Build and Implement Physical and Logical Infrastructure for Cloud Environment CCSP Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   In a virtualized environment, which security control is specifically designed to prevent a guest operating system from accessing memory regions allocated to the hypervisor or other guest VMs?

   • AMemory overcommitment
   • BMemory isolation
   • CMemory ballooning
   • DMemory deduplication
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Which of the following is a common feature provided by guest OS virtualization toolsets?

   • AA separate firewall that blocks all inbound traffic to the VM
   • BAutomatic encryption of all guest OS network traffic
   • CHypervisor-specific drivers for network and storage devices
   • DReplacement of the guest OS kernel with a hypervisor-optimized kernel
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   Which of the following is a primary security concern when a cloud provider uses CPU overcommitment on a physical host?

   • AA VM could consume more CPU time than allocated
   • BA VM could infer activity patterns of other VMs through timing side channels
   • CA VM could read another VM's memory directly
   • DA VM could access another VM's CPU cache data
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   Which of the following best describes the purpose of the management plane in a cloud environment?

   • AIt is the network layer that connects virtual machines to the internet.
   • BIt secures the physical data center facilities, including access controls and surveillance.
   • CIt handles the actual processing of user workloads and stores data in the cloud.
   • DIt provides the interface and APIs used by administrators to configure and control cloud resources.
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   Why is it important to keep guest OS virtualization tools updated after initial installation?

   • ATo enable the guest OS to boot without a valid license
   • BTo automatically apply security patches to applications running inside the guest OS
   • CTo allow the VM to migrate between different hypervisor vendors seamlessly
   • DTo ensure compatibility with new hypervisor features and to address security vulnerabilities in the tools themselves
   Reveal Solution Discussion Select an answer first