CAS-001 · Question #67
The security administrator reports that the physical security of the Ethernet network has been breached, but the fibre channel storage network was not breached. Why might this still concern the…
The correct answer is A. The storage network uses FCoE. B. The storage network uses iSCSI. The question tests understanding of which storage protocols traverse the Ethernet network, making a physical Ethernet breach directly relevant to SAN security.
Question
The security administrator reports that the physical security of the Ethernet network has been breached, but the fibre channel storage network was not breached. Why might this still concern the storage administrator? (Select TWO).
Options
- AThe storage network uses FCoE.
- BThe storage network uses iSCSI.
- CThe storage network uses vSAN.
- DThe storage network uses switch zoning.
- EThe storage network uses LUN masking.
How the community answered
(50 responses)- A76% (38)
- C6% (3)
- D4% (2)
- E14% (7)
Why each option
The question tests understanding of which storage protocols traverse the Ethernet network, making a physical Ethernet breach directly relevant to SAN security.
FCoE encapsulates Fibre Channel frames within Ethernet frames, meaning a physical breach of the Ethernet network exposes FC storage traffic to interception or manipulation by an attacker on the wire.
iSCSI transports SCSI commands over TCP/IP on Ethernet, so a physical Ethernet breach gives an attacker the ability to capture or inject storage commands even though the dedicated Fibre Channel physical infrastructure was not compromised.
vSAN is a software-defined storage overlay that does not encapsulate Fibre Channel or SCSI directly over the Ethernet segment in a way that is specifically exposed by a physical Ethernet breach.
Switch zoning is an access control mechanism within the Fibre Channel fabric itself and does not create an Ethernet-layer dependency that would be exploited by a physical breach of the Ethernet network.
LUN masking is a host-level or array-level access control restricting LUN visibility, and its effectiveness is not directly undermined by a physical breach of the Ethernet network.
Concept tested: FCoE and iSCSI Ethernet dependency exposing SAN to Ethernet breaches
Source: https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-209.pdf
Topics
Community Discussion
No community discussion yet for this question.