What should the administrate! do to be compliant?

An administrator has been directed to configure Volumes to Nutanix’s best practices for security.

What should the administrate! do to be compliant?
A . Enable at-rest encryption on Volume Groups.
B . Configure Volume Groups to use CHAP.
C . Use data services IP for external host connectivity.
D . Segment iSCSI traffic to a physically separate network.

View Answer

Answer: B

Explanation:

Nutanix Volumes is a feature that allows users to create and manage block storage devices (volume groups) on a Nutanix cluster. Volume groups can be accessed by external hosts using the iSCSI protocol. To secure volume groups from unauthorized access, Nutanix recommends configuring CHAP (Challenge-Handshake Authentication Protocol) for each volume group in Prism Element. CHAP is a security feature that authenticates iSCSI initiators and targets before allowing access to a volume group. CHAP requires both the initiator and the target to have a shared secret (a password) that is used to generate a challenge and a response during the authentication process. CHAP can prevent unauthorized access to volume groups and protect data from malicious attacks.

Reference: Nutanix Volumes Administration Guide, page 25; Nutanix Volumes Security Guide