Which of the following is a security risk inherent to using port zoning?

The correct answer is B. Encryption of data in-flight is not compatible with port zoning.. A security risk inherent to port zoning in Fibre Channel SANs is that World Wide Name (WWN) spoofing could allow unauthorized access to data.

Storage Connectivity

Question

Options

APhysical access to the switch could allow unauthorized access to data.
BEncryption of data in-flight is not compatible with port zoning.
CTape-based encryption is not compatible with port zoning.
DWWN-spoofing on the SAN fabric could allow unauthorized access to data.

How the community answered

(60 responses)

A
3% (2)
B
92% (55)
C
2% (1)
D
3% (2)

Why each option

A security risk inherent to port zoning in Fibre Channel SANs is that World Wide Name (WWN) spoofing could allow unauthorized access to data.

APhysical access to the switch could allow unauthorized access to data.

Physical access to the switch is a security risk for any network infrastructure, not one inherent or specific to port zoning itself, as it compromises the device regardless of zoning configuration.

BEncryption of data in-flight is not compatible with port zoning.Correct

CTape-based encryption is not compatible with port zoning.

Tape-based encryption is a data protection method for data at rest on tape media and has no direct compatibility or conflict with port zoning, which controls access within a SAN fabric.

DWWN-spoofing on the SAN fabric could allow unauthorized access to data.

Concept tested: Fibre Channel port zoning security risks

Source: https://techdocs.broadcom.com/us/en/symantec-enterprise-security/data-protection/netbackup/10-2/release-notes/what-s-new-or-changed/netbackup-fabric-zoning-best-practices.html

Topics

#SAN security#Port zoning#Data encryption

Community Discussion

No community discussion yet for this question.

Full SG0-001 Practice