nerdexam
CompTIA

CAS-001 · Question #344

Two storage administrators are discussing which SAN configurations will offer the MOST confidentiality. Which of the following configurations would the administrators use? (Select TWO).

The correct answer is B. Zoning E. LUN masking. Zoning (B) and LUN masking (E) are the two SAN mechanisms that directly enforce confidentiality by restricting access. Zoning operates at the SAN fabric (switch) level, creating logical boundaries so that only designated hosts can see specific storage ports - unauthorized hosts…

Technical Integration of Enterprise Components

Question

Two storage administrators are discussing which SAN configurations will offer the MOST confidentiality. Which of the following configurations would the administrators use? (Select TWO).

Options

  • ADeduplication
  • BZoning
  • CSnapshots
  • DMultipathing
  • ELUN masking

How the community answered

(47 responses)
  • A
    4% (2)
  • B
    85% (40)
  • C
    9% (4)
  • D
    2% (1)

Explanation

Zoning (B) and LUN masking (E) are the two SAN mechanisms that directly enforce confidentiality by restricting access. Zoning operates at the SAN fabric (switch) level, creating logical boundaries so that only designated hosts can see specific storage ports - unauthorized hosts are invisible to zoned-out storage. LUN masking operates at the storage controller level, restricting which host HBAs can access specific Logical Unit Numbers even if they are in the same zone. Together they provide defense-in-depth for storage access control. The other options address different concerns: deduplication and snapshots serve efficiency and recovery, while multipathing addresses availability and performance - none of these restrict which hosts can see or access data.

Topics

#SAN security#zoning#LUN masking#storage confidentiality

Community Discussion

No community discussion yet for this question.

Full CAS-001 Practice