As your organization’s SAN environment grows, you realize there is a greater need to manage
SAN security. Which mechanism is required to prevent unauthorized activity on the FC fabric for
management operations?

A.
Role-based access control

B.
Access control lists

C.
VSAN

D.
Zoning

Explanation:
Securing the Management Access Domain
Management access, whether monitoring, provisioning, or managing storage resources, is
associated with every device within the storage network.
Implementing appropriate controls for securing storage management applications is important
because the damage that can be caused by using these applications can be far more extensive.
Controlling administrative access to storage aims to safeguard against the threats of an attacker
spoofing an administrator’s identity or elevating privileges to gain administrative access. To protect
against these threats, administrative access regulation and various auditing techniques are used
to enforce accountability of users and processes.
Access control should be enforced for each storage component. In some storage environments, it
may be necessary to integrate storage devices with third-party authentication directories, such as
Lightweight Directory Access Protocol (LDAP) or Active Directory. Security best practices stipulate
that no single user should have ultimate control over all aspects of the system. It is better to assign
various administrative functions by using RBAC. Auditing logged events is a critical control
measure to track the activities of an administrator.
However, access to administrative log files and their content must be protected. In addition, having
a Security Information Management (SIM) solution supports effective analysis of the event log
files.
EMC E10-001 Student Resource Guide. Module 14: Securing the Storage Infrastructure