nerdexam
CompTIA

CAS-001 · Question #267

Virtual hosts with different security requirements should be:

The correct answer is B. stored on separate physical hosts. Virtual machines running on the same physical host share underlying hardware resources (CPU, memory, hypervisor). If VMs have different security classification levels (e.g., one handles PCI data, another is a general workstation), a vulnerability in the hypervisor or a VM…

Technical Integration of Enterprise Components

Question

Virtual hosts with different security requirements should be:

Options

  • Aencrypted with a one-time password.
  • Bstored on separate physical hosts.
  • Cmoved to the cloud.
  • Dscanned for vulnerabilities regularly.

How the community answered

(38 responses)
  • A
    3% (1)
  • B
    89% (34)
  • C
    5% (2)
  • D
    3% (1)

Explanation

Virtual machines running on the same physical host share underlying hardware resources (CPU, memory, hypervisor). If VMs have different security classification levels (e.g., one handles PCI data, another is a general workstation), a vulnerability in the hypervisor or a VM escape exploit could allow a compromised lower-security VM to affect a higher-security VM. Physical separation (separate physical hosts) eliminates this shared risk surface entirely and enforces true security domain isolation. Encryption (A) protects data in transit but not from hypervisor-level attacks. Cloud migration (C) doesn't resolve the co-tenancy security issue. Regular scanning (D) is good practice but doesn't address the architectural co-hosting risk.

Topics

#virtualization#security isolation#physical separation#multi-tenancy

Community Discussion

No community discussion yet for this question.

Full CAS-001 Practice