nerdexam
CompTIA

SG0-001 · Question #167

An administrator wants to hide storage resources from servers that should not have access to them. Which of the following can be configured on the storage controller to accomplish this?

The correct answer is B. LUN Masking. To hide storage resources from unauthorized servers, LUN Masking can be configured on the storage controller, which explicitly controls which servers can access specific Logical Unit Numbers.

Storage Management

Question

An administrator wants to hide storage resources from servers that should not have access to them. Which of the following can be configured on the storage controller to accomplish this?

Options

  • AZone
  • BLUN Masking
  • CPort masking
  • DVLAN

How the community answered

(30 responses)
  • A
    3% (1)
  • B
    87% (26)
  • C
    3% (1)
  • D
    7% (2)

Why each option

To hide storage resources from unauthorized servers, LUN Masking can be configured on the storage controller, which explicitly controls which servers can access specific Logical Unit Numbers.

AZone

Zoning is configured on Fibre Channel switches to segment the SAN into smaller logical groups, allowing specific HBAs to communicate only with specific storage ports, but it does not hide specific LUNs from servers that are permitted to be in a zone.

BLUN MaskingCorrect

LUN Masking is a security feature implemented on a storage array (storage controller) that controls which servers, typically identified by their World Wide Name (WWN), can access specific Logical Unit Numbers (LUNs). By masking, a LUN is made invisible or inaccessible to servers that are not explicitly authorized.

CPort masking

Port masking is not a standard or commonly used term for hiding specific storage resources (LUNs) from servers; while storage port configurations are important, LUN masking handles the granular access control.

DVLAN

VLANs (Virtual Local Area Networks) are used for segmenting IP-based Ethernet networks and are not directly applicable to Fibre Channel SANs or LUN access control on a storage controller.

Concept tested: Storage access control LUN Masking

Source: https://docs.cisco.com/document/Cisco-MDS-9000-Family-Configuration-Guide/Zoning-and-LUN-Masking

Topics

#LUN masking#Storage access control#Storage security#SAN administration

Community Discussion

No community discussion yet for this question.

Full SG0-001 Practice