nerdexam
CompTIA

CV0-002 · Question #447

A private cloud is using the iSCSI protocol for connection from storage to hypervisors. This connection is not encrypted currently, and the systems administrator is tasked with enabling on- the-fly en

The correct answer is A. PKI. To enable on-the-fly encryption for an iSCSI connection, Public Key Infrastructure (PKI) is used to provide the necessary digital certificates for secure authentication and key exchange.

Security

Question

A private cloud is using the iSCSI protocol for connection from storage to hypervisors. This connection is not encrypted currently, and the systems administrator is tasked with enabling on- the-fly encryption. Which of the following technologies should the administrator use?

Options

  • APKI
  • BIPSec
  • CHTTPS
  • DLUN encryption

How the community answered

(27 responses)
  • A
    89% (24)
  • B
    4% (1)
  • C
    7% (2)

Why each option

To enable on-the-fly encryption for an iSCSI connection, Public Key Infrastructure (PKI) is used to provide the necessary digital certificates for secure authentication and key exchange.

APKICorrect

Public Key Infrastructure (PKI) is a foundational technology that provides digital certificates, which are essential for establishing trust and performing secure key exchanges required for on-the-fly encryption protocols like IPsec. While IPsec performs the actual encryption, PKI is the underlying infrastructure that enables the secure authentication and key management necessary for IPsec to function securely over iSCSI connections.

BIPSec

IPSec is a protocol that provides on-the-fly encryption, but it often relies on PKI for robust authentication and secure key exchange, meaning PKI is a prerequisite for a fully secure IPSec implementation.

CHTTPS

HTTPS is an application-layer protocol for securing web traffic and is not directly applicable to encrypting iSCSI storage traffic.

DLUN encryption

LUN encryption refers to encrypting data stored on the LUN itself (data at rest), not the data actively being transmitted over the iSCSI connection (on-the-fly encryption).

Concept tested: PKI role in securing network protocols

Source: https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-firewall/how-ipsec-works

Topics

#iSCSI#Network encryption#IPSec#Data in transit security

Community Discussion

No community discussion yet for this question.

Full CV0-002 Practice