CAS-003 · Question #563
CAS-003 Question #563: Real Exam Question with Answer & Explanation
The correct answer is B: A security vulnerability that is exploited on the website could expose the accounting service.. When two services with different security trust levels share the same virtual platform (co-location), a compromise of one can lead to lateral movement or hypervisor-level attacks that expose the other. The accounting service holds sensitive financial data, and hosting it alongsid
Question
Options
- APoor capacity planning could cause an oversubscribed host, leading to poor performance on
- BA security vulnerability that is exploited on the website could expose the accounting service.
- CTransferring as many services as possible to a CSP could free up resources.
- DThe CTO does not have the budget available to purchase required resources and manage
Explanation
When two services with different security trust levels share the same virtual platform (co-location), a compromise of one can lead to lateral movement or hypervisor-level attacks that expose the other. The accounting service holds sensitive financial data, and hosting it alongside a public-facing website means a successful exploit on the website (e.g., RCE, VM escape) could pivot directly to the accounting service. This security boundary violation is the CISO's primary concern. Option A describes a capacity/performance problem, not a security issue. Option C is a strategic recommendation, not a concern. Option D is a budget/management issue outside the CISO's immediate purview.
Community Discussion
No community discussion yet for this question.