Which of the following is the MOST effective way to secure the physical hardware hosts in a virtualized environment?

Question

Options

• AApply existing information security controls
• BApply virtualized controls to the physical host
• CSecure the virtualized platform
• DSecure the virtualized workload

• A
  16% (5)
• B
  71% (22)
• C
  3% (1)
• D
  10% (3)

Explanation

Applying virtualized controls to the physical host (B) is most effective because physical hosts in virtualized environments face threats unique to hypervisor architectures - such as VM escape attacks and hypervisor exploitation - that generic controls are not designed to address. Standard virtualization-aware controls applied at the physical layer protect all VMs simultaneously, since a compromised host compromises every workload running on it.

Why the distractors are wrong:

• A - Existing information security controls were designed for traditional environments and lack visibility into hypervisor-specific attack surfaces, leaving virtualization-specific threats unmitigated.
• C - Securing the virtualized platform (the hypervisor/software layer) does not directly protect the underlying physical hardware from physical or firmware-level attacks.
• D - Securing the virtualized workload (the VMs themselves) protects individual guest machines but leaves the host - and by extension every VM on it - exposed.

Memory tip: Think of the physical host as the foundation of a skyscraper. Reinforcing individual floors (D) or the building's internal systems (C) matters, but if the foundation (physical host) fails using the right tools for that foundation (virtualized controls = B), everything collapses. The type of control must match the layer being protected.

No community discussion yet for this question.