IT Infrastructure Architecture Fundamentals

SHA is correct because it's a cryptographic hash function, which is the proper way to store passwords. Passwords should be hashed (one-way), not encrypted (two-way). AES, 3DES, and RSA are encryption algorithms that can be reversed with the right key, making them unsuitable for secure password storage. If a database is compromised, encrypted passwords can be decrypted.

Mirroring is correct because it writes identical data to two disks simultaneously, creating an exact copy for redundancy. Parity uses mathematical schemes across multiple disks, striping spreads data across disks without redundancy, and clustering refers to multiple servers working together, not disk-level redundancy.

Mirroring (RAID 1) is correct because it provides fault tolerance through disk duplication and maintains full performance on drive failure - the remaining disk continues serving requests at normal speed. Parity-based RAID (like RAID 5) suffers significant performance degradation during rebuild as it reconstructs data from parity information.

All of the above is correct because all four are valid password attack vectors. Eavesdropping captures passwords during transmission, replay attacks resyoken captured credentials, social engineering tricks users into revealing passwords, and Trojan horses can log keystrokes or steal stored passwords. Each represents a different attack surface.

NAS (Network Attached Storage) provides file-level access to clients over a network, allowing multiple users to share files. SAN provides block-level access, and direct disk or LBA access are not NAS characteristics.

HBA (Host Bus Adapter) connects the host computer's I/O bus (like PCI) to the Fibre Channel network, enabling communication with storage. Fibre cable and switches are network components, while storage array is the destination.

LUN masking controls which HBA can access specific storage LUNs (Logical Unit Numbers) at the storage array level, restricting access even when multiple HBAs are zoned to the same port. WWN zoning works at the switch level but doesn't restrict LUNs within the port.

DAS (Direct Attached Storage) refers to storage directly connected to a server, not networked. NAS and SAN are networked storage architectures, and SLS is not a standard storage term.

SHA is a cryptographic hash function suitable for password storage because it's one-way (prevents recovery). AES and 3DES are reversible encryption algorithms, and RSA is asymmetric encryption used for key exchange, not password hashing.

Mirroring (RAID 1) writes identical data to two disks simultaneously, providing redundancy through duplication. Striping spreads data across disks, parity calculates redundancy data, and clustering involves multiple servers.

Mirroring (RAID 1) provides fault tolerance by duplicating data on paired disks, allowing continued operation with no performance degradation when one drive fails. Striping has no fault tolerance, parity adds performance overhead during rebuild, and clustering is unrelated.

All listed techniques are valid password attack vectors. Eavesdropping captures passwords in transit, replay attacks reuse captured credentials, social engineering tricks users into revealing them, and trojans steal them from infected systems.

Tree topology organizes networks in a hierarchical structure with a root node and child nodes. Information flows from the root down through branches, creating clear levels of authority and data transmission paths.

DAS connects storage directly to a single computer or server. Its simplicity and cost-effectiveness make it ideal for small businesses with basic storage needs, while larger environments typically require networked storage solutions.

OTPs offer superior security by generating unique, single-use credentials that become invalid immediately after use. This prevents password reuse attacks and significantly reduces vulnerability to theft compared to static passwords.

Digital certificates must be installed on every device a user works with, creating deployment complexity. While resource-intensive, digital signatures are economically viable and reliable for secure authentication processes.

Star topology features a central hub that manages all network communications. Each device connects to this central node, which routes all information between connected devices, providing a single point of control.

Mesh topology provides superior redundancy by establishing multiple connection paths between nodes. If any single link or device fails, traffic can reroute through alternative pathways, maintaining continuous communication.

NAS primarily enables server consolidation through file-level data sharing across networks, while SAN focuses on storage consolidation using block-level protocols. NAS typically uses TCP/IP, whereas SAN employs Fibre Channel.

Password systems should never indicate whether a password is already in use, as this reveals account information to attackers. Best practice is to accept password reuse while maintaining password hashing for independent account security.