A vulnerability was recently announced that allows a malicious user to gain root privileges on other virtual machines running within the same hardware cluster. Customers of which of the following…

The correct answer is D. Multitenant IaaS cloud. With multi-tenancy resources are shared by multiple users. For example, two or more tenants could have their OSs running on the same server or two or running an instance of the same application with different data. Depending on the cloud deployment model the level of importance…

Enterprise Security Architecture

Question

A vulnerability was recently announced that allows a malicious user to gain root privileges on other virtual machines running within the same hardware cluster. Customers of which of the following cloud-based solutions should be MOST concerned about this vulnerability?

Options

ASingle-tenant private cloud
BMultitenant SaaS cloud
CSingle-tenant hybrid cloud
DMultitenant IaaS cloud
EMultitenant PaaS cloud
FSingle-tenant public cloud

How the community answered

(23 responses)

A
4% (1)
B
9% (2)
D
74% (17)
F
13% (3)

Explanation

With multi-tenancy resources are shared by multiple users. For example, two or more tenants could have their OSs running on the same server or two or running an instance of the same application with different data. Depending on the cloud deployment model the level of importance and sharing of multi-tenancy would be different [CSA09]; but without any doubt Infrastructure-as- a-Service (IaaS) in public clouds creates the most risks off all.

Topics

#cloud security#VM escape#multi-tenancy#IaaS

Community Discussion

No community discussion yet for this question.

Full CAS-003 Practice