7.5 - Operate and Maintain Secure Virtual Environments SSCP Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which practice is a security best practice for container images?

   • AUsing the latest tag for all images to ensure you always get the newest version.
   • BRunning containers with root privileges to ensure they have full access to host resources.
   • CScanning images for known vulnerabilities before deployment.
   • DStoring images in a public registry to benefit from community review.
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   A security team is threat hunting in a virtualized environment. They want to detect a brute-force attack against a VM's SSH service. Which data source and analysis technique would be most effective?

   • ACheck the VM's network traffic for large data transfers
   • BAnalyze VM authentication logs for multiple failed login attempts from the same source IP
   • CReview the VM's file system for new files
   • DMonitor the VM's CPU usage for spikes
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   What is a virtual machine escape attack?

   • AAn attack where an attacker gains access to the hypervisor or host OS from within a compromised VM.
   • BAn attack that exploits a weak password on the VM's management console.
   • CAn attack that floods the VM's network interface with traffic to cause a denial of service.
   • DAn attack that steals credentials by intercepting keyboard input within the VM.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   In container security, what is the primary role of a container registry?

   • ATo store and distribute container images, allowing them to be pulled for deployment.
   • BTo provide runtime isolation between containers on the same host.
   • CTo manage the lifecycle of running containers, including starting and stopping them.
   • DTo encrypt all network traffic between containers and external services.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which mechanism is commonly used to automatically restart a virtual machine on another host if the original host fails?

   • AFailover clustering or high-availability features provided by the hypervisor.
   • BA scheduled task that creates a snapshot every hour.
   • CA storage pool that replicates data to a secondary site.
   • DA virtual appliance that monitors network traffic and blocks malicious packets.
   Reveal Solution Discussion Select an answer first