nerdexam
CompTIA

CAS-002 · Question #146

A hosting company provides inexpensive guest virtual machines to low-margin customers. Customers manage their own guest virtual machines. Some customers want basic guarantees of logical separation…

The correct answer is B. The hosting company should manage the hypervisor-based firewall; while allowing. The hosting company should manage the hypervisor-based firewall as a default service while giving customers the option to configure it themselves, satisfying both customer segments. This approach uses the hypervisor layer for effective logical separation without requiring…

Technical Integration of Enterprise Components

Question

A hosting company provides inexpensive guest virtual machines to low-margin customers. Customers manage their own guest virtual machines. Some customers want basic guarantees of logical separation from other customers and it has been indicated that some customers would like to have configuration control of this separation; whereas others want this provided as a value-added service by the hosting company. Which of the following BEST meets these requirements?

Options

  • AThe hosting company should install a hypervisor-based firewall and allow customers to
  • BThe hosting company should manage the hypervisor-based firewall; while allowing
  • CCustomers should purchase physical firewalls to protect their guest hosts and have the
  • DThe hosting company should install a host-based firewall on customer guest hosts and

How the community answered

(35 responses)
  • A
    6% (2)
  • B
    77% (27)
  • C
    3% (1)
  • D
    14% (5)

Why each option

The hosting company should manage the hypervisor-based firewall as a default service while giving customers the option to configure it themselves, satisfying both customer segments. This approach uses the hypervisor layer for effective logical separation without requiring expensive physical hardware.

AThe hosting company should install a hypervisor-based firewall and allow customers to

Allowing all customers to manage the hypervisor firewall themselves does not address the customers who want separation provided as a managed service by the hosting company.

BThe hosting company should manage the hypervisor-based firewall; while allowingCorrect

By deploying and managing the hypervisor-based firewall, the hosting company provides logical separation as a value-added service for customers who do not want to manage it themselves. Simultaneously, offering customers the ability to configure the firewall rules directly addresses the requirement for those who want configuration control - meeting both needs within a single cost-effective architecture.

CCustomers should purchase physical firewalls to protect their guest hosts and have the

Requiring customers to purchase physical firewalls is cost-prohibitive and contradicts the inexpensive, low-margin hosting model the company operates.

DThe hosting company should install a host-based firewall on customer guest hosts and

A host-based firewall installed inside the guest VM is controlled by the guest OS and does not provide the hypervisor-level logical separation between customer VMs that the requirement specifies.

Concept tested: Hypervisor-based firewall for multi-tenant VM logical separation

Source: https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-125A.pdf

Topics

#VM isolation#hypervisor firewall#cloud hosting#logical separation

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full CAS-002 Practice