CAS-001 · Question #267
Virtual hosts with different security requirements should be:
The correct answer is B. stored on separate physical hosts. Virtual machines running on the same physical host share underlying hardware resources (CPU, memory, hypervisor). If VMs have different security classification levels (e.g., one handles PCI data, another is a general workstation), a vulnerability in the hypervisor or a VM…
Question
Virtual hosts with different security requirements should be:
Options
- Aencrypted with a one-time password.
- Bstored on separate physical hosts.
- Cmoved to the cloud.
- Dscanned for vulnerabilities regularly.
How the community answered
(38 responses)- A3% (1)
- B89% (34)
- C5% (2)
- D3% (1)
Explanation
Virtual machines running on the same physical host share underlying hardware resources (CPU, memory, hypervisor). If VMs have different security classification levels (e.g., one handles PCI data, another is a general workstation), a vulnerability in the hypervisor or a VM escape exploit could allow a compromised lower-security VM to affect a higher-security VM. Physical separation (separate physical hosts) eliminates this shared risk surface entirely and enforces true security domain isolation. Encryption (A) protects data in transit but not from hypervisor-level attacks. Cloud migration (C) doesn't resolve the co-tenancy security issue. Regular scanning (D) is good practice but doesn't address the architectural co-hosting risk.
Topics
Community Discussion
No community discussion yet for this question.