Which setting on a storage array provides security for the data contained within the array by restricting host visibility?

Which setting on a storage array provides security for the data contained within the array by restricting host visibility?

• A. Trunking
• B. LUN masking
• C. LUN provisioning
• D. Multipathing

Answer: (B)

Controlling which hosts can see which storage units is accomplished by LUN masking. It enforces security by presenting to each host only the logical units that are permitted for that host, hiding all others. This prevents a server from accessing data it shouldn’t see, which is especially important in shared storage environments or when multiple tenants share the same array. LUN masking works by mapping initiators to the LUNs and applying masks or access control lists on the array so only approved LUNs are visible to a given host. Without masking, a host connected to the array could discover all LUNs, making unauthorized access possible. Trunking relates to carrying multiple network or fabric signals and isn’t about restricting visibility of data on the array. LUN provisioning deals with creating and assigning LUNs, which influences access but doesn’t by itself hide non-assigned LUNs. Multipathing provides redundant, multiple paths to storage for reliability and performance, not visibility control.

Controlling which hosts can see which storage units is accomplished by LUN masking. It enforces security by presenting to each host only the logical units that are permitted for that host, hiding all others. This prevents a server from accessing data it shouldn’t see, which is especially important in shared storage environments or when multiple tenants share the same array. LUN masking works by mapping initiators to the LUNs and applying masks or access control lists on the array so only approved LUNs are visible to a given host. Without masking, a host connected to the array could discover all LUNs, making unauthorized access possible.

Trunking relates to carrying multiple network or fabric signals and isn’t about restricting visibility of data on the array. LUN provisioning deals with creating and assigning LUNs, which influences access but doesn’t by itself hide non-assigned LUNs. Multipathing provides redundant, multiple paths to storage for reliability and performance, not visibility control.