nerdexam
CompTIA

CAS-002 · Question #867

An administrator is implementing a new network-based storage device. In selecting a storage protocol, the administrator would like the data in transit's integrity to be the most important concern…

The correct answer is A. SMB. This question tests knowledge of which network storage protocol uses AES-CMAC or HMAC-SHA256 to ensure data integrity in transit.

Technical Integration of Enterprise Components

Question

An administrator is implementing a new network-based storage device. In selecting a storage protocol, the administrator would like the data in transit's integrity to be the most important concern. Which of the following protocols meets these needs by implementing either AES-CMAC or HMAC-SHA256 to sign data?

Options

  • ASMB
  • BNFS
  • CFCoE
  • DiSCSI

How the community answered

(26 responses)
  • A
    77% (20)
  • B
    4% (1)
  • C
    12% (3)
  • D
    8% (2)

Why each option

This question tests knowledge of which network storage protocol uses AES-CMAC or HMAC-SHA256 to ensure data integrity in transit.

ASMBCorrect

SMB 3.0 implements AES-CMAC for packet signing to verify data integrity, while SMB 2.x used HMAC-SHA256 for the same purpose. These cryptographic signing mechanisms protect data from tampering while traversing the network, making SMB the only listed protocol that directly implements either of the two specified algorithms for data integrity.

BNFS

NFS does not natively implement AES-CMAC or HMAC-SHA256 for data signing - it relies on Kerberos or AUTH_SYS for authentication rather than cryptographic integrity signing of packets in transit.

CFCoE

FCoE is a Layer 2 encapsulation protocol that carries Fibre Channel frames over Ethernet and does not natively implement AES-CMAC or HMAC-SHA256 for data integrity signing.

DiSCSI

iSCSI can leverage IPsec for security at the network layer but does not natively implement AES-CMAC or HMAC-SHA256 at the iSCSI protocol level for signing data in transit.

Concept tested: SMB protocol signing with AES-CMAC and HMAC-SHA256

Source: https://learn.microsoft.com/en-us/windows-server/storage/file-server/smb-signing-overview

Topics

#SMB#data integrity#HMAC-SHA256#storage protocols

Community Discussion

No community discussion yet for this question.

Full CAS-002 Practice