350-601 Storage Network Practice Question
Which TWO statements about Fibre Channel zoning are correct? (Choose two.)
⚠ Common exam trap
Cisco often tests the distinction between hard zoning (frame-level ACL enforcement) and soft zoning (name server filtering), and candidates mistakenly think zoning can increase distance or balance traffic, which are unrelated functions.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Zoning can be used to prevent unauthorized access to storage targets.
Fibre Channel zoning restricts which initiators can communicate with which targets, effectively preventing unauthorized access to storage LUNs. By defining zone members (via WWN or port ID), the fabric enforces these access controls at the switch level, ensuring that only devices within the same zone can exchange Fibre Channel frames.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Zoning can be used to prevent unauthorized access to storage targets.
Why this is correct
Zoning restricts communication between specific ports.
- ✗
Zoning is required to increase the distance between a host and storage.
Why it's wrong here
Distance is addressed by buffer credits and long-distance optics.
- ✗
Zoning can only be applied within a single VSAN.
Why it's wrong here
Zoning is per VSAN, but a zone cannot span VSANs without inter-VSAN routing.
- ✗
Zoning is used to load balance traffic across multiple paths.
Why it's wrong here
Load balancing is achieved through multipathing, not zoning.
- ✓
Hard zoning uses ACLs to enforce membership at the frame level.
Why this is correct
Hard zoning enforces access in hardware based on port or WWN.
Go deeper
Related to this question
About these practice questions
This 350-601 question is part of Courseiva's 984-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 350-601 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-601 exam.