In iSCSI security, which option is primarily used for access control rather than encryption?

In iSCSI security, which option is primarily used for access control rather than encryption?

• A. IPSec
• B. CHAP
• C. LUN Masking
• D. Header and Data Digests

Answer: (C)

Access control in iSCSI is about who gets to see and use which LUNs. LUN masking is a storage-array feature that hides or reveals specific LUNs to particular initiators, so only authorized hosts can access those LUNs. It doesn’t encrypt data; it just controls visibility and permissions at the LUN level. In contrast, IPSec provides encryption of the iSCSI traffic, which is about protecting data in transit. CHAP handles authentication to verify identity, which is part of access control but occurs at the session level rather than restricting visibility of individual LUNs. Header and Data Digests ensure data integrity, not access control. Therefore, LUN masking is the option primarily used for access control rather than encryption.

Access control in iSCSI is about who gets to see and use which LUNs. LUN masking is a storage-array feature that hides or reveals specific LUNs to particular initiators, so only authorized hosts can access those LUNs. It doesn’t encrypt data; it just controls visibility and permissions at the LUN level.

In contrast, IPSec provides encryption of the iSCSI traffic, which is about protecting data in transit. CHAP handles authentication to verify identity, which is part of access control but occurs at the session level rather than restricting visibility of individual LUNs. Header and Data Digests ensure data integrity, not access control.

Therefore, LUN masking is the option primarily used for access control rather than encryption.