nerdexam
CompTIA

CAS-002 · Question #801

Which of the following represents important technical controls for securing a SAN storage infrastructure? (Select TWO).

The correct answer is F. LUN masking/mapping G. Port mapping. A logical unit number (LUN) is a unique identifier that designates individual hard disk devices or grouped devices for address by a protocol associated with a SCSI, iSCSI, Fibre Channel (FC) or similar interface. LUNs are central to the management of block storage arrays shared…

Technical Integration of Enterprise Components

Question

Which of the following represents important technical controls for securing a SAN storage infrastructure? (Select TWO).

Options

  • ASynchronous copy of data
  • BRAID configuration
  • CData de-duplication
  • DStorage pool space allocation
  • EPort scanning
  • FLUN masking/mapping
  • GPort mapping

How the community answered

(27 responses)
  • C
    4% (1)
  • E
    7% (2)
  • F
    89% (24)

Explanation

A logical unit number (LUN) is a unique identifier that designates individual hard disk devices or grouped devices for address by a protocol associated with a SCSI, iSCSI, Fibre Channel (FC) or similar interface. LUNs are central to the management of block storage arrays shared over a storage area network (SAN). LUN masking subdivides access to a given port. Then, even if several LUNs are accessed through the same port, the server masks can be set to limit each server's access to the appropriate LUNs. LUN masking is typically conducted at the host bus adapter (HBA) or switch Port mapping is used in `Zoning'. In storage networking, Fibre Channel zoning is the partitioning of a Fibre Channel fabric into smaller subsets to restrict interference, add security, and to simplify management. While a SAN makes available several devices and/or ports to a single device, each system connected to the SAN should only be allowed access to a controlled subset of these Zoning can be applied to either the switch port a device is connected to OR the WWN World Wide Name on the host being connected. As port based zoning restricts traffic flow based on the specific switch port a device is connected to, if the device is moved, it will lose access. Furthermore, if a different device is connected to the port in question, it will gain access to any resources the previous host had access to.

Topics

#SAN security#LUN masking#port mapping#storage infrastructure

Community Discussion

No community discussion yet for this question.

Full CAS-002 Practice