A VM running a legacy application cannot be patched because the vendor no longer supports it. The VM is critical to operations. Which approach best reduces the risk of this unpatched VM being compromised?

Disable the VM's network adapter entirely to prevent all communication.

Copy the VM to a different hypervisor and run it there without changes.

Place the VM on an isolated virtual network with strict firewall rules that only allow necessary traffic, and monitor it closely.

Increase the VM's CPU and memory resources to improve performance.

A company runs a Type 1 hypervisor on a dedicated host. The security team wants to reduce the attack surface of the hypervisor management plane. Which action best achieves this?

Assign each virtual machine a public IP address for easier remote management

Install the latest antivirus software on the hypervisor host

Enable hypervisor management over an out-of-band network and restrict administrative access to a jump host

Disable all virtual machine snapshots to improve performance

A VM is suspected of being compromised. The security team wants to preserve evidence while also maintaining business continuity. The VM hosts a critical application that cannot be offline for long. Which approach best balances forensic preservation and availability?

Immediately shut down the VM and keep it offline for forensic analysis.

Take a snapshot of the VM's memory and disk, then isolate the VM from the network while a forensic copy is made, and bring up a clean clone for continued service.

Delete the VM and restore from the last backup without analysis.

Continue running the VM without any changes and collect live logs only.

Which practice is most effective in reducing the attack surface of a hypervisor?

Connecting the hypervisor management interface directly to the internet for remote access

Disabling unused services and features on the hypervisor

Enabling all available hypervisor features by default

Using a single shared management account for all administrators

Why is it important to regularly patch virtual machines, just like physical servers?

To protect against known vulnerabilities in the guest operating system and applications

To ensure the VMs remain compatible with the hypervisor

To enable the VM to use more physical resources

To improve the performance of the hypervisor

EC-CouncilNetwork Defense Essentials

Domain 4Objective 1

Virtualization Concepts and Security Considerations NDE Practice Questions (Page 7)

Part of the Virtualization and Cloud Computing Security domain, which makes up ~12% of our current practice bank.

50questions here

10free pages

7concepts

Questions 31–35

31application · medium
A VM running a legacy application cannot be patched because the vendor no longer supports it. The VM is critical to operations. Which approach best reduces the risk of this unpatched VM being compromised?
Select an answer first
32application · medium
A company runs a Type 1 hypervisor on a dedicated host. The security team wants to reduce the attack surface of the hypervisor management plane. Which action best achieves this?
Select an answer first
33expert · hard
A VM is suspected of being compromised. The security team wants to preserve evidence while also maintaining business continuity. The VM hosts a critical application that cannot be offline for long. Which approach best balances forensic preservation and availability?
Select an answer first
34foundation · easy
Which practice is most effective in reducing the attack surface of a hypervisor?
Select an answer first
35foundation · easy
Why is it important to regularly patch virtual machines, just like physical servers?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NDE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “NDE” is a trademark of its owner, used for identification only.