NS0-162 Exam Dumps : NetApp Certified Data Administrator (ONTAP)

The igroup is a logical grouping of initiators that can access a set of LUNs. The igroup must contain the IQNs (iSCSI Qualified Names) or WWPNs (World Wide Port Names) of the initiators that need to access the LUNs. In this scenario, the igroup named “ESX” has the iSCSI protocol and the VMware OS type, but it does not have any initiators listed. This means that the VMware hosts cannot authenticate and connect to the LUNs in the SVM. To resolve this issue, the igroup must be populated with the correct initiators that match the VMware hosts. This can be done by using the igroup add command or the System Manager GUI12. References :- Create an igroup, Add initiators to an igroup

 To increase access security in both NFS and iSCSI environments, you can use Kerberos and CHAP as authentication methods. Kerberos is a network authentication protocol that uses tickets to provide mutual authentication between clients and servers. CHAP is a challenge-response protocol that verifies the identity of a peer by using a shared secret. ONTAP supports Kerberos for NFS exports, which allows you to secure NFS traffic with encryption and integrity checking. ONTAP also supports CHAP for iSCSI LUN access, which prevents unauthorized access to iSCSI targets and initiators. References :- NFS security overview, iSCSI Security Configuration

 NetApp ONTAP Select is a software-only version of ONTAP that can run on commodity servers with direct-attached storage. It supports both block and file protocols, including NFS, NVMe, and CIFS. SCSI and FCP are not supported by ONTAP Select. References :- ONTAP Select overview, Client protocols, Software-Defined Storage with ONTAP Select