CV0-002 · Question #447
A private cloud is using the iSCSI protocol for connection from storage to hypervisors. This connection is not encrypted currently, and the systems administrator is tasked with enabling on- the-fly en
The correct answer is A. PKI. To enable on-the-fly encryption for an iSCSI connection, Public Key Infrastructure (PKI) is used to provide the necessary digital certificates for secure authentication and key exchange.
Question
A private cloud is using the iSCSI protocol for connection from storage to hypervisors. This connection is not encrypted currently, and the systems administrator is tasked with enabling on- the-fly encryption. Which of the following technologies should the administrator use?
Options
- APKI
- BIPSec
- CHTTPS
- DLUN encryption
How the community answered
(27 responses)- A89% (24)
- B4% (1)
- C7% (2)
Why each option
To enable on-the-fly encryption for an iSCSI connection, Public Key Infrastructure (PKI) is used to provide the necessary digital certificates for secure authentication and key exchange.
Public Key Infrastructure (PKI) is a foundational technology that provides digital certificates, which are essential for establishing trust and performing secure key exchanges required for on-the-fly encryption protocols like IPsec. While IPsec performs the actual encryption, PKI is the underlying infrastructure that enables the secure authentication and key management necessary for IPsec to function securely over iSCSI connections.
IPSec is a protocol that provides on-the-fly encryption, but it often relies on PKI for robust authentication and secure key exchange, meaning PKI is a prerequisite for a fully secure IPSec implementation.
HTTPS is an application-layer protocol for securing web traffic and is not directly applicable to encrypting iSCSI storage traffic.
LUN encryption refers to encrypting data stored on the LUN itself (data at rest), not the data actively being transmitted over the iSCSI connection (on-the-fly encryption).
Concept tested: PKI role in securing network protocols
Source: https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-firewall/how-ipsec-works
Topics
Community Discussion
No community discussion yet for this question.