Which iSCSI security method encrypts data between the initiator and the target?

Which iSCSI security method encrypts data between the initiator and the target?

• A. IPSec
• B. CHAP
• C. LUN Masking
• D. Header and Data Digests

Answer: (A)

When securing iSCSI traffic in motion, you want confidentiality so that data traveling between the initiator and the target isn’t readable by anyone on the network. IPSec does exactly that at the IP layer, typically using ESP to encrypt the payload, while also offering integrity and authentication. CHAP handles authentication only, not encryption. LUN masking controls which hosts can see which LUNs, not the encryption of traffic. Header and data digests provide integrity checks to detect tampering but do not conceal the content. So the method that actually encrypts the data in transit is IPSec.

When securing iSCSI traffic in motion, you want confidentiality so that data traveling between the initiator and the target isn’t readable by anyone on the network. IPSec does exactly that at the IP layer, typically using ESP to encrypt the payload, while also offering integrity and authentication. CHAP handles authentication only, not encryption. LUN masking controls which hosts can see which LUNs, not the encryption of traffic. Header and data digests provide integrity checks to detect tampering but do not conceal the content. So the method that actually encrypts the data in transit is IPSec.