Exam NCP-US-6.10 Topic 1 Question 29 Discussion
Actual exam question for Nutanix's NCP-US-6.10 exam
Question #: 29
Topic #: 1
Question #: 29
Topic #: 1
An administrator needs to create a volume group (VG) that will host highly sensitive data. These two requirements must be met:
* The VG must be accessible only by the OS where the data is going to be used by the application
* The access needs to be secured with an additional security login
Which three features or settings will help the administrator meet those requirements? (Choose two.)
* The VG must be accessible only by the OS where the data is going to be used by the application
* The access needs to be secured with an additional security login
Which three features or settings will help the administrator meet those requirements? (Choose two.)
Suggested Answer: A,D Vote an answer
The Nutanix Unified Storage Administration (NUSA) course module "Configuring and Securing Volume Groups" specifies that to secure access to volume groups (VGs) containing sensitive data:
* CHAP Authentication(Challenge-Handshake Authentication Protocol) provides an additional layer of security by requiring authentication before iSCSI connections are established. This satisfies the second requirement: "The access needs to be secured with an additional security login."
* IQN-based Access Controlensures that only the intended initiator (the client OS) can access the VG by explicitly specifying the IQN of the client in the VG configuration. This meets the first requirement:
"The VG must be accessible only by the OS where the data is going to be used by the application." WhileOn-the-wire encryptionis beneficial for data confidentiality, the course emphasizes that CHAP and IQN-based controls are the specific mechanisms for access security.RDMA-capable NICsare not relevant to restricting access or security in this context.
Reference:
Nutanix Unified Storage Administration (NUSA) course - Module: Configuring and Securing Volume Groups.
Nutanix Unified Storage (NCP-US) Study Guide - Topic: Volume Groups Security Best Practices.
* CHAP Authentication(Challenge-Handshake Authentication Protocol) provides an additional layer of security by requiring authentication before iSCSI connections are established. This satisfies the second requirement: "The access needs to be secured with an additional security login."
* IQN-based Access Controlensures that only the intended initiator (the client OS) can access the VG by explicitly specifying the IQN of the client in the VG configuration. This meets the first requirement:
"The VG must be accessible only by the OS where the data is going to be used by the application." WhileOn-the-wire encryptionis beneficial for data confidentiality, the course emphasizes that CHAP and IQN-based controls are the specific mechanisms for access security.RDMA-capable NICsare not relevant to restricting access or security in this context.
Reference:
Nutanix Unified Storage Administration (NUSA) course - Module: Configuring and Securing Volume Groups.
Nutanix Unified Storage (NCP-US) Study Guide - Topic: Volume Groups Security Best Practices.
by Prudence at Jun 26, 2026, 01:12 AM
0
0
0
10
Comments
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Report Comment
Commenting
You can sign-up / login (it's free).