An architect is working on a security design for a shared storage environment. The storage array provides connectivity by the NFS protocol. Which two design decisions could the architect include for…

Question

Options

• ACreate a dedicated storage network
• BCreate a dedicated VLAN
• CCreate a challenge handshake authentication protocol (CHAP) password to prevent unauthorized
• DCreate dedicated volumes for sensitive data
• ECreate a dedicated Fibre Channel network

• A
  83% (19)
• C
  4% (1)
• D
  9% (2)
• E
  4% (1)

Explanation

Create a dedicated storage network: Creating a dedicated storage network ensures that storage traffic is isolated from general network traffic, improving both security and performance. This design choice helps prevent unauthorized access, minimizes the potential for network congestion, and ensures that storage traffic is not impacted by other workloads or services on the network. Create a dedicated VLAN: By placing storage traffic on its own VLAN, the architect ensures further network segmentation. This VLAN can be used exclusively for NFS traffic, improving both security and performance. It also allows for easier management and monitoring of storage traffic, while helping prevent unauthorized access from other parts of the network.

No community discussion yet for this question.