Virtualization Concepts and Security Considerations NDE Practice Questions (Page 6)

Questions 26–30

1. 26expert · hard

   A security analyst notices that a VM is sending ARP replies claiming to be the default gateway. The hypervisor logs show that the VM's virtual NIC is in promiscuous mode. The analyst suspects a guest-to-guest attack. Which immediate action is most appropriate?

   • AChange the VM's IP address to a different subnet.
   • BEnable MAC spoofing protection on the virtual switch.
   • CDisable promiscuous mode on the VM's virtual NIC and isolate the VM from the virtual network for investigation.
   • DReboot the hypervisor to clear the ARP cache.
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   Which of the following is a recommended best practice for securing a virtualized infrastructure?

   • ADisable logging on virtual switches to improve performance
   • BAllow direct internet access to the hypervisor management interface for convenience
   • CApply security patches to the hypervisor and VMs on a regular schedule
   • DUse the same administrative credentials for the hypervisor and all VMs
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A virtual network uses a virtual switch that supports VLAN tagging. The security team wants to prevent a VM from sniffing traffic from other VMs on the same physical host. Which configuration is most effective?

   • AAssign all VMs to the same VLAN to simplify management.
   • BUse MAC address filtering on the virtual switch to allow only known MAC addresses.
   • CEnable promiscuous mode on the virtual switch to allow the security team to monitor all traffic.
   • DDisable promiscuous mode on the virtual switch and ensure that each VM's virtual NIC is assigned to the correct VLAN.
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   An organization uses a virtualization platform to host multiple VMs. The security policy requires that VMs be hardened before deployment. Which practice is most effective?

   • ADeploy VMs from a hardened golden image and apply configuration baselines
   • BInstall all available updates after the VM is in production
   • CDisable the VM's firewall to improve performance
   • DUse the same administrator password for all VMs for simplicity
   Reveal Solution Discussion Select an answer first
6. 30foundation · easy

   What is the primary security benefit of network segmentation in a virtualized environment?

   • AIt limits the blast radius of a compromised VM by restricting lateral movement
   • BIt eliminates the need for firewalls within the virtual network
   • CIt increases the speed of network communication between VMs
   • DIt allows all VMs to communicate freely without restrictions
   Reveal Solution Discussion Select an answer first