nerdexam
CompTIA

CAS-002 · Question #62

Virtual hosts with different security requirements should be:

The correct answer is B. stored on separate physical hosts. Virtual hosts (VMs) with differing security requirements must be stored on separate physical hosts to enforce true isolation. When VMs of different trust levels share the same physical hardware, a compromise of the lower-security VM can potentially escalate to the…

Technical Integration of Enterprise Components

Question

Virtual hosts with different security requirements should be:

Options

  • Aencrypted with a one-time password.
  • Bstored on separate physical hosts.
  • Cmoved to the cloud.
  • Dscanned for vulnerabilities regularly.

How the community answered

(50 responses)
  • A
    2% (1)
  • B
    90% (45)
  • C
    6% (3)
  • D
    2% (1)

Explanation

Virtual hosts (VMs) with differing security requirements must be stored on separate physical hosts to enforce true isolation. When VMs of different trust levels share the same physical hardware, a compromise of the lower-security VM can potentially escalate to the higher-security VM through VM escape attacks, shared CPU caches (side-channel attacks like Spectre/Meltdown), or hypervisor vulnerabilities. Physical separation eliminates this risk entirely. Answer A (one-time passwords) addresses authentication, not isolation. Answer C (moving to the cloud) does not resolve the co-tenancy problem. Answer D (vulnerability scanning) is a good practice but does not prevent cross-VM compromise from hardware sharing.

Topics

#virtualization#VM isolation#physical separation#security zones

Community Discussion

No community discussion yet for this question.

Full CAS-002 Practice