CHAP for an iSCSI Environment CERTIFIED-IMPLEMENTATION-ENGINEER-SAN-E-SERIES Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   During CHAP authentication, the initiator receives a challenge from the target. What does the initiator do with this challenge?

   • AIt hashes the challenge with the CHAP secret and sends the result back.
   • BIt sends the challenge back unchanged to prove it received it.
   • CIt encrypts the challenge with its private key and sends it back.
   • DIt stores the challenge and uses it for the next authentication.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   In a CHAP authentication process, how does the target verify the initiator's response?

   • ABy comparing the response to a pre-stored value sent by the initiator
   • BBy recomputing the expected response using the same challenge and shared secret, then comparing it to the received response
   • CBy asking a trusted third party to validate the response
   • DBy decrypting the response with a public key
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A company has just enabled CHAP on their E-Series storage system for iSCSI. They configured a CHAP secret on the target side and set the initiator to use the same secret. However, the initiator cannot log in to the target. Which configuration step is most likely missing?

   • AThe target must be configured to allow CHAP authentication only after a discovery session completes.
   • BThe initiator must use a different CHAP secret for each target portal.
   • CThe initiator must have a CHAP username configured that matches the target's expected initiator name.
   • DThe storage system must have CHAP enabled globally before any initiator can authenticate.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   What is the recommended practice when changing a CHAP secret on an E-Series target?

   • AChange the secret on the initiators first, then on the target.
   • BUpdate the CHAP secret on the target and then update all initiators that connect to it.
   • CDelete the initiator's CHAP configuration and recreate it with a new IQN.
   • DOnly change the secret on the target; initiators will automatically discover the new secret.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   Which of the following is a valid method for managing CHAP credentials on an E-Series storage system?

   • AEditing the /etc/chap.conf file on the storage controller.
   • BUsing the iSCSI initiator's command-line tool to modify target-side CHAP settings.
   • CSending a special iSCSI command from the initiator to update the target's CHAP secret.
   • DUsing the E-Series SANtricity System Manager to create, modify, or delete CHAP accounts and secrets.
   Reveal Solution Discussion Select an answer first