A financial institution needs to implement a storage solution that allows block-level access to SAN storage over existing TCP/IP networks. The security team is concerned about data confidentiality during transmission. Which converged protocol would be the BEST choice for this implementation, and what security mechanism should be applied?
VoIP with SRTP encryption
InfiniBand over Ethernet with SSH tunneling
iSCSI with IPsec or TLS encryption
Fibre Channel over Ethernet (FCoE) with CHAP authentication
The correct answer is iSCSI with IPsec or TLS encryption. Internet Small Computer Systems Interface (iSCSI) is a converged protocol that allows block-level access to storage area network (SAN) devices over TCP/IP networks, making it perfect for the financial institution's requirements. For security purposes, iSCSI traffic should be protected using either IPsec or TLS encryption to ensure data confidentiality during transmission.
While FCoE also provides block-level storage access, it typically runs over Ethernet without IP, making it less suitable for existing TCP/IP networks. VoIP is designed for voice communications, not storage. InfiniBand is primarily used for high-performance computing interconnects and would require specialized hardware not mentioned in the scenario.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is iSCSI and how does it work?
Open an interactive chat with Bash
What are IPsec and TLS encryption, and how do they enhance security?
Open an interactive chat with Bash
What distinguishes block-level storage from file-level storage?
Open an interactive chat with Bash
ISC2 CISSP
Communication and Network Security
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
IT & Cybersecurity Package Join Premium for Full Access