Virtualization Concepts and Security Considerations NDE Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   An organization uses desktop virtualization to provide remote workers with access to internal applications. The security team wants to prevent data leakage from the virtual desktops to users' personal devices. Which control is most effective?

   • AUse strong passwords for the virtual desktop accounts.
   • BConfigure policies to disable clipboard redirection, drive redirection, and print redirection from the virtual desktop to the local device.
   • CEnable screen recording on the virtual desktop to monitor user activity.
   • DRequire users to connect through a VPN from their personal devices.
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   What is the primary role of a hypervisor in a virtualized environment?

   • ATo provide a user interface for managing virtual machines
   • BTo allocate and manage physical resources among multiple virtual machines
   • CTo secure the virtual machines from external network attacks
   • DTo replace the operating system of the host machine
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A small business wants to run multiple isolated applications on a single physical server without the overhead of full operating systems for each. They need each application to have its own runtime and dependencies. Which virtualization approach is most appropriate?

   • AUse desktop virtualization to provide each user with a virtual desktop.
   • BUse storage virtualization to create separate storage volumes for each application.
   • CUse server virtualization with a hypervisor and a separate VM for each application.
   • DUse application virtualization, such as containers, to package each application with its dependencies and run them on a shared host OS.
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A company runs a Type 1 hypervisor on a dedicated host. The security team is concerned about the management interface being exposed to the network. Which action best reduces the attack surface of the hypervisor management plane?

   • AAssign the management interface the same IP subnet as the production VMs to simplify firewall rules.
   • BDisable the hypervisor's management interface entirely and rely on the virtual machines' built-in remote management tools.
   • CEnable promiscuous mode on the virtual switch so that the management traffic can be monitored by the security team.
   • DPlace the management interface on a separate isolated management VLAN with strict firewall rules and enable multi-factor authentication for administrative access.
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A virtual network has multiple VMs that need to communicate with each other but should not be accessible from the physical network. Which configuration achieves this?

   • AUse a virtual network that is connected to the internet but rely on host-based firewalls.
   • BConnect the virtual network to a physical switch port without any firewall rules.
   • CCreate an internal virtual network that is not connected to any physical network adapter.
   • DAssign public IP addresses to the VMs and use network address translation.
   Reveal Solution Discussion Select an answer first