Virtualization and Cloud Computing Security ECSS Practice Questions (Page 9)

Questions 41–45

1. 41expert · hard

   A company uses a public cloud IaaS. They have a legacy application that requires a static IP address and cannot be modified to use cloud-native load balancing. They are experiencing a DDoS attack that saturates the network link. Which solution would most effectively mitigate the attack while keeping the application accessible?

   • AUse a cloud DDoS protection service that reroutes traffic through scrubbing centers.
   • BIncrease the instance size to handle more traffic.
   • CConfigure a firewall rule to block all traffic from the attacker's IP range.
   • DChange the static IP address to a new one.
   Reveal Solution Discussion Select an answer first
2. 42expert · hard

   An administrator manages a virtualized environment with a mix of production and development VMs on the same hypervisor. To reduce risk, they want to isolate the development environment from production. Which approach provides the strongest isolation while maintaining manageability?

   • AUse role-based access control (RBAC) to restrict who can access development VMs.
   • BEnable snapshots on development VMs to allow rollback.
   • CUse separate hypervisor hosts for development and production.
   • DPlace development and production VMs on separate virtual switches and VLANs.
   Reveal Solution Discussion Select an answer first
4. 43foundation · easy

   What is a key characteristic of a Type 1 hypervisor?

   • AIt runs directly on the physical hardware without a host operating system.
   • BIt is primarily used for client-side desktop virtualization.
   • CIt requires a separate management virtual machine to function.
   • DIt runs on top of an existing operating system, such as Windows or Linux.
   Reveal Solution Discussion Select an answer first
5. 44application · medium

   An organization runs a Type 1 hypervisor with VMs in different trust zones. The security team wants to reduce the risk of a compromised VM attacking the hypervisor or other VMs. Which control is most effective?

   • ADisable snapshots on all VMs
   • BEnable hypervisor-enforced isolation and use separate virtual switches for each trust zone
   • CInstall a guest OS firewall on each VM
   • DUse a Type 2 hypervisor for better isolation
   Reveal Solution Discussion Select an answer first
6. 45application · medium

   A company wants to use a cloud service to develop and deploy a custom application without managing the underlying servers or runtime environment. They only want to focus on writing code and managing data. Which cloud service model best fits this requirement?

   • APlatform as a Service (PaaS)
   • BFunction as a Service (FaaS)
   • CInfrastructure as a Service (IaaS)
   • DSoftware as a Service (SaaS)
   Reveal Solution Discussion Select an answer first