Virtualization Concepts and Security Considerations NDE Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   A security team is evaluating the risk of guest-to-guest attacks in a multi-tenant virtualization environment. Which control is most effective at mitigating this risk?

   • AEnable network segmentation and micro-segmentation between guest VMs
   • BUse the same virtual switch for all guests to simplify management
   • CDisable the hypervisor's memory isolation features
   • DRely solely on host-based firewalls on each guest
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   In a guest-to-guest attack, what is the primary target?

   • AThe host operating system's kernel
   • BThe hypervisor's management interface
   • CThe physical server's BIOS
   • DAnother virtual machine running on the same host
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which type of virtualization abstracts the underlying physical network hardware and provides logical network segments, virtual switches, and virtual firewalls?

   • AStorage virtualization
   • BNetwork virtualization
   • CApplication virtualization
   • DDesktop virtualization
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A security analyst suspects a VM escape attempt on a hypervisor. Which combination of indicators would most strongly support this suspicion?

   • AMultiple failed login attempts to the VM's console
   • BA VM process spawning a process on the host OS and unusual network traffic from the host
   • CA VM snapshot failing to complete
   • DHigh CPU usage inside the VM and slow disk I/O
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A company's virtual network uses a distributed virtual switch. The security team wants to monitor traffic between VMs on the same host for signs of lateral movement. Which approach is most effective?

   • APlace a physical tap on the uplink to the physical switch.
   • BInstall a host-based firewall on each VM and rely on its logs.
   • CEnable port mirroring on the virtual switch to send a copy of VM-to-VM traffic to a network monitoring appliance.
   • DDisable the virtual switch's monitoring features to improve performance.
   Reveal Solution Discussion Select an answer first