In iSCSI security, which option is used to control which LUN a host can access?

• A. Encrypts data during transit
• B. Controls LUN visibility per host
• C. Authenticates the initiator to the target
• D. Provides data integrity via digests

Answer: (B)

LUN visibility control through masking determines which LUNs a host can access. In NetApp iSCSI, you place the host’s initiator(s) into an iGroup and assign specific LUNs to that iGroup; only the LUNs in that iGroup are visible to that host, while others remain hidden. This per-host visibility is the mechanism that enforces which storage a host can access, regardless of authentication or data-in-transit protections. Encrypting data during transit protects confidentiality of the data, but doesn’t restrict which LUNs are exposed. Authenticating the initiator ensures the host can connect, but masking still governs which LUNs appear. Data integrity digests protect against corruption but don’t control LUN visibility.