A security architect is updating the enterprise storage protection strategy to safeguard sensitive data at rest and during access operations. Match each storage security control on the left with its primary operational mechanism on the right.
- Storage Area Network (SAN) LUN MaskingRestricts storage volume access to authorized host World Wide Names (WWNs) or iSCSI initiators at the controller layer.
- Hardware Security Module (HSM)Provides tamper-resistant hardware for central generation, storage, and lifecycle management of root encryption keys.
- Database TokenizationReplaces sensitive data elements with non-sensitive surrogate tokens, preserving database schema without using mathematical ciphers.
- Endpoint Data Loss Prevention (DLP)Monitors local drive activity and removable media operations to prevent unauthorized extraction of confidential data.
Cevap
SAN LUN Masking maps to restricting storage volume access by host WWNs/iSCSI initiators. Hardware Security Module (HSM) maps to tamper-resistant hardware key lifecycle management. Database Tokenization maps to replacing sensitive data elements with non-sensitive surrogate tokens. Endpoint Data Loss Prevention (DLP) maps to monitoring local drive and removable media operations to prevent unauthorized data extraction.
Each storage security control fulfills a distinct architectural role: SAN LUN masking controls host-level access to SAN storage volumes, HSM safeguards root cryptographic keys in dedicated physical hardware, Tokenization obfuscates sensitive values without mathematical key ciphering, and Endpoint DLP prevents local data exfiltration.
Adım Adım Çözüm
Anahtar Kavram
Enterprise Data Protection and Storage Architecture Controls