CAS-003 · Question #822
A company is planning to undergo a P2V project to improve resource utilization, redundancy, and failover across its two datacenters. A consultant has provided a private cloud design that uses a…
The correct answer is B. Enabling the vTPM. In a P2V (Physical-to-Virtual) migration using a Type 1 hypervisor on Linux, the security manager's concern is whether the hypervisor itself has been tampered with or compromised. Enabling a vTPM (Virtual Trusted Platform Module) (B) addresses this by providing cryptographic…
Question
A company is planning to undergo a P2V project to improve resource utilization, redundancy, and failover across its two datacenters. A consultant has provided a private cloud design that uses a specific Type 1 hypervisor based on Linux. The security manager is concerned about the integrity of the hypervisor. Which of the following should the consultant suggest to address the security manager’s concerns?
Options
- AImplementing remote attestation
- BEnabling the vTPM
- CUsing a secure enclave
- DTransition to a Type 2 hypervisor configuration
How the community answered
(55 responses)- A13% (7)
- B55% (30)
- C7% (4)
- D25% (14)
Explanation
In a P2V (Physical-to-Virtual) migration using a Type 1 hypervisor on Linux, the security manager's concern is whether the hypervisor itself has been tampered with or compromised. Enabling a vTPM (Virtual Trusted Platform Module) (B) addresses this by providing cryptographic attestation of the hypervisor's boot state and integrity. The vTPM can store measurements taken during the boot sequence and attest that the hypervisor code has not been modified. Remote attestation (A) is a process that relies on a TPM or vTPM to function - it is the outcome enabled by the vTPM, not a standalone solution. A secure enclave (C) protects specific application workloads, not the hypervisor itself. Switching to a Type 2 hypervisor (D) would reduce security, as Type 2 runs atop a general-purpose OS, expanding the attack surface. vTPM is the correct foundational control for hypervisor integrity assurance.
Topics
Community Discussion
No community discussion yet for this question.