A storage administrator is deploying a new Cisco MDS switch into an existing Fibre Channel fabric. The fabric consists of two core switches and four edge switches. The security policy requires that only the two core switches can connect to the new switch, and the new switch must not be able to connect to any other switch. The administrator has enabled fabric binding on the new switch and added the WWNs of the two core switches to the fabric binding database. However, after connecting the new switch to one of the core switches, the ISL does not come up. What is the most likely reason for this failure?

Fabric binding must also be enabled on the core switch, and the new switch's WWN must be added to the core switch's fabric binding database.

The new switch's fabric binding database must include the WWNs of all four edge switches as well as the core switches.

The new switch must have the same VSAN ID as the core switch for fabric binding to work.

The new switch's fabric binding database must be configured with the WWN of the core switch's port, not the core switch's WWN.

What does the 'sticky' option in port security do?

It permanently disables the port after a violation

It allows an unlimited number of MAC addresses

It encrypts the MAC addresses in the configuration

It dynamically learns MAC addresses and saves them to the running configuration

When troubleshooting a port security violation, which log message type indicates that a violation has occurred?

A message with 'SYS-5-CONFIG_I'

A message with 'AUTH-5-SECURITY'

A syslog message with 'PM-4-ERR_DISABLE' or 'PORT_SECURITY'

What is the purpose of fabric binding in a Fibre Channel fabric?

To automatically configure zoning

To restrict which switches are allowed to join the fabric

To provide load balancing across ISLs

To encrypt data between switches

On Cisco NX-OS, which AAA feature is configured with the 'aaa accounting' command?

Defining which commands a user can run

Verifying user identity during login

Recording user actions for auditing and billing

CiscoCertified Network Professional Data Center

Domain 5Objective 3

5.3 Apply Storage Security 350-601 Practice Questions (Page 3)

Part of the Security domain, which accounts for 15% of the 350-601 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 3–4 from this objective — we provide 25 practice questions to prepare you well beyond it. (estimate)

25questions here

5free pages

10concepts

15%of the exam

Questions 11–15

11expert · hard
A storage administrator is deploying a new Cisco MDS switch into an existing Fibre Channel fabric. The fabric consists of two core switches and four edge switches. The security policy requires that only the two core switches can connect to the new switch, and the new switch must not be able to connect to any other switch. The administrator has enabled fabric binding on the new switch and added the WWNs of the two core switches to the fabric binding database. However, after connecting the new switch to one of the core switches, the ISL does not come up. What is the most likely reason for this failure?
Select an answer first
12foundation · easy
What does the 'sticky' option in port security do?
Select an answer first
13foundation · easy
When troubleshooting a port security violation, which log message type indicates that a violation has occurred?
Select an answer first
14foundation · easy
What is the purpose of fabric binding in a Fibre Channel fabric?
Select an answer first
15foundation · easy
On Cisco NX-OS, which AAA feature is configured with the 'aaa accounting' command?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 350-601

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-601” is a trademark of its owner, used for identification only.