CHAP for an iSCSI Environment CERTIFIED-IMPLEMENTATION-ENGINEER-SAN-E-SERIES Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   During CHAP authentication, the target sends a challenge to the initiator. The initiator responds with a hash. What does the target do next to verify the initiator's identity?

   • AThe target compares the received hash with a hash it computes using the shared secret.
   • BThe target sends the hash to a RADIUS server for validation.
   • CThe target stores the hash and uses it as the new CHAP secret.
   • DThe target decrypts the hash using the initiator's public key.
   Reveal Solution Discussion Select an answer first
2. 2expert · hard

   A storage administrator is planning to enable CHAP on an E-Series system with 50 iSCSI initiators. The security policy requires each initiator to have a unique CHAP secret. What is the best practice for managing these credentials?

   • AUse the same secret for all initiators to simplify management.
   • BStore secrets in a spreadsheet shared with the team.
   • CGenerate secrets manually and document them in the storage system.
   • DUse a centralized credential management system to store and distribute secrets.
   Reveal Solution Discussion Select an answer first
4. 3application · hard

   A storage administrator needs to rotate CHAP secrets for all iSCSI initiators connecting to an E-Series system. The goal is to minimize downtime. Which approach should be taken?

   • AUpdate the target secret first, then update each initiator one by one.
   • BUse the same secret for all initiators and update them simultaneously.
   • CDisable CHAP temporarily, update all secrets, then re-enable CHAP.
   • DUpdate each initiator's secret first, then update the target secret.
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   A storage team has multiple E-Series arrays and hundreds of iSCSI initiators. They recently enforced a policy requiring unique CHAP secrets per initiator. After the change, several initiators fail to connect. The team suspects the failures are due to a mismatch between the initiator and target configurations. What is the most efficient way to identify the mismatched initiators?

   • AReview the CHAP authentication logs on the E-Series system for failed login attempts.
   • BCheck the initiator configuration files on each host manually.
   • CReset all initiator CHAP secrets to a common value.
   • DDisable CHAP temporarily to restore connectivity.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   An administrator recently changed the CHAP secret on the E-Series target. After the change, an iSCSI initiator can no longer connect. The administrator verified the new secret on the initiator and it matches the target. What is the most likely cause of the authentication failure?

   • AThe target's CHAP setting is disabled after a secret change.
   • BThe initiator is using an old cached CHAP secret from a previous session.
   • CThe target requires a longer secret than the initiator provides.
   • DThe initiator's CHAP username was changed automatically.
   Reveal Solution Discussion Select an answer first