Which CHAP authentication mechanism is available when using software iSCSI and dependent hardware iSCSI?

Which CHAP authentication mechanism is available when using software iSCSI and dependent hardware iSCSI? Select two.

A.
Mutual CHAP

B.
Per-subnet CHAP

C.
Per-target CHAP

D.
One-way CHAP

Explanation:
http://pubs.vmware.com/vsphere-50/index.jsp?topic=/com.vmware.vsphere.storage.doc_50/GUID-FC0346B1-7A32-4A49-9415-F93260367200.html

For software and dependent hardware iSCSI adapters, you can set one-way CHAP and mutual CHAP for each initiator or at the target level. Independent hardware iSCSI supports CHAP only at the initiator level.

6 Comments on “Which CHAP authentication mechanism is available when using software iSCSI and dependent hardware iSCSI?

  1. console says:

    The correct answer is A and C because…

    For software and dependent hardware iSCSI adapters, ESXi also supports
    per-target CHAP authentication, which allows you to configure different credentials for each target to achieve
    greater level of security. (Page 84 vSphere Storage)

    Mutual CHAP
    In mutual CHAP authentication, also called bidirectional, an additional level
    of security enables the initiator to authenticate the target. VMware supports
    this method for software and dependent hardware iSCSI adapters only.(Page 85 vSphere Storage)

  2. Jon says:

    Per-target chap still needs to be configured to use One-Way or Mutual chap. It just means that you can configure it per each target. Check the bottom of page 86 in that same document you referenced.

  3. Rami says:

    A & C are the correct answers.
    Ref: vSphere 5.0, Student Manual, Volume 1, Module 6:Configure & Manage Virtual Storage, P 217

  4. Jon says:

    A & C would be the correct answers if the question read “Which CHAP authentication mechanism is available ONLY when using software iSCSI and dependent hardware iSCSI? Select two.”

  5. Mohsin Alvi says:

    The question wording is wrong
    There are two choice as
    1.
    Which CHAP authentication mechanism is available when using software iSCSI and dependent hardware iSCSI? Select three. (mention two instead of three)
    Ans: A, C and D

    Explanation: ESXi supports one-way CHAP for all types of iSCSI initiators, and mutual CHAP and per-target CHAP for software and dependent hardware iSCSI.

    2. Which CHAP authentication mechanism are only available when using software iSCSI and dependent hardware iSCSI? (only is missing)

    Ans: A and C

    Explanation: ESXi supports one-way CHAP for all types of iSCSI initiators ( so due to only word, A and C is true as D is also supported by independent hardware iSCSI


Leave a Reply

Your email address will not be published. Required fields are marked *