Virtualization Concepts and Security Considerations NDE Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A company's virtualization team is implementing a new host. Which practice best ensures the host is secure before deploying VMs?

   • AHarden the host OS, apply patches, and configure host-based firewalls
   • BUse default hypervisor settings for simplicity
   • CDisable the host's firewall to avoid interference with VMs
   • DDeploy VMs first and then apply security updates
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   What is the primary purpose of VM isolation in a virtualized environment?

   • ATo enable live migration of VMs between hosts without downtime
   • BTo ensure that a compromise or failure in one VM does not affect other VMs
   • CTo allow VMs to share memory and CPU resources more efficiently
   • DTo reduce the number of physical servers required in a data center
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A company uses network virtualization to connect VMs across multiple hosts. They want to prevent lateral movement between VM groups. What should they implement?

   • ADisable the virtual switch's security features
   • BVirtual network segmentation with distributed firewalls between groups
   • CUse only host-based firewalls on each VM
   • DA single flat virtual network for all VMs
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   A security analyst is investigating a suspected VM escape. The hypervisor logs show unusual CPU instructions from a guest VM, and the virtual network captured traffic from that VM to the hypervisor's management IP. The hypervisor vendor has released a critical patch. Which combination of actions should the analyst take first?

   • AImmediately delete the affected VM and restore from the last backup without further investigation.
   • BEnable promiscuous mode on the virtual switch to capture all traffic and then wait for the next scheduled maintenance window to patch.
   • CApply the patch to the VM's operating system and reboot the VM.
   • DIsolate the affected VM from the network, apply the hypervisor patch, and review the hypervisor's audit logs for other signs of compromise.
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   A security analyst notices unusual traffic from a VM to the hypervisor's management interface. The VM is not supposed to have any network path to the management network. Which threat is most likely?

   • AA VM escape attempt
   • BA guest-to-guest attack
   • CA misconfigured virtual network allowing unintended access to the management network
   • DA hypervisor denial-of-service attack
   Reveal Solution Discussion Select an answer first