An administrator manages a virtualization host with several production VMs. To minimize the risk of a compromised VM affecting other VMs, which configuration is most appropriate?

Use a single large VM for all applications to reduce the number of VMs.

Disable the hypervisor's firewall to improve performance.

Enable memory overcommitment to maximize VM density.

Place VMs with different security levels on separate virtual switches and VLANs.

A company uses a public cloud PaaS to host a web application. They need to ensure that only authorized users can access the application and that all access is logged. Which combination of controls should they implement?

Encrypt all data at rest and in transit

Enable multi-factor authentication for administrators only

Implement identity and access management (IAM) with role-based access control and enable detailed audit logging

Use a Web Application Firewall (WAF) and DDoS protection

In the shared responsibility model for IaaS, which security aspect is typically the responsibility of the cloud customer?

Physical security of the data center

Securing the guest operating system and applications

Network infrastructure security

EC-CouncilCertified Security Specialist

Domain 2Objective 1

Virtualization and Cloud Computing Security ECSS Practice Questions (Page 7)

Part of the Network Defense Systems and Monitoring domain, which makes up ~14% of our current practice bank.

50questions here

10free pages

8concepts

Questions 31–35

31application · medium
A security analyst is reviewing logs from a Type 1 hypervisor and sees an unusual process attempting to access the hypervisor's management interface from a VM. Which attack is this most likely indicating?
Select an answer first
32application · medium
An administrator manages a virtualization host with several production VMs. To minimize the risk of a compromised VM affecting other VMs, which configuration is most appropriate?
Select an answer first
33foundation · easy
Which security risk is specific to virtualization and involves an attacker breaking out of a virtual machine to access the host system or other VMs?
Select an answer first
34expert · hard
A company uses a public cloud PaaS to host a web application. They need to ensure that only authorized users can access the application and that all access is logged. Which combination of controls should they implement?
Select an answer first
35foundation · easy
In the shared responsibility model for IaaS, which security aspect is typically the responsibility of the cloud customer?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ECSS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ECSS” is a trademark of its owner, used for identification only.

Virtualization and Cloud Computing Security ECSS Practice Questions (Page 7)

Questions 31–35

A security analyst is reviewing logs from a Type 1 hypervisor and sees an unusual process attempting to access the hypervisor's management interface from a VM. Which attack is this most likely indicating?

An administrator manages a virtualization host with several production VMs. To minimize the risk of a compromised VM affecting other VMs, which configuration is most appropriate?

Which security risk is specific to virtualization and involves an attacker breaking out of a virtual machine to access the host system or other VMs?

A company uses a public cloud PaaS to host a web application. They need to ensure that only authorized users can access the application and that all access is logged. Which combination of controls should they implement?

In the shared responsibility model for IaaS, which security aspect is typically the responsibility of the cloud customer?

Keep studying — Network Defense Systems and Monitoring