SG0-001 · Question #126
An administrator would like to encrypt the communication between servers and the target in an iSCSI SAN. Which of the following would accomplish this?
The correct answer is B. iPSec. To encrypt data communication over an iSCSI SAN connection between servers and the target, IPSec is the standard protocol used for securing IP network traffic.
Question
An administrator would like to encrypt the communication between servers and the target in an iSCSI SAN. Which of the following would accomplish this?
Options
- ATPM Module
- BiPSec
- CEFS
- DCHAP
How the community answered
(28 responses)- B93% (26)
- C4% (1)
- D4% (1)
Why each option
To encrypt data communication over an iSCSI SAN connection between servers and the target, IPSec is the standard protocol used for securing IP network traffic.
A TPM (Trusted Platform Module) is a hardware security component used for secure key storage and system integrity verification, not for encrypting network communication.
IPSec (Internet Protocol Security) is a suite of protocols used to provide secure communication over an IP network by authenticating and encrypting each IP packet. When configured for iSCSI, IPSec encrypts the data payloads of iSCSI packets as they travel between the initiator and the target, ensuring confidentiality.
EFS (Encrypting File System) is a feature that encrypts files at the file system level on local storage, not for encrypting data in transit over a network.
CHAP (Challenge-Handshake Authentication Protocol) is used for authenticating the iSCSI initiator to the target, verifying identity, but it does not encrypt the actual data traffic.
Concept tested: iSCSI communication encryption
Source: https://learn.microsoft.com/en-us/windows-server/storage/iscsi/iscsi-security
Topics
Community Discussion
No community discussion yet for this question.