Virtualization Concepts and Security Considerations NDE Practice Questions (Page 4)

Questions 16–20

1. 16expert · hard

   During a routine audit, a security team discovers that a VM has been running with a virtual TPM (vTPM) enabled, but the hypervisor's firmware has not been updated in over a year. The team also finds that the VM's snapshots are stored on the same datastore as the hypervisor's configuration files. Which risk is most directly increased by this combination?

   • AAn attacker who compromises the hypervisor could access the vTPM secrets and snapshot files, potentially extracting sensitive data or forging attestation.
   • BThe snapshots will be corrupted because the vTPM changes the disk format.
   • CThe VM will be unable to boot because the vTPM is incompatible with the hypervisor.
   • DThe vTPM will automatically fail and cause the VM to crash.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A company hosts multiple web servers and a database server on virtual machines connected to the same virtual switch. After a web server is compromised, the attacker is able to scan and reach the database server directly. Which change would best prevent this lateral movement?

   • AInstall a host-based intrusion detection system on the database server.
   • BPlace the web servers and the database server on separate virtual networks and use a virtual firewall to allow only the required traffic between them.
   • CMove the database server to a different physical host without changing the virtual network configuration.
   • DEnable MAC address spoofing protection on the virtual switch.
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A VM was compromised due to an unpatched vulnerability. The security team wants to prevent similar compromises in other VMs. Which action is most effective?

   • AImplement a patch management process for all VMs
   • BIncrease VM memory to improve performance
   • CUse the same administrator credentials for all VMs
   • DDisable VM logging to reduce overhead
   Reveal Solution Discussion Select an answer first
5. 19expert · hard

   A security architect is designing a hypervisor security policy. The requirement is to protect the hypervisor from compromised VMs while maintaining high availability. Which combination of controls is most effective?

   • ADisable hypervisor patching to avoid downtime
   • BDisable unnecessary hypervisor services, apply patches promptly, and use dedicated management network
   • CEnable all hypervisor features to maximize functionality
   • DUse the same network for VM traffic and management traffic
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   An organization's virtualization team wants to enforce least privilege for hypervisor administrators. Which approach is most aligned with this principle?

   • AAssign role-based access control (RBAC) with the minimum permissions needed for each admin role
   • BGive all administrators full hypervisor access for operational flexibility
   • CShare a single administrative account among the team
   • DGrant administrative access only during business hours
   Reveal Solution Discussion Select an answer first