CHAP for an iSCSI Environment CERTIFIED-IMPLEMENTATION-ENGINEER-SAN-E-SERIES Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   On an iSCSI initiator, what CHAP credentials must be configured to authenticate with an E-Series target?

   • AThe initiator's IQN and WWN
   • BThe target's IP address and port number
   • CThe initiator's CHAP username and secret
   • DThe target's CHAP secret only
   Reveal Solution Discussion Select an answer first
2. 22application · easy

   A security audit recommends implementing CHAP for iSCSI to prevent unauthorized access. What is the primary purpose of CHAP in this context?

   • ATo encrypt the data transmitted between the initiator and target.
   • BTo assign IP addresses to iSCSI initiators.
   • CTo compress the data for faster transfer.
   • DTo authenticate the identity of the initiator and optionally the target.
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   An organization requires mutual CHAP for all iSCSI connections to their E-Series storage. An administrator has enabled mutual CHAP on the target. What additional configuration is required on the initiator?

   • ASet the initiator to use the same secret for both directions.
   • BConfigure a CHAP secret for the target to use when authenticating to the initiator.
   • CDisable one-way CHAP on the initiator to avoid conflicts.
   • DConfigure the initiator to use a different CHAP username for the target.
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   When configuring CHAP on an E-Series storage system, which of the following is a required step?

   • AEnabling CHAP on the iSCSI target and defining a CHAP secret for the target
   • BAssigning a static IP address to each initiator
   • CInstalling a certificate on the storage controller
   • DCreating a volume group for each initiator
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A security administrator wants to ensure that an E-Series iSCSI target authenticates itself to the initiator to prevent a rogue target from impersonating the storage system. Which configuration should be implemented?

   • AEnable CHAP only on the initiator side.
   • BUse a separate CHAP secret for each initiator.
   • CConfigure a longer CHAP secret on the target side.
   • DEnable mutual CHAP on both the target and the initiator.
   Reveal Solution Discussion Select an answer first