nerdexam
CompTIA

CAS-001 · Question #515

The security administrator is reviewing the business continuity plan which consists of virtual infrastructures at corporate headquarters and at the backup site. The administrator is concerned that…

The correct answer is C. Passwords are stored unencrypted in memory, which are then transported across the MPLS. During a VM live migration, the entire runtime memory state of a virtual machine is transmitted across the network to the destination host. RAM contents include whatever the VM is actively processing - including authentication credentials, session tokens, encryption keys, and…

Technical Integration of Enterprise Components

Question

The security administrator is reviewing the business continuity plan which consists of virtual infrastructures at corporate headquarters and at the backup site. The administrator is concerned that the VLAN used to perform live migrations of virtual machines to the backup site is across the network provider's MPLS network. This is a concern due to which of the following?

Options

  • AThe hypervisor virtual switches only support Q-in-Q VLANS, not MPLS.
  • BVLANs are not compatible with MPLS, which may cause intermittent failures while performing live
  • CPasswords are stored unencrypted in memory, which are then transported across the MPLS
  • DTransport encryption is being used during the live migration of virtual machines which will impact

How the community answered

(22 responses)
  • A
    5% (1)
  • B
    9% (2)
  • C
    68% (15)
  • D
    18% (4)

Explanation

During a VM live migration, the entire runtime memory state of a virtual machine is transmitted across the network to the destination host. RAM contents include whatever the VM is actively processing - including authentication credentials, session tokens, encryption keys, and passwords stored in plaintext in memory. If this memory transfer traverses an MPLS network managed by a third-party network provider without encryption, that sensitive data is exposed to potential interception by the provider or anyone who can tap the MPLS path. The concern is not VLAN/MPLS incompatibility (B, which is technically inaccurate - VLANs can be tunneled over MPLS), nor that encryption is being used (D, which would be the solution, not the problem). The correct concern is that unencrypted memory contents cross an untrusted network boundary.

Topics

#VM live migration#MPLS security#memory exposure#hypervisor VLAN

Community Discussion

No community discussion yet for this question.

Full CAS-001 Practice