Virtualization and Cloud Computing Security ECSS Practice Questions (Page 6)

Questions 26–30

1. 26expert · hard

   A security administrator is investigating a potential hypervisor compromise. The hypervisor is Type 1 and has been in production for three years. The administrator finds that the hypervisor's management interface is exposed to the corporate network and that the hypervisor has not been patched in over a year. Which of the following is the most likely initial attack vector?

   • AAn attacker accessing the exposed management interface and exploiting an unpatched vulnerability.
   • BA physical attacker gaining console access to the host.
   • CA compromised VM using VM escape to attack the hypervisor.
   • DA guest VM exploiting a hypervisor vulnerability to gain host access.
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   Why is it important to isolate VMs from each other in a virtualized environment?

   • ATo reduce the number of IP addresses required for the VMs.
   • BTo prevent a compromised VM from affecting other VMs on the same host.
   • CTo simplify the process of creating snapshots.
   • DTo improve the performance of each VM by dedicating more CPU resources.
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A company wants to reduce hardware costs by running multiple isolated operating systems on a single physical server. Which virtualization type directly achieves this?

   • ANetwork virtualization
   • BStorage virtualization
   • CServer virtualization
   • DDesktop virtualization
   Reveal Solution Discussion Select an answer first
5. 29expert · hard

   A company uses a SaaS CRM. They are concerned about data breaches and want to ensure that their data is protected. According to the shared responsibility model, which responsibility belongs to the customer?

   • AManaging user access and authentication policies
   • BConfiguring the underlying network firewalls
   • CSecuring the physical data center
   • DPatching the CRM application servers
   Reveal Solution Discussion Select an answer first
6. 30expert · hard

   A company runs a Type 1 hypervisor with VMs in production. They need to apply a critical security patch to the hypervisor, but the patch requires a reboot. The VMs are running a 24/7 service. Which approach best balances security and availability?

   • AApply the patch without rebooting
   • BLive-migrate VMs to another host, apply the patch, and reboot the original host
   • CSkip the patch until the next maintenance window
   • DShut down all VMs, apply the patch, and restart them
   Reveal Solution Discussion Select an answer first