VLAN. The network team notices high jitter. What is the most effective mitigation?

A.Use multiple iSCSI sessions per initiator

B.Configure link aggregation between switches

C.Enable jumbo frames on all switches

D.Implement QoS to give iSCSI traffic higher priority

AnswerD

Correct: QoS reduces jitter by prioritizing iSCSI traffic.

Why this answer

High jitter indicates variable latency in the network, which is detrimental to iSCSI performance because iSCSI relies on TCP and is sensitive to delay variation. Implementing QoS to prioritize iSCSI traffic ensures consistent low-latency delivery by marking iSCSI frames (e.g., with DSCP CS4 or AF41) and queuing them ahead of other traffic, directly mitigating jitter. This is the most effective mitigation because it addresses the root cause—uncontrolled network congestion—rather than increasing parallelism or frame size.

Exam trap

Cisco often tests the misconception that jumbo frames or link aggregation solve latency and jitter issues, when in fact they address throughput and bandwidth, not delay variation; the trap is confusing throughput optimization with latency/jitter mitigation.

How to eliminate wrong answers

Option A is wrong because using multiple iSCSI sessions per initiator increases parallelism but does not reduce jitter; it can actually exacerbate congestion and jitter by adding more TCP streams. Option B is wrong because link aggregation (LACP) increases aggregate bandwidth and provides redundancy but does not prioritize traffic or reduce jitter; it may even spread iSCSI flows across multiple links, causing out-of-order delivery and retransmissions. Option C is wrong because enabling jumbo frames reduces CPU overhead and improves throughput for large transfers but does not address jitter; jumbo frames can even increase latency variation if not supported end-to-end or if fragmentation occurs.

Practice this question →

168

MCQeasy

A storage administrator connects a host to an MDS switch via Fibre Channel. The host has an HBA with WWPN 21:00:00:1b:32:12:34:56. Which port type does the MDS switch automatically configure on the interface connecting to the host?

A.F-port

B.Trunk port

C.NP-port

D.E-port

AnswerA

F-port connects to an N-port (host or target) and provides fabric services.

Why this answer

When a host (N-port) connects to a switch, the switch operates as an F-port (fabric port) to provide fabric services. Cisco MDS switches auto-detect and configure the port as F-port unless specifically set otherwise.

Practice this question →

169

MCQmedium

What is the purpose of FIP (FCoE Initialization Protocol) in an FCoE network?

A.To discover FCoE-capable devices and establish virtual links

B.To provide flow control for FCoE traffic

C.To negotiate DCB parameters

D.To encapsulate FC frames into Ethernet frames

AnswerA

FIP handles discovery and initialization.

Why this answer

FIP is used to discover and initialize FCoE devices and establish virtual links before FCoE data frames can be sent.

Practice this question →

170

MCQhard

In an FCoE environment, which protocol is responsible for discovering and initializing FCoE-capable endpoints, including the exchange of MAC addresses and establishing virtual links?

A.ARP

B.DCBX

C.FCoE

D.FIP

AnswerD

FIP handles discovery and initialization for FCoE.

Why this answer

The FCoE Initialization Protocol (FIP) is used to discover FCoE devices and establish virtual links before FCoE data frames are sent.

Practice this question →

171

MCQeasy

An engineer is configuring iSCSI multipath I/O (MPIO) for a storage array. The initiator has two NICs connected to two different switches, and the target has two iSCSI ports on different subnets. Which condition must be met for MPIO to function correctly?

A.CHAP authentication must be disabled.

B.Each path must be on a separate subnet.

C.Both paths must be on the same subnet.

D.Jumbo frames must be enabled on all interfaces.

AnswerB

Separate subnets ensure distinct paths for MPIO.

Why this answer

MPIO requires that the initiator and target have multiple paths that are not on the same subnet to avoid routing issues. Typically, each path should be on a separate subnet.

Practice this question →

172

Multi-Selecthard

An organization is deploying a new Fibre Channel SAN with Cisco MDS switches. The design requires high availability and load sharing over multiple ISLs. Which three features should be implemented? (Choose three.)

Select 3 answers

A.NPIV

B.Fibre Channel PortChannels

C.Multiple equal-cost paths via FSPF

D.Hard zoning by WWPN

E.VSAN trunking (EISL)

AnswersB, C, E

PortChannels combine multiple ISLs for increased bandwidth and redundancy.

Why this answer

VSAN trunking (EISL) allows multiple VSANs over a single ISL; PortChannels aggregate multiple physical ISLs into a logical link with load balancing; multiple active equal-cost paths (FSPF) provide load sharing and redundancy.

Practice this question →

173

MCQmedium

An engineer is configuring a Cisco MDS switch to connect to a core switch in NPV mode. The edge switch will be connected to the core via an ISL. What port mode should be configured on the edge switch's interface connecting to the core?

A.F-port

B.E-port

C.NP-port

D.auto

AnswerC

NP-port is the correct mode for an edge switch interface connecting to the core fabric in NPV mode.

Why this answer

In NPV mode, the edge switch uses NP-ports to connect to the core switch's F-ports. This allows the edge switch to appear as a host to the core fabric.

Practice this question →

174

MCQhard

An engineer is troubleshooting a SAN performance issue. The MDS switch shows high CRC errors on an F port. The host is connected via a 16 Gbps FC link. The errors increase when the host sends large I/O. What is the most likely cause?

A.The host's HBA firmware is outdated.

B.The zone configuration is incorrect.

C.The host is experiencing buffer credit starvation.

D.The switch port is configured for 8 Gbps.

E.The cable length exceeds the supported distance for 16 Gbps.

AnswerE

16 Gbps FC has shorter reach; long cables cause CRC errors, especially under heavy load.

Why this answer

At 16 Gbps Fibre Channel, signal integrity degrades over long cable distances, causing bit errors that manifest as CRC errors on the F port. The error increase with large I/O is characteristic of marginal signal quality, as larger frames are more likely to encounter corrupted bits. Option E correctly identifies that the cable length exceeds the supported distance for 16 Gbps, typically 10 meters for OM3 multimode fiber or 100 meters for OM4, depending on the transceiver type.

Exam trap

Cisco often tests the distinction between physical-layer errors (CRC, running disparity) and higher-layer issues (buffer credits, zoning), so the trap here is that candidates confuse buffer credit starvation (a flow-control problem) with CRC errors (a signal-integrity problem).

How to eliminate wrong answers

Option A is wrong because outdated HBA firmware typically causes link instability or negotiation failures, not CRC errors that scale with I/O size. Option B is wrong because zone configuration errors cause connectivity or login issues, not CRC errors on an established link. Option C is wrong because buffer credit starvation causes performance degradation (e.g., reduced throughput) due to lack of credits, not CRC errors; CRC errors indicate physical-layer issues.

Option D is wrong because if the switch port were configured for 8 Gbps, the link would negotiate to 8 Gbps and CRC errors would not increase with large I/O at 16 Gbps; the symptom would be a speed mismatch, not CRC errors.

Practice this question →

175

Multi-Selecthard

Which THREE statements accurately describe FCIP (Fibre Channel over IP) configurations on Cisco MDS switches?

Select 3 answers

A.FCIP uses VE_port (Virtual E_port) interfaces to connect to the FC fabric

B.FCIP requires IPsec for security over public networks

C.FCIP can be used in conjunction with Fibre Channel port channels

D.FCIP compression reduces the latency of the IP transport

E.FCIP can be configured on a GigabitEthernet interface

AnswersA, C, E

VE_ports terminate FCIP tunnels.

Why this answer

FCIP encapsulates Fibre Channel frames into IP packets and uses VE_ports (Virtual E_ports) to connect separate FC fabrics over an IP network. VE_ports behave like standard E_ports but operate over an FCIP tunnel, allowing Fibre Channel fabric services to extend across the IP link.

Exam trap

Cisco often tests the misconception that FCIP compression reduces latency, when in fact it only reduces bandwidth usage and can actually increase latency due to the processing overhead of compression algorithms.

Practice this question →

176

Multi-Selecthard

An engineer is troubleshooting a performance issue on a Cisco MDS 9700 switch. The 'show interface fc1/1' output shows CRC errors incrementing slowly. The interface is connected to a storage array. Which two actions should the engineer take to resolve the issue?

Select 2 answers

A.Increase the MTU size on the interface.

B.Replace the fiber optic cable and SFP.

C.Enable BB_credit recovery on the interface.

D.Clear the interface counters.

E.Change the interface speed from auto to a fixed value.

AnswersB, C

Faulty cables or SFPs are common causes of CRC errors.

Why this answer

CRC errors on a Fibre Channel interface typically indicate physical-layer issues such as faulty cabling, damaged SFPs, or dirty optical connectors. Replacing the fiber optic cable and SFP (Option B) directly addresses the most common root cause of CRC errors. Additionally, enabling BB_credit recovery (Option C) helps mitigate performance degradation caused by buffer credit starvation, which can manifest as CRC-like symptoms in some scenarios.

Exam trap

Cisco often tests the distinction between physical-layer errors (CRC) and flow-control issues (BB_credit), tempting candidates to choose a single answer when both a physical fix and a protocol-level tuning are required.

Practice this question →

177

MCQmedium

A storage administrator is configuring a new Fibre Channel fabric using Cisco MDS switches. The edge switches must connect to the core without participating in the full routing domain to conserve domain IDs. Which Fibre Channel feature should be configured on the edge switches?

A.PortChannels

B.VSANs

C.NPV mode

D.EISL trunking

AnswerC

NPV mode allows edge switches to proxy login through the core switch, eliminating the need for a domain ID.

Why this answer

N-Port Virtualization (NPV) mode allows an edge switch to connect to a core switch without consuming a Fibre Channel domain ID, scaling the fabric while reducing administrative overhead.

Practice this question →

178

Drag & Dropmedium

Sequence the steps to configure a VXLAN with BGP EVPN on a Cisco Nexus switch.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps

Order

1Step 1

2Step 2

3Step 3

4Step 4

Why this order

VXLAN EVPN requires overlay feature, VNI mapping, VTEP loopback, BGP peering, and verification.

Practice this question →

179

MCQhard

A large enterprise data center has a disaster recovery site 100 km away. The SAN uses two MDS 9700 series switches at each site, connected via a dedicated dark fiber. Each link operates at 16 Gbps with a round-trip time of 2 ms. Recently, backup jobs to the remote storage array have been failing with timeout errors. The backup server is local to Site A, but the backup target is in Site B. The link utilization never exceeds 40%, and no errors are reported on the interfaces. The engineer suspects the issue is related to buffer credits. The current buffer credit count on the ISL is 16. The engineer calculates that for 16 Gbps over 100 km (2 ms RTT), they need at least 200 credits to maintain full throughput. Which action is most appropriate to resolve the issue?

A.Enable NPIV on the ISL ports to allow multiple logins.

B.Increase the buffer-to-buffer credit count to 300 on the ISL interfaces.

C.Configure the ISL to operate at 8 Gbps to reduce the buffer credit requirement.

D.Implement FCIP over the existing dark fiber to offload buffer credit management.

AnswerB

Increasing buffer-to-buffer credits to 300 provides enough credits to keep the link fully utilized over the 100 km distance, preventing timeout errors.

Why this answer

The timeout errors during backup are caused by buffer credit starvation, as the current credit count of 16 is insufficient for the 100 km distance (2 ms RTT) at 16 Gbps. Increasing the buffer-to-buffer credit count to 300 ensures enough credits to maintain full throughput, preventing credit starvation and associated timeouts. Option B is correct because it directly addresses the insufficient credit count.

Option A (NPIV) is unrelated to buffer credits; NPIV allows multiple N-port logins, not credit management. Option C (reducing speed to 8 Gbps) would lower throughput and is not optimal. Option D (FCIP) is unnecessary because the existing dark fiber provides a direct Fibre Channel link; FCIP is for IP-based transport and does not help with buffer credit issues.

Practice this question →

180

MCQeasy

A network engineer is configuring a new Fibre Channel switch to connect to an existing storage fabric. The switch will be used to aggregate multiple edge switches and must appear as a single Fibre Channel device to the core. Which port type should be used on the edge switch facing the core switch to achieve this?

A.F-port

B.N-port

C.NP-port

D.E-port

AnswerC

Correct. NP-port is used in NPV mode to connect an edge switch to the core fabric.

Why this answer

NP-port (N-Port Virtualization) is used on an edge switch in NPV mode to connect to the core fabric; it behaves like an N-port but allows multiple N-port IDs behind it.

Practice this question →

181

MCQeasy

A data center architect is designing a SAN with two MDS switches using VSANs. Which method ensures traffic isolation between departments while allowing sharing of a tape library?

A.Use FCIP tunnels for each department.

B.Create separate VSANs and merge them for the tape library.

C.Create separate VSANs for each department and a shared VSAN for the tape library with inter-VSAN routing (IVR).

D.Use one VSAN for all departments and one zone for each department.

AnswerC

IVR allows selective sharing between VSANs.

Why this answer

It uses separate VSANs to isolate each department's traffic at Layer 2, while inter-VSAN routing (IVR) selectively allows the tape library to be shared across VSANs without merging them. IVR enables controlled communication between specific initiators and targets in different VSANs, preserving isolation for all other traffic.

Exam trap

The trap here is that candidates often confuse VSANs with zones, thinking that zoning alone provides the same level of isolation as separate VSANs, but VSANs create independent fabrics while zones only restrict access within a single fabric.

How to eliminate wrong answers

Option A is wrong because FCIP tunnels are used for extending Fibre Channel over IP networks, not for traffic isolation within a local SAN; they do not address department-level isolation or tape library sharing. Option B is wrong because merging VSANs would combine all traffic into a single fabric, breaking the required isolation between departments. Option D is wrong because using a single VSAN with zones only provides access control within that VSAN, but does not isolate traffic at the fabric level; all departments would share the same control plane and broadcast domain, violating strict isolation requirements.

Practice this question →

182

MCQeasy

An NFS client is unable to write to a mounted export. The client can read files. What is the most likely cause?

A.Export permissions are read-only for the client

B.Network latency causing timeouts

C.Incorrect mount options (e.g., ro instead of rw)

D.NFS version mismatch

AnswerA

Correct: Read-only export allows reads but denies writes.

Why this answer

The NFS export permissions are configured on the NFS server using the /etc/exports file. If the export is set to 'ro' (read-only) for the client's IP or subnet, the client can read files but any write attempt will be denied at the server level, regardless of the client's mount options. This is the most direct cause of a client being able to read but not write.

Exam trap

Cisco often tests the distinction between server-side export permissions and client-side mount options, trapping candidates who assume that a 'rw' mount option guarantees write capability without considering the server's export configuration.

How to eliminate wrong answers

Option B is wrong because network latency or timeouts would typically cause intermittent failures or slow performance, not a consistent inability to write while reads succeed. Option C is wrong because if the client mounts with 'ro' (read-only), the mount would succeed but writes would fail at the client kernel level with a 'Read-only file system' error; however, the question states the client can read files, which is consistent with a read-only mount, but the most likely cause given the server-side control is export permissions. Option D is wrong because an NFS version mismatch would usually prevent the mount entirely or cause protocol negotiation failures, not allow reads while blocking writes.

Practice this question →

183

Multi-Selectmedium

Which TWO statements correctly describe active zone sets in a Cisco MDS Fibre Channel fabric?

Select 2 answers

A.The active zone set is propagated to all switches in the fabric

B.Only one zone set can be active per VSAN

C.Zones within the active zone set can be selectively deactivated

D.The active zone set is stored in the running configuration only

E.Multiple zone sets can be active simultaneously

AnswersA, B

When a zone set is activated, it is distributed to all switches in the VSAN.

Why this answer

An active zone set is the set of zones that are enforced in the fabric. Only one zone set can be active at a time, and it is propagated to all switches in the fabric.

Practice this question →

184

MCQmedium

A Cisco MDS switch is configured with fabric binding to restrict which switches can join the fabric. A new switch is added, but it fails to establish an E-port connection. What is the most likely cause?

A.Incompatible SFP modules between the switches

B.Incorrect zoning configuration on the existing switch

C.The new switch has a higher priority than the principal switch

D.The new switch's WWN is not included in the fabric binding configuration

AnswerD

Fabric binding rejects unauthorized switches.

Why this answer

Fabric binding on a Cisco MDS switch uses the fabric-binding database to enforce a whitelist of allowed switch WWNs. When a new switch attempts to bring up an E-port, the principal switch checks the new switch's WWN against this database. If the WWN is not present, the E-port is automatically isolated, preventing the switch from joining the fabric.

This is the most direct cause of the failure described.

Exam trap

Cisco often tests the distinction between fabric binding (switch-level admission control) and zoning (device-level access control), leading candidates to incorrectly attribute E-port failures to zoning issues.

How to eliminate wrong answers

Option A is wrong because incompatible SFP modules would typically cause a link-down or operational failure at the physical layer, not a specific E-port isolation due to fabric binding. Option B is wrong because zoning controls which initiators and targets can communicate within a fabric, not which switches are allowed to join the fabric; incorrect zoning would not prevent an E-port from coming up. Option C is wrong because switch priority affects principal switch election and load balancing, but a higher priority does not cause E-port isolation; fabric binding enforces WWN-based admission regardless of priority.

Practice this question →

185

MCQhard

A data center deployment uses NPV mode on a Cisco MDS switch to connect to a core Fibre Channel switch. After configuration, the NPV switch does not register with the core. What is the most likely cause?

A.Fibre Channel ports are in trunk mode.

B.The core switch has NPV mode enabled.

C.NPIV is not enabled on the core switch.

D.The NPV switch has an incorrect domain ID.

AnswerC

Core must have NPIV enabled for NPV.

Why this answer

NPV (N_Port Virtualization) mode requires NPIV (N_Port ID Virtualization) to be enabled on the core Fibre Channel switch. NPIV allows a single physical N_Port to register multiple FCIDs (Fibre Channel IDs) for multiple virtual initiators behind the NPV switch. Without NPIV on the core, the NPV switch cannot complete the FLOGI (Fabric Login) process and will not register with the fabric.

Exam trap

Cisco often tests the distinction between NPV and NPIV, trapping candidates who confuse the two or assume that enabling NPV on both sides is required.

How to eliminate wrong answers

Option A is wrong because trunk mode on Fibre Channel ports (E_Port or TE_Port) is used for ISL (Inter-Switch Link) connections between core switches, not for NPV uplinks, which use NP_Ports. Option B is wrong because enabling NPV mode on the core switch would break the NPV architecture; NPV is only enabled on the edge switch (the NPV switch), while the core must operate in standard Fibre Channel switch mode (with NPIV enabled). Option D is wrong because domain IDs are assigned by the principal switch in the fabric and are not configured manually on NPV switches; NPV switches do not participate in domain ID distribution as they are not full switches in the fabric.

Practice this question →

186

MCQeasy

Which FCoE component is responsible for encapsulating Fibre Channel frames into Ethernet frames?

A.FCoE module on the switch or adapter

B.FCoE Forwarder (FCF)

C.Virtual Fibre Channel interface (VFC)

D.VN interface

AnswerA

The FCoE module performs encapsulation/decapsulation.

Why this answer

The FCoE module on the switch or adapter is the component that performs the encapsulation of native Fibre Channel frames into Ethernet frames. This module handles the conversion by adding an Ethernet header, including the EtherType 0x8906 for FCoE, and managing the mapping of Fibre Channel constructs (e.g., VSANs) to VLANs. Without this module, Fibre Channel traffic cannot traverse an Ethernet network.

Exam trap

Cisco often tests the distinction between the component that performs encapsulation (FCoE module) and the logical interfaces or forwarding entities (VFC, VN, FCF) that rely on that encapsulation, leading candidates to confuse the control-plane role of the FCF or the logical nature of VFC/VN interfaces with the actual encapsulation function.

How to eliminate wrong answers

Option B (FCoE Forwarder or FCF) is wrong because the FCF is a control-plane device that provides Fibre Channel forwarding services (e.g., fabric login, name server) and connects FCoE VLANs to Fibre Channel SANs, but it does not perform the actual encapsulation of frames; that is done by the FCoE module. Option C (Virtual Fibre Channel interface or VFC) is wrong because a VFC is a logical interface that binds to an Ethernet interface and represents a Fibre Channel port in software, but it does not encapsulate frames; it relies on the underlying FCoE module for encapsulation. Option D (VN interface) is wrong because a VN interface is a virtual N_port (node port) that appears to the Fibre Channel stack as a standard N_port, but it is a logical construct that uses the FCoE module for encapsulation; it does not perform the encapsulation itself.

Practice this question →

187

MCQhard

A company is deploying a multi-tenant environment with several virtualized hosts using NPIV. Each virtual machine requires its own WWPN. During testing, some VMs cannot log into the SAN. The MDS switch logs show 'FLOGI rejected: no available resources'. What is the most likely cause?

A.The maximum FC frame size is set incorrectly on the switch

B.The VSAN maximum number of devices has been reached

C.The zone set is full and cannot accept more members

D.The NPIV limit or the number of allowed logins has been exceeded on the upstream switch

AnswerD

By default, NPIV max logins may be hit with many VMs.

Why this answer

The error 'FLOGI rejected: no available resources' on an MDS switch in an NPIV environment indicates that the switch has exhausted its allocated resources for handling fabric logins (FLOGIs) from N_Port ID Virtualization (NPIV) initiators. NPIV allows multiple virtual WWPNs to share a single physical FC port, but each virtual login consumes a login resource on the upstream switch. When the NPIV limit or the maximum number of allowed logins per interface or per VSAN is exceeded, the switch rejects new FLOGIs, preventing VMs from logging into the SAN.

Exam trap

Cisco often tests the distinction between resource exhaustion (NPIV login limits) and configuration errors (zoning or VSAN device limits) by using the specific error message 'FLOGI rejected: no available resources', which candidates mistakenly attribute to zoning or VSAN device limits instead of NPIV login resource depletion.

How to eliminate wrong answers

Option A is wrong because the maximum FC frame size (e.g., 2112 bytes vs. 1024 bytes) affects data transmission efficiency and fragmentation, not the ability to perform a fabric login (FLOGI), which is a control-plane operation. Option B is wrong because the VSAN maximum number of devices (configurable via 'fabric-limit device-login-limit') would cause a different error, such as 'device not allowed' or 'login denied', not a resource exhaustion error for FLOGI. Option C is wrong because a full zone set prevents new zone members from being added or activated, but it does not block an existing zone member's FLOGI; the error 'FLOGI rejected: no available resources' is a login resource issue, not a zoning configuration issue.

Practice this question →

188

MCQmedium

A storage array supports both synchronous and asynchronous replication. The application requires zero data loss in case of a site failure. Which replication type should be chosen?

A.Synchronous replication

B.Asynchronous replication

C.Thin provisioning

D.Snapshot-based replication

AnswerA

Synchronous replication guarantees zero data loss as data must be written to both sites.

Why this answer

Synchronous replication writes data to the primary and secondary storage before acknowledging the write, ensuring zero data loss (RPO=0). Asynchronous replication may have some lag.

Practice this question →

189

MCQeasy

A small business has a Cisco MDS 9148S switch with a single fabric. Two hosts are connected to ports fc1/1 and fc1/2, and a storage array is connected to ports fc1/3 and fc1/4. The administrator wants to ensure that each host can only see its own assigned LUNs on the array. They have configured a zone for each host containing the host pWWN and the target pWWN for the respective LUNs. However, Host A is able to see Host B's LUNs. What is the most likely cause?

A.The zone is not active

B.The zones are not in the same VSAN

C.The target ports are using soft zoning

D.The zoning configuration is using a zone alias that includes both hosts

AnswerD

A zone alias containing both hosts would place them in the same zone, allowing cross-access.

Why this answer

The administrator likely used a zone alias that inadvertently includes both hosts' pWWNs. In Cisco MDS zoning, a zone alias is a named set of pWWNs; if the alias contains both Host A and Host B, then any zone using that alias will include both hosts, allowing Host A to see Host B's LUNs. This violates the intended hard-zoning isolation, as zones must contain only the specific host-target pairs to enforce LUN masking.

Exam trap

The trap here is that candidates often assume 'zone alias' is just a naming convenience that doesn't affect zone membership, but Cisco tests that an alias expands to include all its members, so using a shared alias in multiple zones breaks isolation.

How to eliminate wrong answers

Option A is wrong because if the zone were not active, no host would see any LUNs, not just cross-host visibility; zones must be activated via the 'zone activate' command to take effect. Option B is wrong because zones in different VSANs are isolated by default and cannot communicate, so this would prevent any visibility, not cause unintended access. Option C is wrong because soft zoning (name server filtering) only hides devices from queries but does not prevent frame-level access; the issue described is actual LUN visibility, which requires hard zoning (hardware-enforced access control) to be misconfigured.

Practice this question →

190

MCQeasy

An engineer is configuring a Fibre Channel over Ethernet (FCoE) SAN. Which statement about FCoE Initialization Protocol (FIP) is true?

A.FIP operates only over lossless Ethernet.

B.FIP uses Ethernet MAC addresses for communication.

C.FIP is used only for FCoE initialization, not for maintenance.

D.FIP requires IP addresses to establish FCoE sessions.

AnswerB

FIP uses MAC addresses for discovery and login.

Why this answer

FCoE Initialization Protocol (FIP) uses Ethernet MAC addresses for communication during the discovery, initialization, and maintenance phases of an FCoE session. FIP frames are encapsulated in standard Ethernet frames with a specific EtherType (0x8914), allowing FCoE-capable endpoints to discover each other and establish virtual links without relying on IP addresses.

Exam trap

Cisco often tests the misconception that FIP requires IP addresses or that it is only used during initialization, when in fact FIP uses MAC addresses and also handles ongoing session maintenance like keep-alives.

How to eliminate wrong answers

Option A is wrong because FIP operates over lossless Ethernet (using priority flow control, PFC), but it is not limited to lossless Ethernet; FIP can also run over lossy Ethernet for discovery and initialization, though data traffic requires lossless Ethernet. Option C is wrong because FIP is used not only for initialization but also for ongoing maintenance, such as keep-alive messages (FIP VLAN request, FIP keep-alive) to monitor and maintain the FCoE session. Option D is wrong because FIP does not require IP addresses; it uses Ethernet MAC addresses and FCoE-specific EtherTypes to establish and manage FCoE sessions, avoiding the IP layer entirely.

Practice this question →

191

MCQhard

During FCoE initialization, which protocol is used by a CNA to discover FCoE-capable switches and establish a virtual link?

A.LLDP

B.DCBX

C.FIP

D.ARP

AnswerC

FIP is the standard protocol for FCoE initialization and discovery.

Why this answer

FIP (FCoE Initialization Protocol) is used by CNAs to discover FCoE switches (FCFs) and perform login to create VN-ports.

Practice this question →

192

MCQmedium

Refer to the exhibit. A server connected to interface fc1/3 on the MDS switch cannot log in to the fabric. The server's HBA WWPN is 10:00:00:00:c9:2b:1a:62. What is the most likely reason for the login failure?

A.NPIV is disabled on the port

B.The server's WWPN is not in the active zone set

C.Interface fc1/3 is not assigned to VSAN 100

D.The link speed is mismatched between switch and HBA

AnswerC

Without correct VSAN, the port cannot participate.

Why this answer

Interface fc1/3 is not assigned to VSAN 100, as shown in the exhibit (the interface is in VSAN 1 by default or another VSAN). Without being in the correct VSAN, the server's FLOGI (Fabric Login) request is processed in the wrong VSAN context, preventing it from logging into the fabric and accessing the intended storage targets. Assigning the interface to the correct VSAN is mandatory for successful fabric login.

Exam trap

Cisco often tests the distinction between pre-login requirements (VSAN assignment, port mode) and post-login requirements (zoning, NPIV), so the trap here is assuming zone membership is checked before the server can log in, when in fact FLOGI must succeed first.

How to eliminate wrong answers

Option A is wrong because NPIV (N_Port ID Virtualization) is only required when multiple virtual HBAs share a single physical port; it is not a prerequisite for a single HBA to log in. Option B is wrong because zone membership is checked after successful fabric login (FLOGI) and name server registration; the server cannot even attempt zone-based access if it fails to log in. Option D is wrong because a link speed mismatch would cause the interface to be in a non-operational state (e.g., err-disabled or not up), but the exhibit shows the interface is up; the issue is VSAN misassignment, not physical layer negotiation.

Practice this question →

193

MCQeasy

An engineer notices that the LED of an FC interface is off on a Cisco MDS switch. The interface is up/up. What is the most likely cause?

A.The port LED firmware is corrupted.

B.The interface is administratively down.

C.The link is up but the LED is disabled in software configuration.

D.The SFP is faulty.

AnswerC

On some MDS switches, the LED can be turned off via 'no led enable' interface command.

Why this answer

On Cisco MDS switches, the interface LED can be administratively disabled via the `no led` command in interface configuration mode, even when the interface is fully operational (up/up). This allows operators to selectively turn off LEDs for troubleshooting or to reduce visual noise in a data center, without affecting traffic. The LED being off while the interface shows up/up directly points to this software-based LED disablement.

Exam trap

Cisco often tests the misconception that an LED off always indicates a hardware or link issue, when in fact the LED can be software-disabled independently of the interface operational state.

How to eliminate wrong answers

Option A is wrong because LED firmware corruption would typically cause erratic behavior (e.g., blinking incorrectly or staying stuck in one state) rather than a consistent off state with a fully functional interface. Option B is wrong because an administratively down interface would show as 'down/down' in the show interface output, not 'up/up'. Option D is wrong because a faulty SFP would cause the link to be down (e.g., 'down/down' or 'up/down' with CRC errors), not an up/up state with the LED off.

Practice this question →

194

MCQmedium

A storage administrator is setting up iSCSI connectivity between a server and a storage array. To enhance security, the administrator wants to authenticate the initiator and target during the login process. Which authentication method should be configured?

A.IPsec

B.RADIUS

C.CHAP

D.Kerberos

AnswerC

CHAP provides authentication during the iSCSI login process, supporting both one-way and mutual authentication.

Why this answer

CHAP is a standard authentication protocol for iSCSI that provides mutual authentication between initiator and target.

Practice this question →

195

MCQmedium

An engineer configures zoning on a Cisco MDS switch to restrict access between storage arrays and servers. They use the command 'zone name ZONE1 vsan 10' and 'member pwwn 21:00:00:1b:32:12:34:56'. Which type of zoning is being configured?

A.VSAN zoning

B.Soft zoning by port

C.Lun zoning

D.Hard zoning by WWN

AnswerD

Hard zoning by WWN uses the pwwn keyword to specify WWPN.

Why this answer

Hard zoning uses WWN (pwwn) to define zone members, and traffic is permitted only between members in the same zone. Soft zoning uses port IDs and relies on name server lookups.

Practice this question →

196

Matchingmedium

Match each Cisco storage protocol to its characteristic.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts

Matches

Lossless, high-speed block storage over dedicated fabric

Block storage over TCP/IP networks

High-performance flash storage over RDMA

Fibre Channel frames encapsulated in Ethernet

File-level storage access over network

Why these pairings

The correct matches are: Fibre Channel uses dedicated hardware, iSCSI uses IP, FCoE encapsulates FC over Ethernet, and NVMe-oF extends NVMe over fabrics. Common confusions include mixing Fibre Channel and FCoE, or iSCSI and Fibre Channel characteristics.

Practice this question →

197

MCQhard

A Cisco MDS switch has multiple Fibre Channel interfaces that need to be aggregated into a single logical interface to increase bandwidth and provide redundancy. Which technology should be used?

A.VSAN load balancing

B.NPV mode

C.EISL trunking

D.PortChannel

AnswerD

PortChannel provides link aggregation in FC.

Why this answer

PortChannels in Fibre Channel aggregate multiple physical links into one logical link.

Practice this question →

198

Multi-Selecthard

Which THREE factors should be considered when designing an FCoE SAN to avoid traffic loss? (Choose three.)

Select 3 answers

A.Use standard Ethernet cut-through switching for all FCoE traffic.

B.Enable priority flow control (PFC) on all FCoE-enabled interfaces.

C.Use a dedicated FCoE VLAN that is not used for any other traffic.

D.Disable the FIP snooping feature to reduce latency.

E.Ensure that the FCoE Maximum Transmission Unit (MTU) is set to 2500 bytes.

AnswersB, C, E

PFC is essential to prevent frame loss due to congestion.

Why this answer

Priority Flow Control (PFC) is essential in an FCoE SAN because it provides a lossless Ethernet fabric by pausing traffic on a per-priority basis. Without PFC, standard Ethernet congestion mechanisms would drop FCoE frames, which violates the lossless requirement of Fibre Channel traffic. Enabling PFC on all FCoE-enabled interfaces ensures that buffer credits are managed correctly and no frames are discarded due to congestion.

Exam trap

Cisco often tests the misconception that cut-through switching or disabling FIP snooping improves performance, when in fact these actions compromise lossless behavior or security in an FCoE design.

Practice this question →

199

MCQmedium

An administrator notices that a new server connected to a Fibre Channel switch cannot log in. The 'show flogi database' command does not show the server's WWPN. What is the most likely cause?

A.Trunking mode not enabled on the port

B.Incorrect zoning configuration

C.Speed mismatch between the server and switch

D.Port security enabled with WWN mismatch

AnswerD

Correct: Port security restricts which WWNs can log in.

Why this answer

The 'show flogi database' command lists all devices that have successfully completed the Fabric Login (FLOGI) process. If the server's WWPN is absent, it indicates that the FLOGI request was rejected by the switch. Port security with a WWN mismatch is the most likely cause because the switch is configured to allow only specific WWPNs, and the server's WWPN does not match the allowed list, causing the switch to silently drop the FLOGI request without logging the device.

Exam trap

Cisco often tests the distinction between FLOGI rejection (port security, fabric binding) and post-login restrictions (zoning, VSAN membership), so candidates mistakenly choose 'incorrect zoning' because they confuse zoning with port-level authentication.

How to eliminate wrong answers

Option A is wrong because trunking mode (E_port or TE_port) is used for inter-switch links (ISL), not for server-facing F_ports; a server connected to an F_port does not require trunking to perform FLOGI. Option B is wrong because incorrect zoning configuration would allow the server to log in (appear in 'show flogi database') but then prevent communication with other devices; zoning does not block the FLOGI process itself. Option C is wrong because a speed mismatch between the server and switch would prevent link initialization (the port would be in a non-operational state), but the 'show flogi database' command would not show the WWPN because the link would never come up; however, the question states the server is connected, implying link is up, and speed negotiation (auto-negotiation) typically handles mismatches without silently dropping FLOGI.

Practice this question →

200

MCQhard

Based on the exhibited FLOGI database, what is the state of the interface fc1/1?

A.It is an F port with a hub attached.

B.It is an NP port (proxy FW) because multiple FCIDs appear on the same interface.

C.It is a trunking E port.

D.It is a disabled port because there are two WWNs.

AnswerB

Multiple FCIDs from different WWNs on a single interface indicate NPIV, which is typical for NPV uplink or FCoE.

Why this answer

The FLOGI database shows multiple FCIDs (0x010000, 0x010001) associated with the same interface fc1/1, which is characteristic of an NP port (proxy FW) in NPV mode. An NP port acts as a proxy for multiple end devices behind it, such as in a Fibre Channel NPV switch or a converged network adapter (CNA) in FCoE NPV mode, allowing multiple FCIDs to share a single physical link.

Exam trap

The trap here is that candidates often assume multiple FCIDs on one interface indicate a trunking E port or a misconfiguration, but in NPV mode, an NP port legitimately proxies multiple FCIDs, which is a key distinguishing feature tested in the 350-601 exam.

How to eliminate wrong answers

Option A is wrong because an F port connects to a single N port (end device) and would show only one FCID per interface; a hub attached to an F port would still present a single FCID from the hub's perspective, not multiple distinct FCIDs. Option C is wrong because a trunking E port connects two switches and would show multiple FCIDs only if multiple VSANs are trunked, but the FLOGI database would list the same FCID across different VSANs, not multiple FCIDs on the same interface within a single VSAN. Option D is wrong because having two WWNs does not disable a port; a disabled port would not appear in the FLOGI database at all, and multiple WWNs are normal for NP ports or multi-homed devices.

Practice this question →

201

MCQmedium

A Cisco MDS switch is configured in NPV mode. A host connected to this switch fails to log into the SAN. Which command should be used to verify the host's FLOGI status?

A.show zone

B.show fcns database

C.show flogi database module <module>

D.show flogi database

E.show port-channel summary

AnswerC

This command shows FLOGIs on a specific module, which is more precise when troubleshooting a host on a known module.

Why this answer

In NPV mode, the MDS switch acts as a passthrough and does not maintain its own FLOGI database; instead, it forwards FLOGI requests to the upstream NPIV-capable switch. The 'show flogi database module <module>' command is used on the NPV switch to verify the host's FLOGI status because it displays the FLOGI entries learned from the upstream switch for the specific module where the host is connected, which is essential for troubleshooting login failures.

Exam trap

Cisco often tests the distinction between NPV mode and standard switch mode, where candidates mistakenly use 'show flogi database' without the module parameter, not realizing that NPV switches require the module keyword to display FLOGI entries.

How to eliminate wrong answers

Option A is wrong because 'show zone' displays zone configurations and members, not FLOGI or login status. Option B is wrong because 'show fcns database' shows the Fibre Channel Name Server database (registered FC-4 types and WWNs), which is populated after successful FLOGI and login, not the FLOGI status itself. Option D is wrong because 'show flogi database' without the module keyword is not valid on an NPV switch; the command requires the module parameter to specify the line card or port module.

Option E is wrong because 'show port-channel summary' displays port-channel interface status and load-balancing, not FLOGI or host login information.

Practice this question →

202

MCQhard

A storage administrator notices that a host is unable to see a LUN after zoning is configured. The zone contains the host WWPN and the target WWPN. The LUN is not masked at the storage array. What is the most likely cause?

A.LUN masking is not configured on the storage array.

B.The host requires NPIV to be enabled.

C.The host is in a different VSAN.

D.The zone is incorrectly configured.

AnswerA

LUN masking is required to present LUNs to specific hosts.

Why this answer

The host cannot see the LUN because LUN masking is not configured on the storage array. Even with correct zoning (host WWPN to target WWPN), the storage array must explicitly grant access to specific LUNs for a given initiator WWPN. Without LUN masking, the target will not present the LUN to the host, regardless of zone membership.

Exam trap

Cisco often tests the distinction between fabric-level zoning (which controls which ports can communicate) and storage-array-level LUN masking (which controls which LUNs are visible to an initiator), leading candidates to incorrectly assume zoning alone grants LUN access.

How to eliminate wrong answers

Option B is wrong because NPIV (N_Port ID Virtualization) is used to allow multiple virtual initiators to share a single physical port, which is unrelated to LUN visibility after zoning. Option C is wrong because if the host were in a different VSAN, the zone would not be effective at all (zones are VSAN-specific), but the question states zoning is configured and the host cannot see the LUN, not that zoning fails. Option D is wrong because the zone is correctly configured (contains host WWPN and target WWPN), so incorrect zone configuration is not the cause.

Practice this question →

203

MCQeasy

Based on the exhibited output, what is the status of the interface?

A.The interface is up but has no license.

B.The interface is in trunk mode and licensed.

C.The interface is operational and licensed.

D.The interface is down due to no license.

AnswerA

The interface is up but lacks a license; it may be using grace period.

Why this answer

The interface is up (line protocol is up) but the output shows 'license not installed' or similar, meaning the port is administratively up but lacks the required license for full functionality. In Cisco MDS/Nexus storage networks, interfaces can be in an 'up' state without a license, but they will not pass traffic or operate in the licensed mode until the license is installed.

Exam trap

Cisco often tests the distinction between an interface being 'up/up' and being fully licensed, leading candidates to assume that an up interface is automatically operational and licensed, when in fact it may be in a 'no-license' state that prevents data forwarding.

How to eliminate wrong answers

Option B is wrong because the interface is not in trunk mode (the output shows access mode or no trunking) and it is not licensed. Option C is wrong because the interface is not operational in the sense of passing traffic; it is up but unlicensed, so it cannot forward data. Option D is wrong because the interface is not down; it is up (line protocol up) but lacks a license, which is a different state from being administratively or protocol down.

Practice this question →

204

MCQeasy

What is the purpose of jumbo frames in an iSCSI storage network?

A.To increase throughput by reducing protocol overhead

B.To reduce latency

C.To provide authentication

D.To enable flow control

AnswerA

Jumbo frames allow more data per packet, reducing the number of packets and overhead.

Why this answer

Jumbo frames (MTU 9000) reduce overhead by allowing larger payloads per packet, improving throughput and CPU efficiency for iSCSI traffic.

Practice this question →

205

MCQeasy

Which FCoE feature allows multiple VLANs to be carried over a single physical link when using FIP snooping?

A.NPV

B.VSANs

C.FIP snooping

D.Port channels

AnswerC

FIP snooping enables multiple FCoE VLANs on a link.

Why this answer

FIP snooping is the correct answer because it is the FCoE feature that enables multiple VLANs to be carried over a single physical link by snooping FIP (FCoE Initialization Protocol) frames. FIP snooping builds a forwarding table that maps FCoE sessions to specific VLANs, allowing the switch to forward FCoE traffic for different VLANs on the same physical interface while maintaining isolation and security.

Exam trap

Cisco often tests the misconception that FIP snooping is only about security or that it is the same as FCoE VLAN mapping, but the trap here is that candidates confuse FIP snooping with VSANs or NPV, not realizing that FIP snooping specifically enables VLAN multiplexing by snooping control frames.

How to eliminate wrong answers

Option A is wrong because NPV (N_Port Virtualization) is a feature that allows a Fibre Channel switch to connect to a core switch without requiring a separate domain ID, and it does not handle VLAN multiplexing over a single link. Option B is wrong because VSANs (Virtual SANs) are used to create isolated Fibre Channel fabrics within a single physical SAN infrastructure, but they are not a feature of FCoE and do not directly enable multiple VLANs over a single physical link in the context of FIP snooping. Option D is wrong because port channels aggregate multiple physical links into a single logical link for increased bandwidth and redundancy, but they do not provide the VLAN multiplexing capability that FIP snooping offers.

Practice this question →

206

MCQmedium

Refer to the exhibit. After applying this configuration, the engineer activates the zoneset with 'zoneset activate name ZONESET1 vsan 10'. The host with pwwn 10:00:00:00:c9:aa:bb:01 can communicate with the target with pwwn 10:00:00:00:c9:aa:bb:02. However, the host reports that it cannot see a third target with pwwn 10:00:00:00:c9:aa:bb:03. What is the most likely reason?

A.The third target is in a different VSAN.

B.The third target is not a member of ZONE1.

C.The zone name is case-sensitive and does not match.

D.The zoneset was not activated successfully.

AnswerB

Zoning restricts access; only members of the same zone can communicate.

Why this answer

The host can communicate with the target in ZONE1 (pwwn 10:00:00:00:c9:aa:bb:02) but not with the third target (pwwn 10:00:00:00:c9:aa:bb:03). This indicates that the zoneset activation was successful and the host is in the correct VSAN. The most likely reason is that the third target is not a member of ZONE1; in Fibre Channel zoning, only members of the same zone can communicate, and a device not in the zone will be invisible to other zone members.

Exam trap

The trap here is that candidates may assume the third target is in a different VSAN or that the zoneset activation failed, but the key is that successful communication with one target proves the zoneset is active and the host is in the correct VSAN, so the issue must be that the third target is simply not a member of the zone.

How to eliminate wrong answers

Option A is wrong because the host can already communicate with one target in VSAN 10, and the zoneset was activated on VSAN 10; if the third target were in a different VSAN, it would not be part of the same zoneset and would be invisible, but the question states the host cannot see it, implying it might be in the same VSAN but not zoned. Option C is wrong because zone names in Cisco NX-OS are case-sensitive, but the exhibit shows the zone name as 'ZONE1' and the zoneset activation command uses 'ZONESET1' — the mismatch is between the zoneset name and the zone name, not a case issue; the zone name itself is correctly referenced in the zoneset membership. Option D is wrong because the host can communicate with the first target, which proves the zoneset was activated successfully; if activation had failed, no communication would occur.

Practice this question →

207

MCQmedium

A data center team is implementing FCoE and needs to ensure that FCoE traffic is not dropped during congestion. The network switches support Data Center Bridging (DCB). Which two DCB features are required for FCoE?

A.Enhanced Transmission Selection (ETS) and Data Center Bridging Exchange (DCBX)

B.Priority Flow Control (PFC) and Data Center Bridging Exchange (DCBX)

C.Enhanced Transmission Selection (ETS) and jumbo frames

D.Priority Flow Control (PFC) and jumbo frames

AnswerB

PFC ensures no-drop, and DCBX enables negotiation of DCB parameters.

Why this answer

PFC provides lossless transport, and DCBX is used for capability exchange between peers to configure PFC and other DCB features.

Practice this question →

208

Multi-Selecteasy

Which TWO are required for FCoE communication on a Nexus switch configured as an FCF? (Choose two.)

Select 2 answers

A.Jumbo frame support on the VLAN

B.VSAN configuration for the FCoE VLAN

C.NPV enabled on the switch

D.A dedicated FCoE VLAN

E.DCBX exchange to enable priority flow control

AnswersD, E

Correct: FCoE traffic is mapped to a specific VLAN.

Why this answer

In an FCoE FCF (Fabric Connect) configuration on a Nexus switch, a dedicated FCoE VLAN is required to carry FCoE traffic. This VLAN must be separate from standard Ethernet VLANs to prevent FCoE frames from being processed as regular Ethernet frames. Additionally, DCBX (Data Center Bridging Exchange) must be used to negotiate and enable Priority Flow Control (PFC) on the link, ensuring lossless behavior for FCoE traffic.

Exam trap

Cisco often tests the distinction between a dedicated FCoE VLAN (required) and jumbo frame support (optional), leading candidates to mistakenly select jumbo frames as a requirement when they are not mandatory for basic FCoE operation.

Practice this question →

209

MCQeasy

An engineer is configuring iSCSI multipath I/O (MPIO) on a Windows server connected to a storage array. The goal is to provide load balancing and failover. What must be configured on the storage side to support MPIO?

A.Jumbo frames

B.Multiple iSCSI target IP addresses presenting the same LUN

C.CHAP authentication

D.Thin provisioning

AnswerB

Multiple paths to the same LUN allow MPIO to function.

Why this answer

MPIO requires that the storage array presents the same LUN to the server through multiple target portal groups or multiple iSCSI target IP addresses.

Practice this question →

210

MCQhard

In a Cisco MDS switch, what is the effect of the command 'fcdomain restart vsan 100'?

A.It enables NPV mode on VSAN 100.

B.It clears the zone configuration for VSAN 100.

C.It reboots the switch.

D.It causes a fabric reconfiguration, which may disrupt traffic.

AnswerD

Domain restart disrupts traffic.

Why this answer

The 'fcdomain restart vsan 100' command triggers a fabric reconfiguration (RCF) on VSAN 100. This process resets the principal switch selection and domain ID distribution, causing all switches in the VSAN to renegotiate their roles and domain IDs, which disrupts existing Fibre Channel traffic during the reconfiguration.

Exam trap

Cisco often tests the distinction between fabric-level commands (like 'fcdomain restart') and switch-level commands (like 'reload'), leading candidates to mistakenly think a fabric reconfiguration is equivalent to a switch reboot.

How to eliminate wrong answers

Option A is wrong because enabling NPV mode requires the 'feature npv' command and 'npv enable' on the interface, not 'fcdomain restart'. Option B is wrong because clearing the zone configuration is done with 'zone commit' or 'no zone' commands, not 'fcdomain restart', which only affects the fabric domain parameters. Option C is wrong because 'fcdomain restart' only restarts the fabric domain service for the specified VSAN, not the entire switch; a switch reboot would require the 'reload' command.

Practice this question →

211

Multi-Selectmedium

Which TWO of the following are characteristics of NPV (N-Port Virtualization) in a Cisco MDS fabric?

Select 2 answers

A.It enables multiple hosts to share the same physical uplink.

B.It reduces the number of domain IDs required.

C.It allows the edge switch to appear as a virtual host to the core switch.

D.It requires FC-SP authentication.

E.It is only supported on 8 Gbps or higher ports.

AnswersA, B

NPIV allows multiple FLOGIs over a single NP port.

Why this answer

NPV (N-Port Virtualization) allows multiple hosts to share a single physical uplink from an NPV switch to a core NPIV-enabled switch. This is achieved by multiplexing multiple Fibre Channel N-Port IDs over the same physical link, reducing the number of domain IDs required in the fabric because the NPV switch does not participate in principal switch selection or domain ID distribution. The core switch sees each host as a separate virtual N_Port, but the NPV switch itself does not consume a domain ID.

Exam trap

Cisco often tests the misconception that NPV requires the edge switch to appear as a virtual host to the core, when in fact it is the hosts that appear as virtual N_Ports, not the switch itself.

Practice this question →

212

MCQeasy

In a Fibre Channel SAN, a technique is used to allow multiple initiators to share a single physical FC port by assigning multiple N-port IDs. What is this technique called?

A.N_Port ID Virtualization (NPIV)

B.NPIV is exclusive to FCoE environments

C.NPIV is only available on initiator HBAs

D.N_Port Virtualization (NPV)

AnswerA

NPIV allows multiple FCIDs per physical port.

Why this answer

NPIV (N_Port ID Virtualization) allows a single physical Fibre Channel port to register multiple N_Port IDs (FCIDs), enabling multiple initiators (e.g., virtual machines or logical partitions) to share that port while each appears as a unique entity to the fabric. This is achieved by the HBA requesting additional FCIDs from the fabric switch via the FLOGI and FDISC processes. The technique is defined in the FC-FS and FC-LS standards and is widely used in virtualized server environments to reduce the number of physical ports needed.

Exam trap

Cisco often tests the distinction between NPIV (port-level virtualization on the HBA) and NPV (switch-level aggregation), and candidates confuse the two because of the similar acronyms and overlapping use in virtualized environments.

How to eliminate wrong answers

Option B is wrong because NPIV is not exclusive to FCoE environments; it was originally defined for native Fibre Channel and is commonly used in both FC and FCoE SANs. Option C is wrong because NPIV is not only available on initiator HBAs; it is also supported on target ports (e.g., storage arrays) and switch N_Ports to enable virtualization features. Option D is wrong because N_Port Virtualization (NPV) is a different technology that allows a switch to aggregate multiple N_Ports into a single uplink, whereas NPIV operates at the HBA level to assign multiple FCIDs to one physical port.

Practice this question →

213

MCQeasy

A storage administrator has been tasked with integrating a new Cisco MDS 9706 switch into an existing Fibre Channel SAN. The existing SAN consists of two Cisco MDS 9148S switches configured in a VSAN 100 with a single zone set that contains all initiator and target WWPNs. The administrator connects the new switch to one of the existing switches using an ISL and configures the new switch with VSAN 100 and the same zone configuration. The administrator activates the zone set on the new switch and verifies that the ISL is up and both switches see each other's Fibre Channel IDs. However, servers attached to the existing switches still cannot discover the storage targets that are connected to the new switch. The administrator has confirmed that the ISL is operational and that the zone set on the new switch is activated with the correct WWPNs. What should the administrator check next?

A.Confirm that the zone set on the new switch is activated and contains correct WWPNs.

B.Ensure that the trunk protocol is enabled on the ISL and that allowed VSANs include VSAN 100.

C.Check that the new switch's domain ID is unique and not conflicting.

D.Verify that the new switch's target-facing interfaces are not in shutdown state.

AnswerD

Interfaces must be administratively enabled to allow login.

Why this answer

After confirming the ISL is operational and the zone set is activated with correct WWPNs, the next logical step is to verify that the target-facing interfaces on the new switch are not administratively down. If these interfaces are in shutdown state, the storage targets connected to them will not be accessible from servers on the existing switches. Option A is already confirmed in the scenario.

Option B is not necessary because trunk protocol is not required for a single VSAN environment, and the ISL is already up. Option C is unlikely because a domain ID conflict would prevent the ISL from coming up, but the ISL is operational and both switches see each other's FC IDs. Therefore, option D is the correct next step.

Exam trap

Candidates may assume that zone activation is sufficient without verifying interface states on the new switch.

Practice this question →

214

MCQmedium

A storage administrator is configuring a VSAN on a Cisco MDS switch. After creating the VSAN, what is the next step to ensure that the ports can communicate within that VSAN?

A.Assign ports to the VSAN

B.Enable NPV mode on the switch

C.Enable FCoE

D.Configure zoning

AnswerA

Ports must be assigned to the VSAN for them to participate in that VSAN.

Why this answer

After creating the VSAN, the ports must be assigned to it. This is done by configuring the port VSAN membership.

Practice this question →

215

MCQmedium

Refer to the exhibit. An engineer sees this error on a Cisco MDS switch. What is the best action to resolve the issue?

A.Reload both switches to reset domain IDs.

B.Shut and no shut the ISL between the switches.

C.Assign a different domain ID to one of the switches.

D.Change the VSAN on one of the switches.

AnswerC

Each switch in a fabric must have a unique domain ID.

Why this answer

The error indicates a domain ID conflict between two switches in the same VSAN. In Fibre Channel fabrics, each switch must have a unique domain ID to build a correct forwarding table. Assigning a different domain ID to one of the switches resolves the conflict without disrupting the fabric.

Exam trap

Cisco often tests the misconception that a link flap or reboot will fix a domain ID conflict, when in fact the root cause is a duplicate domain ID that must be manually changed on one switch.

How to eliminate wrong answers

Option A is wrong because reloading both switches would temporarily clear the conflict but does not prevent it from recurring once the switches come back up with the same domain IDs. Option B is wrong because shutting and no shutting the ISL only resets the link state; it does not address the underlying domain ID duplication, so the conflict will persist. Option D is wrong because changing the VSAN would isolate the switches into different fabrics, which is an overly disruptive solution and not necessary when a simple domain ID reassignment resolves the issue.

Practice this question →

216

MCQmedium

An organization has four Cisco MDS 9700 directors connected in a full-mesh topology. They use VSANs to separate production, backup, and management traffic. The backup VSAN is experiencing high latency and occasional timeouts. The engineer runs the 'show fcspf routes' command and notices that the path from the backup host to the backup target has an uneven hop count across different paths. The links are all 16 Gbps. The engineer also notes that the backup target is connected to a different director than the backup host. Which action is most likely to improve performance?

A.Configure IVR to route backup traffic over a dedicated path

B.Decrease the FSPF cost on the direct links

C.Increase the FSPF cost on the direct links

D.Implement load balancing using multiple PortChannels

AnswerB

Lowering cost makes the direct path more preferred, reducing hop count and latency.

Why this answer

Decreasing the FSPF cost on the direct links encourages traffic to take shorter paths, reducing hop count and latency. Increasing cost would push traffic away, making it worse. IVR is for inter-VSAN routing, not intra-VSAN.

Load balancing via PortChannels increases bandwidth but does not directly reduce latency from long paths.

Practice this question →

217

MCQmedium

In a Fibre Channel fabric using NPV mode, what is the role of the NP-port on the edge switch?

A.It connects to a core switch's F-port and proxies host logins

B.It is used to connect to storage arrays

C.It is used for VSAN trunking

D.It acts as an E-port for ISL connectivity

AnswerA

The NP-port connects to the core switch's F-port and represents multiple hosts.

Why this answer

The NP-port (N_Port Proxy) on the edge switch behaves like an N-port but proxies the login for multiple hosts through the core switch's F-port, reducing the number of domain IDs needed.

Practice this question →

218

MCQhard

An organization's storage network uses RAID-10 for critical databases. The storage array has 12 disks. How many disks can fail simultaneously without data loss, assuming the worst-case scenario?

A.6

B.11

C.2

D.1

AnswerA

RAID-10 can tolerate up to 6 disk failures as long as no mirror loses both disks.

Why this answer

RAID-10 combines mirroring and striping. With 12 disks, there are 6 mirrored pairs. Data is lost only if both disks in the same mirror fail.

Therefore, as long as no more than one disk per mirror fails, up to 6 disks can fail simultaneously without data loss. The phrase 'worst-case scenario' often confuses candidates into thinking only 1 failure is tolerable, but the question asks for the maximum number that can fail without data loss, which is 6.

Exam trap

RAID-10 can tolerate up to one disk failure per mirrored pair. With 6 pairs, up to 6 disks can fail simultaneously as long as no two failures occur in the same pair. The 'worst-case scenario' often misleads candidates into thinking only one disk can fail, but the intended interpretation is that failures are spread across different mirrors.

Practice this question →

219

MCQmedium

A network engineer is deploying FCoE in a top-of-rack design. Which statement about the required lossless Ethernet fabric is correct?

A.Data Center Bridging Exchange (DCBX) automatically enables PFC when FCoE is configured

B.FCoE uses VLAN 1002 by default for all traffic

C.FCoE frames are limited to 1500 bytes to avoid fragmentation

D.Priority Flow Control (PFC) must be enabled to create lossless CoS

AnswerD

PFC ensures lossless behavior for FCoE frames.

Why this answer

FCoE requires a lossless Ethernet fabric to prevent frame drops, which would corrupt Fibre Channel traffic. Priority Flow Control (PFC), defined in IEEE 802.1Qbb, provides per-priority pause mechanisms to create lossless CoS (Class of Service) queues, ensuring no frames are lost due to congestion. Without PFC, standard Ethernet's best-effort delivery would cause frame drops, breaking FCoE's reliability.

Exam trap

Cisco often tests the misconception that DCBX automatically enables PFC when FCoE is configured, but in reality, DCBX only negotiates capabilities, and PFC must be manually enabled on the interfaces (e.g., using the 'priority-flow-control' command).

How to eliminate wrong answers

Option A is wrong because DCBX (Data Center Bridging Exchange) is used to negotiate and advertise PFC and other DCB parameters, but it does not automatically enable PFC; PFC must be explicitly configured on the interfaces. Option B is wrong because FCoE does not use VLAN 1002 by default; FCoE traffic is typically mapped to a dedicated VLAN (often VLAN 1002 in some Cisco defaults, but this is not a standard requirement and the statement is misleading—FCoE uses a specific FCoE VLAN, not a default VLAN number for all traffic). Option C is wrong because FCoE frames are not limited to 1500 bytes; FCoE encapsulates Fibre Channel frames (typically up to 2148 bytes) into Ethernet frames, and jumbo frames (up to 2500 bytes or more) are required to avoid fragmentation.

Practice this question →

220

MCQeasy

A storage administrator wants to provide a volume that appears larger than its actual physical capacity, allocating storage blocks only as data is written. Which storage provisioning method is being described?

A.Thin provisioning

B.Snapshot

C.Thick provisioning

D.RAID-5

AnswerA

Correct. Thin provisioning presents more capacity than physically available, allocating on demand.

Why this answer

Thin provisioning allows over-allocation of storage capacity, presenting a large logical volume to hosts while using physical storage only as needed.

Practice this question →

221

MCQhard

During a fabric reconfigure event, which behavior is expected if all switches are running the same Cisco SAN-OS version and have the same domain ID configuration?

A.The principal switch selection will re-elect based on highest WWN.

B.The principal switch will force a new domain ID assignment.

C.A domain ID conflict will cause a segmentation of the fabric.

D.The fabric will merge without any issues as long as VSANs match.

AnswerC

Duplicate domain IDs cause fabric segmentation; the switches will not merge.

Why this answer

When all switches in a fabric reconfigure event run the same Cisco SAN-OS version and have the same domain ID configured, a domain ID conflict occurs because the principal switch cannot assign a unique domain ID to each switch. This conflict causes the fabric to segment, as the principal switch isolates the conflicting switch into a separate principal switch selection process, preventing a stable merged fabric.

Exam trap

The trap here is that candidates assume identical domain IDs will simply cause a re-election or a forced reassignment, but Cisco tests that the fabric segments instead, as the principal switch cannot resolve the conflict without manual intervention.

How to eliminate wrong answers

Option A is wrong because the principal switch selection is based on the highest WWN only during the initial election or when no principal switch exists; during a reconfigure event with identical domain IDs, the conflict triggers segmentation, not a re-election based on WWN. Option B is wrong because the principal switch does not force a new domain ID assignment; instead, it detects the conflict and segments the fabric to avoid duplicate IDs, as domain IDs must be unique per VSAN. Option D is wrong because even if VSANs match, a domain ID conflict prevents a merge; the fabric will segment rather than merge without issues, as the principal switch enforces domain ID uniqueness.

Practice this question →

222

MCQhard

An organization uses FCIP to extend their SAN between two data centers over a 100 Mbps WAN link with 80 ms latency. The storage traffic includes large sequential writes. Which statement best describes the benefit of enabling compression on the FCIP tunnel?

A.Compression reduces end-to-end latency

B.Compression improves effective throughput over the WAN link

C.Compression is recommended only when the link has high packet loss

D.Compression eliminates the need for jumbo frames

AnswerB

Reduces data volume, so more data can be sent within the limited bandwidth.

Why this answer

Enabling compression on an FCIP tunnel reduces the amount of data transmitted over the WAN link by compressing FC frames before encapsulation. For large sequential writes, this directly improves effective throughput because more actual storage data can be sent within the same 100 Mbps bandwidth, compensating for the high latency and low bandwidth.

Exam trap

Cisco often tests the misconception that compression reduces latency, but candidates must remember that compression only improves throughput by reducing the amount of data sent, not the physical propagation delay.

How to eliminate wrong answers

Option A is wrong because compression does not reduce end-to-end latency; latency is dominated by the 80 ms propagation delay and serialization delay, which compression cannot change. Option C is wrong because compression is beneficial regardless of packet loss; it is primarily used to improve bandwidth efficiency, not to mitigate loss. Option D is wrong because compression does not eliminate the need for jumbo frames; jumbo frames reduce CPU overhead and improve efficiency for large frames, but compression and jumbo frames are independent optimizations.

Practice this question →

223

Multi-Selecthard

Which TWO statements about NPV (N_Port Virtualization) mode in FC networks are correct?

Select 2 answers

A.NPV is commonly used in top-of-rack (ToR) deployments to simplify SAN cabling.

B.An NPV switch connects to the core switch using E-ports.

C.NPV switches can be used to connect FC and FCoE devices without a separate FCoE VLAN.

D.NPV reduces the number of FC domain IDs required in the fabric.

E.NPV switches perform fabric login (FLOGI) on behalf of attached devices.

AnswersA, D

NPV switches are placed at the top of the rack to aggregate server connections.

Why this answer

NPV is specifically designed for top-of-rack (ToR) deployments to reduce the number of physical cables and simplify SAN cabling. In NPV mode, the ToR switch acts as a transparent proxy, forwarding FLOGI requests from end devices to the core NPV-enabled switch, which handles all fabric services. This eliminates the need for each ToR switch to have its own domain ID, reducing management complexity.

Exam trap

Cisco often tests the distinction between NP-ports and E-ports, and the trap here is that candidates mistakenly think NPV switches use E-ports for uplinks, when in fact they use NP-ports to avoid introducing additional domain IDs.

Practice this question →

224

MCQmedium

A SAN administrator notices intermittent connectivity issues between an initiator and target. The Fibre Channel link shows CRC errors. What is the most likely cause?

A.Incorrect domain ID.

B.Faulty SFP or fiber optic cable.

C.Buffer credit starvation.

D.Incorrect zone configuration.

AnswerB

Physical layer issues cause CRC errors.

Why this answer

CRC errors on a Fibre Channel link indicate physical-layer issues such as signal degradation, dirty connectors, or faulty hardware. The most common cause is a faulty SFP module or damaged fiber optic cable, which introduces bit errors that the CRC check detects. This is the first component to verify when troubleshooting intermittent connectivity with CRC errors.

Exam trap

Cisco often tests the distinction between physical-layer errors (CRC) and higher-layer issues (zoning, domain ID, buffer credits) to see if candidates can map symptoms to the correct OSI layer.

How to eliminate wrong answers

Option A is wrong because an incorrect domain ID would cause fabric segmentation or routing issues, not physical-layer CRC errors. Option C is wrong because buffer credit starvation results in frame drops and credit recovery delays, not CRC errors. Option D is wrong because an incorrect zone configuration would cause access control failures (e.g., frames being discarded at the switch), not CRC errors on the link.

Practice this question →

225

Multi-Selecthard

Which three components are required for a fully functional FCoE deployment in a data center? (Choose three.)

Select 3 answers

A.iSCSI initiator software

B.DCB-enabled Ethernet switches

C.Fibre Channel switches with E_ports

D.Converged Network Adapters (CNAs) on servers

E.FCoE Initialization Protocol (FIP)

AnswersB, D, E

DCB provides lossless Ethernet required for FCoE.

Why this answer

FCoE requires Converged Network Adapters (CNAs) on servers, DCB-enabled switches, and FIP for initialization. The other options are not mandatory.

Practice this question →

← PreviousPage 3 of 4 · 271 questions totalNext →

Ready to test yourself?

Try a timed practice session using only Storage Network questions.

Start 20-question session