CAS-002 · Question #867
An administrator is implementing a new network-based storage device. In selecting a storage protocol, the administrator would like the data in transit's integrity to be the most important concern…
The correct answer is A. SMB. This question tests knowledge of which network storage protocol uses AES-CMAC or HMAC-SHA256 to ensure data integrity in transit.
Question
An administrator is implementing a new network-based storage device. In selecting a storage protocol, the administrator would like the data in transit's integrity to be the most important concern. Which of the following protocols meets these needs by implementing either AES-CMAC or HMAC-SHA256 to sign data?
Options
- ASMB
- BNFS
- CFCoE
- DiSCSI
How the community answered
(26 responses)- A77% (20)
- B4% (1)
- C12% (3)
- D8% (2)
Why each option
This question tests knowledge of which network storage protocol uses AES-CMAC or HMAC-SHA256 to ensure data integrity in transit.
SMB 3.0 implements AES-CMAC for packet signing to verify data integrity, while SMB 2.x used HMAC-SHA256 for the same purpose. These cryptographic signing mechanisms protect data from tampering while traversing the network, making SMB the only listed protocol that directly implements either of the two specified algorithms for data integrity.
NFS does not natively implement AES-CMAC or HMAC-SHA256 for data signing - it relies on Kerberos or AUTH_SYS for authentication rather than cryptographic integrity signing of packets in transit.
FCoE is a Layer 2 encapsulation protocol that carries Fibre Channel frames over Ethernet and does not natively implement AES-CMAC or HMAC-SHA256 for data integrity signing.
iSCSI can leverage IPsec for security at the network layer but does not natively implement AES-CMAC or HMAC-SHA256 at the iSCSI protocol level for signing data in transit.
Concept tested: SMB protocol signing with AES-CMAC and HMAC-SHA256
Source: https://learn.microsoft.com/en-us/windows-server/storage/file-server/smb-signing-overview
Topics
Community Discussion
No community discussion yet for this question.