A company's human resources department recently had its own shadow IT department spin up ten VMs that host a mixture of differently labeled data types (confidential and restricted) on the same VMs。…

Question

Options

• AVulnerabilities associated with a single platform hosting multiple data types on VMs should have
• BVulnerabilities associated with a single server hosting multiple data types should have been
• CType 1vs Type 2 hypervisor approaches should have been considered
• DVulnerabilities associated with shared hosting services provided by the IT department should

• A
  10% (3)
• B
  72% (21)
• C
  14% (4)
• D
  3% (1)

Explanation

The core security issue is mixing data of different classification levels (confidential and restricted) on the same VMs. This violates data segregation principles, as lower-privileged processes could potentially access higher-classified data on the same host. Answer B correctly identifies the fundamental vulnerability: hosting multiple data types of different classifications on a single server. Answer A is vague about 'a single platform.' Answer C is a distractor-the Type 1 vs. Type 2 hypervisor distinction is about performance and attack surface, not data classification segregation. Answer D incorrectly frames the problem as an IT department shared hosting issue rather than the data co-mingling risk. The shadow IT team should have segregated VMs by data classification level.

No community discussion yet for this question.