7.5 - Operate and Maintain Secure Virtual Environments SSCP Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A small development team uses laptops with VMware Workstation to run Linux VMs for coding and testing. The security team is concerned about the risk of VM escape and wants to reduce the attack surface. Which action best addresses the security concern while maintaining the team's workflow?

   • ADisable the host firewall on the laptops
   • BEnable nested virtualization on the laptops
   • CUse snapshots before every test run
   • DMove the VMs to a Type 1 hypervisor on dedicated hardware
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   What is the primary purpose of a virtual machine snapshot?

   • ATo replace the need for regular backups by providing a permanent copy of the VM.
   • BTo increase the VM's performance by caching frequently accessed data.
   • CTo migrate the VM to a different host without downtime.
   • DTo capture the VM's state at a point in time, allowing you to revert to that state if needed.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   Which attack vector is specifically aimed at guessing or cracking login credentials to gain unauthorized access to a virtual machine?

   • ADenial-of-service attack
   • BBrute-force attack
   • CVM escape
   • DMan-in-the-middle attack
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A company runs containerized microservices in a Kubernetes cluster. The security team wants to reduce the risk of container breakout and unauthorized access. Which combination of measures is most effective?

   • ARun containers as non-root, enable seccomp, and use network policies
   • BDisable seccomp and AppArmor to improve compatibility
   • CStore secrets in environment variables for easy access
   • DUse privileged containers and host networking for performance
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A security team is implementing threat hunting in a containerized environment. Which data source is most valuable for detecting container breakout attempts?

   • AContainer image build history
   • BKubernetes dashboard access logs
   • CContainer image registry metadata
   • DContainer runtime audit logs (e.g., syscall logs)
   Reveal Solution Discussion Select an answer first