This was the correct place for the thread to be, it was a technology question rather than being specifically about the VCAP exams. I did think at the time you were probably asking from a purely knowledge perspective.
I would suggest that a more common practice is control all access/masking at the storage rather than the host, but yes it can be useful to know (from a real-life or exam perspective) how to mask at the host.