Virtualization and Cloud Computing Security ECSS Practice Questions (Page 4)

Questions 16–20

1. 16expert · hard

   A company is evaluating whether to use a private cloud or a public cloud for a new application. The application has unpredictable traffic spikes and requires rapid scaling. The company also has strict data sovereignty requirements. Which approach best balances these needs?

   • AUse a hybrid cloud: run the application in a public cloud for scaling and keep sensitive data in a private cloud
   • BUse a private cloud only, and over-provision to handle spikes
   • CUse a community cloud shared with other organizations
   • DUse a public cloud only, and rely on the provider's data residency options
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A security team is investigating a suspected VM escape. Which evidence would most strongly indicate that a VM escape has occurred?

   • AThe VM's guest OS shows high CPU usage.
   • BA process running inside the guest VM is able to read the host's memory.
   • CThe VM's network traffic increases significantly.
   • DThe hypervisor logs show a failed login attempt.
   Reveal Solution Discussion Select an answer first
4. 18expert · hard

   A company is moving its customer relationship management (CRM) system to a public cloud SaaS. They are concerned about data breaches due to insecure APIs. Which control is most important to mitigate this risk?

   • ARegularly back up the CRM data.
   • BEncrypt all data stored in the SaaS application.
   • CUse a VPN to connect to the SaaS provider.
   • DEnsure the SaaS provider has strong API authentication and authorization mechanisms.
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A small business runs a Type 2 hypervisor on a Windows workstation for testing. The security team is concerned about the host OS being compromised. Which mitigation is most appropriate?

   • AMove to a Type 1 hypervisor to eliminate all host OS risks
   • BHarden the host OS and restrict access to the hypervisor management interface
   • CDisable the host firewall to improve performance
   • DStore all VM files on the host's system drive
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   Which scenario best illustrates the use of a Type 2 hypervisor?

   • AA cloud provider uses KVM to virtualize its physical servers in a data center.
   • BA developer runs a Linux VM on a Windows 10 laptop using Oracle VirtualBox.
   • CA company uses a hypervisor to partition a mainframe into logical partitions (LPARs).
   • DA data center administrator installs VMware ESXi on a physical server to host multiple production VMs.
   Reveal Solution Discussion Select an answer first