Virtualization Concepts and Security Considerations NDE Practice Questions (Page 8)

Questions 36–40

1. 36application · medium

   A VM is used for testing untrusted software. The security team wants to ensure that a compromise of the test VM does not affect other VMs on the same host. Which configuration is most important?

   • AUse the same virtual switch as production VMs for convenience
   • BGive the test VM more memory and CPU
   • CIsolate the test VM on a separate virtual network and disable unnecessary host services
   • DEnable folder sharing between the test VM and the host
   Reveal Solution Discussion Select an answer first
2. 37expert · hard

   A virtualized environment has a single hypervisor hosting VMs for different departments. The security team wants to enforce least privilege for VM administrators. Currently, all administrators have full access to all VMs. Which approach best balances security and operational needs?

   • ADisable all administrative access to VMs and require physical access to the hypervisor host for any changes.
   • BGive each administrator a separate account but keep the same full permissions to avoid disrupting workflows.
   • CCreate role-based access control (RBAC) roles that grant administrators permissions only to the VMs and functions required for their job, and review these roles quarterly.
   • DUse a shared administrative account for all VM administration to simplify management.
   Reveal Solution Discussion Select an answer first
4. 38application · medium

   A security administrator is hardening a hypervisor. The administrator wants to ensure that only authorized personnel can manage the hypervisor and that all management actions are recorded. Which combination of controls is most effective?

   • AAllow all administrators to use a shared account to simplify access management.
   • BEnable centralized logging of all administrative actions and require multi-factor authentication for the management interface.
   • CExpose the management interface to the internet for remote administration convenience.
   • DDisable logging to reduce storage overhead and rely on physical security of the host.
   Reveal Solution Discussion Select an answer first
5. 39application · medium

   A company needs to run a legacy application that is incompatible with the current OS on physical servers. They want to minimize the number of physical servers. Which virtualization approach is most suitable?

   • AApplication virtualization to run the legacy app on the current OS
   • BStorage virtualization to abstract the legacy app's storage
   • CServer virtualization to run multiple legacy OS instances on one physical host
   • DDesktop virtualization to provide the legacy app to users
   Reveal Solution Discussion Select an answer first
6. 40application · medium

   A company wants to provide each employee with a consistent, centrally managed desktop environment that can run on any device. Which type of virtualization best meets this need?

   • AServer virtualization
   • BApplication virtualization
   • CStorage virtualization
   • DDesktop virtualization (VDI)
   Reveal Solution Discussion Select an answer first