CAS-001 · Question #411
A security manager is concerned about performance and patch management, and, as a result, wants to implement a virtualization strategy to avoid potential future OS vulnerabilities in the host…
The correct answer is B. Type 1 hypervisor E. Bare metal hypervisor with a software stack of two layers. Both correct answers describe the same architectural concept from two different angles. A Type 1 hypervisor (B) runs directly on the physical hardware without requiring a host operating system underneath it-this eliminates an entire OS layer that could introduce vulnerabilities…
Question
A security manager is concerned about performance and patch management, and, as a result, wants to implement a virtualization strategy to avoid potential future OS vulnerabilities in the host system. The IT manager wants a strategy that would provide the hypervisor with direct communications with the underlying physical hardware allowing the hardware resources to be paravirtualized and delivered to the guest machines. Which of the following recommendations from the server administrator BEST meets the IT and security managers' requirements? (Select TWO).
Options
- ANested virtualized hypervisors
- BType 1 hypervisor
- CHosted hypervisor with a three layer software stack
- DType 2 hypervisor
- EBare metal hypervisor with a software stack of two layers
How the community answered
(24 responses)- A4% (1)
- B79% (19)
- C13% (3)
- D4% (1)
Explanation
Both correct answers describe the same architectural concept from two different angles. A Type 1 hypervisor (B) runs directly on the physical hardware without requiring a host operating system underneath it-this eliminates an entire OS layer that could introduce vulnerabilities requiring patching. A bare metal hypervisor with a two-layer software stack (E) describes the same thing: layer 1 is the hardware, layer 2 is the hypervisor itself, with no host OS in between. This architecture allows the hypervisor to communicate directly with the physical hardware and paravirtualize those resources for guest VMs. In contrast, a Type 2 (hosted) hypervisor (D) and a hosted hypervisor with a three-layer stack (C) both require a full host OS, which introduces the very OS vulnerability surface the security manager wants to eliminate. Nested virtualized hypervisors (A) add complexity and performance overhead.
Topics
Community Discussion
No community discussion yet for this question.