nerdexam
Network_Appliance

NS0-521 · Question #76

A customer has a new eight-node NetApp AFF cluster that will serve NVMe/TCP namespaces to clients. Bidirectional in-band authentication is required between all NVMe hosts and the AFF cluster. Which…

The correct answer is A. DH-HMAC-CHAP. DH-HMAC-CHAP (Diffie-Hellman Hash-based Message Authentication Code Challenge Handshake Authentication Protocol) provides bidirectional in-band authentication specifically designed for NVMe over Fabrics (NVMe-oF), including NVMe/TCP, between hosts and storage controllers in…

ONTAP SAN Solutions Implementation

Question

A customer has a new eight-node NetApp AFF cluster that will serve NVMe/TCP namespaces to clients. Bidirectional in-band authentication is required between all NVMe hosts and the AFF cluster. Which NetApp ONTAP feature must be configured to meet the requirement?

Options

  • ADH-HMAC-CHAP
  • BSAML IdP
  • CKerberos 5p
  • DActive Directory domain-tunnel

How the community answered

(59 responses)
  • A
    86% (51)
  • B
    3% (2)
  • C
    7% (4)
  • D
    3% (2)

Explanation

DH-HMAC-CHAP (Diffie-Hellman Hash-based Message Authentication Code Challenge Handshake Authentication Protocol) provides bidirectional in-band authentication specifically designed for NVMe over Fabrics (NVMe-oF), including NVMe/TCP, between hosts and storage controllers in ONTAP environments. This meets the requirement for mutual authentication.

Topics

#NVMe/TCP#DH-HMAC-CHAP#bidirectional authentication#security

Community Discussion

No community discussion yet for this question.

Full NS0-521 Practice