Examkin

Question

Difficulty: EasyData Protection and Storage Security Architecture

Match each storage security mechanism or state to its corresponding enterprise data protection objective.

  • Data MaskingReplacing sensitive dataset values with realistic structural proxies for development and testing environments
  • Data in Transit ProtectionSecuring data traversing network links between host servers and storage arrays using TLS or IPSec
  • Cryptographic ErasureSanitizing retired media by intentionally destroying the encryption keys used to decrypt stored data
  • SAN IsolationRestricting logical storage volume access to authorized host systems using Fibre Channel zoning and LUN masking

Answer

Data Masking pairs with replacing sensitive dataset values with realistic structural proxies for development environments; Data in Transit Protection pairs with securing data traversing network links between host servers and storage arrays using TLS or IPSec; Cryptographic Erasure pairs with sanitizing retired media by destroying encryption keys; SAN Isolation pairs with restricting logical storage volume access using Fibre Channel zoning and LUN masking.
The correct matches align each security mechanism with its explicit implementation objective: Data Masking replaces sensitive values for test environments; Data in Transit Protection encrypts network pathways between hosts and arrays using protocols like TLS/IPSec; Cryptographic Erasure sanitizes media by destroying encryption keys; SAN Isolation isolates storage volumes to authorized host systems using LUN masking and Fibre Channel zoning.

Step-by-Step Solution

1
Analyze each storage security concept listed on the left.
Identified four key concepts: Data Masking (obfuscation), Data in Transit Protection (network transport security), Cryptographic Erasure (media sanitization), and SAN Isolation (storage network access control).
Understanding the core functional domain of each storage security control is required to pair it correctly.
2
Correlate each control with its technical implementation objective listed on the right.
Data Masking correlates to proxy values for testing; Data in Transit to TLS/IPSec network encryption; Cryptographic Erasure to key destruction; SAN Isolation to Fibre Channel zoning and LUN masking.
These associations accurately reflect standard enterprise storage security architecture practices.

Key Concept

Data Protection and Storage Security Architecture Controls
Rate this question

Topics

Data Protection and Storage Security Architecture

More questions from this topic