350-601 Practice Questions

The correct answers are B and

C.  

Once inside the device-alias database, the alias is created using the syntax:

device-alias name < alias-name > pwwn < WWN >

Here, pwwn (Port World Wide Name) is the correct identifier used for Fibre Channel endpoints. Therefore, the command

device-alias name Marketing pwwn 21:00:00:00:11:11:22:22

correctly maps the alias Marketing to the specified WWN, making option C correct.

Option D is incorrect because Cisco syntax specifically uses pwwn, not wwn, for device alias definitions. Option A is unrelated, as VSAN database configuration is used for VSAN settings, not device aliases. Option E is invalid because device-alias rename is not used to create a new alias.

Thus, the correct process is entering the device-alias database and then defining the alias using the pwwn keyword.

Fibre Channel port security restricts access by validating device identities, such as pWWNs and nWWNs, against the port-security database. Auto-learning works with port security to capture devices that are already successfully logged in and dynamically add their identities to the active port-security database. This establishes a trusted baseline without requiring the administrator to enter every existing device manually. After the valid devices are learned, auto-learning can be disabled and the database activated or enforced so that subsequent login attempts from unauthorized identities are rejected. Enhanced zoning controls permitted communication between members of Fibre Channel zones, but it does not automatically populate the port-security database from logged-in devices. Device aliases provide readable names for Fibre Channel identifiers and simplify configuration; they do not authenticate logins or learn trusted devices for port-security enforcement. Therefore, both auto-learning and port security are required.