Virtualization Concepts and Security Considerations NDE Practice Questions (Page 9)

Questions 41–45

1. 41foundation · easy

   Which security control is essential for monitoring and controlling traffic between virtual machines in a virtual network?

   • AData loss prevention on the storage array
   • BIntrusion detection on the physical network
   • CAntivirus software on the host
   • DVirtual firewall
   Reveal Solution Discussion Select an answer first
2. 42expert · hard

   A company's hypervisor is managed by a third-party vendor. The vendor has remote administrative access to the hypervisor for support. The security team is concerned about the risk of unauthorized changes. Which control would most effectively reduce this risk while maintaining vendor support?

   • AAllow the vendor to access the hypervisor through a VPN without any additional controls.
   • BDisable all remote access to the hypervisor and require the vendor to be on-site for every issue.
   • CProvide the vendor with the same administrative credentials used by internal staff.
   • DRequire the vendor to use a dedicated, time-limited, and audited administrative account that is enabled only during support sessions.
   Reveal Solution Discussion Select an answer first
4. 43expert · hard

   A virtual network uses a distributed virtual switch. The security team wants to detect and prevent ARP spoofing between VMs. Which feature should they enable?

   • AVLAN tagging on all ports
   • BJumbo frames on the virtual switch
   • CDisable the virtual switch's MAC learning
   • DPort security with MAC address binding and ARP inspection
   Reveal Solution Discussion Select an answer first
5. 44application · medium

   A company is considering moving from physical servers to a virtualized environment. The security team is evaluating the risk of a hypervisor compromise. Which characteristic of virtualization most directly affects this risk?

   • APhysical servers are immune to software vulnerabilities.
   • BVirtual machines are always isolated from each other regardless of configuration.
   • CVirtualization eliminates the need for patching the host operating system.
   • DThe hypervisor is a software layer that, if compromised, can affect all VMs running on the host.
   Reveal Solution Discussion Select an answer first
6. 45application · medium

   A VM in a production environment was compromised. The incident response team wants to prevent similar compromises in other VMs. Which action is most effective?

   • AIncrease the number of snapshots for each VM
   • BMove all VMs to a single VLAN for easier management
   • CDisable the hypervisor's logging to improve performance
   • DApply the latest security patches to all VMs and enforce a patch management policy
   Reveal Solution Discussion Select an answer first