Exam NS0-163 topic 1 question 4 discussion

B. CHAP authentication Challenge-Handshake Authentication Protocol (CHAP) is a widely used method to authenticate iSCSI initiators (hosts) and targets (ONTAP LUNs). ONTAP supports unidirectional (initiator-to-target) or bidirectional (mutual) CHAP. Ensures that only authorized hosts can access the LUN by requiring a shared secret. D. Secure authentication This refers to iSCSI authentication methods like CHAP or even stronger mechanisms (e.g., RADIUS integration for centralized CHAP secret management). ONTAP also supports IPsec for encrypting iSCSI traffic, adding another layer of security.\

A. Endpoint isolation and C. WWPN zoning are not typically used for securing iSCSI LUNs. Endpoint isolation is more related to network security, and WWPN zoning is used in Fibre Channel environments, not iSCSI. So, the correct answers are B. CHAP authentication and D. Secure authentication.

A and B

A and B

Beginning with ONTAP 9.1 existing iSCSI security commands were enhanced to accept an IP address range, or multiple IP addresses. "iSCSI endpoint isolation"

,B Beginning with ONTAP 9.1 existing iSCSI security commands were enhanced to accept an IP address range, or multiple IP addresses. "iSCSI endpoint isolation" Challenge Handshake Authentication Protocol (CHAP)--The initiator logs in using a CHAP user name and password. narit.kl

A,B Beginning with ONTAP 9.1 existing iSCSI security commands were enhanced to accept an IP address range, or multiple IP addresses. "iSCSI endpoint isolation" Challenge Handshake Authentication Protocol (CHAP)--The initiator logs in using a CHAP user name and password. narit.kl