Virtualization and Cloud Computing Security ECSS Practice Questions (Page 10)

Questions 46–50

1. 46foundation · easy

   Which statement best defines virtualization in the context of cloud computing?

   • AA security technique that encrypts all data stored on physical disks to prevent unauthorized access.
   • BA technique that creates a simulated, software-based version of a physical resource, such as a server, storage device, or network.
   • CA process of moving an application from an on-premises data center to a public cloud provider.
   • DA method of physically partitioning a single server into multiple isolated hardware units, each with dedicated CPUs and memory.
   Reveal Solution Discussion Select an answer first
2. 47foundation · easy

   Which practice is a recommended best practice for securing a virtualized environment?

   • ADisabling unnecessary services and applying security patches to the hypervisor.
   • BUsing the same administrative credentials for all hypervisors to simplify management.
   • CPlacing all VMs on the same virtual network to simplify communication.
   • DKeeping VM snapshots indefinitely to ensure quick recovery.
   Reveal Solution Discussion Select an answer first
4. 48expert · hard

   A company uses a multi-cloud strategy with workloads in two different public cloud providers. They need to implement a unified identity management system to control access across both clouds. Which approach is most effective?

   • ACreate a VPN between the two clouds and use Active Directory.
   • BImplement a single sign-on (SSO) solution using SAML 2.0 or OIDC with a central identity provider (IdP).
   • CUse the same password for both cloud accounts.
   • DUse separate identity systems in each cloud and manually sync users.
   Reveal Solution Discussion Select an answer first
5. 49expert · hard

   A multinational company must comply with data residency regulations that require customer data to stay within the EU. They also need to use a cloud service that allows them to manage the OS and applications. Which deployment and service model combination best meets these requirements?

   • APrivate cloud SaaS hosted in the EU
   • BPublic cloud IaaS with a region located in the EU
   • CHybrid cloud PaaS with data stored in the US
   • DCommunity cloud IaaS with no regional guarantee
   Reveal Solution Discussion Select an answer first
6. 50application · medium

   An administrator needs to migrate a VM from one physical host to another without downtime. The migration traffic will traverse a shared network segment. Which practice is most important to prevent an attacker from intercepting or tampering with the migration?

   • AEncrypt the migration traffic and use a dedicated, isolated network for vMotion/live migration.
   • BTake a snapshot of the VM before migration and delete it after.
   • CShut down the VM before migration to avoid data changes.
   • DUse a Type 2 hypervisor on the destination host to simplify migration.
   Reveal Solution Discussion Select an answer first