D-MSS-DS-23 practice question 7 of 15

Which Dell PowerStore supported media devices carry a FIPS Type D certification?

Full set: 85 questions
Answer options
A: SAS SCM, NVMe SSD, and NVRAM
B: SAS HDD, NVMe SSD, NVMe SCM, and SAS SSD
C: NVMe SCM, NVMe SSD, and SAS SSD
D: SAS SSD, NVMe SSD, NVMe SCM, and NVRAM Correct answer
Correct Answer:
D. SAS SSD, NVMe SSD, NVMe SCM, and NVRAM
Explanation

Dell PowerStore systems ensure data security through Data-at-Rest Encryption (D@RE), which utilizes FIPS 140-2 Level 2 certified Self-Encrypting Drives (SEDs). This certification applies to all persistent media within the appliance. This includes the primary data drives such as NVMe Solid State Drives (SSD), NVMe Storage Class Memory (SCM), and SAS SSDs. Crucially, it also includes the internal NVRAM modules, which are used for write caching and are also self-encrypting to protect data before it is destaged to persistent storage. Therefore, all listed components in this option are FIPS certified.

Why Incorrect

A. "SAS SCM" is not a standard media type available for Dell PowerStore systems; Storage Class Memory is implemented using the NVMe protocol.
B. This option incorrectly omits the NVRAM modules, which are integral, FIPS-certified components used for write caching in every PowerStore appliance.
C. This option is incomplete as it omits the NVRAM modules, which are essential, FIPS-certified components for protecting cached write data.

References

1. Dell PowerStore: Security Configuration Guide (PowerStoreOS 3.0), Page 13, Section: "Data-at-rest encryption". The document states, "PowerStore systems use FIPS 140-2 Level 2 certified Self-Encrypting Drives (SEDs) for data-at-rest encryption (D@RE). All drives in the system, including NVMe SSD, NVMe SCM, SAS SSD, and the NVRAM drives used for caching, are SEDs."

2. Dell PowerStore: Introduction to the Platform (White Paper), Page 12, Section: "Node". This document details the hardware components, explaining, "Each node contains two mirrored NVRAM modules that are used for caching write data... The NVRAM modules are self-encrypting drives..." This confirms NVRAM modules are core components and are also SEDs.

Scroll to Top