A company's human resources department recently had its own shadow IT department spin up multiple VM guests on one host, each hosting a mixture of differently labeled data types (confidential and…

Question

Options

• AVulnerabilities associated with a single platform hosting multiple data types on VMs should have
• BVulnerabilities associated with maintaining and patching multiple hypervisors.
• CType 1 vs. Type 2 hypervisor approaches should have been considered.
• DVulnerabilities associated with shared hosting services provided by the IT department should

• A
  72% (21)
• B
  14% (4)
• C
  3% (1)
• D
  10% (3)

Explanation

The core problem is that the shadow IT department co-located data of different classification levels (confidential and restricted) on the same VM guest. This creates risk because a compromise, misconfiguration, or insider threat affecting one data type could expose the other. The key consideration that should have been addressed is that hosting mixed-sensitivity data on shared VMs on a single host violates data segregation principles. Each data classification should reside on isolated VMs or separate hosts to enforce access controls and limit blast radius. The other choices address hypervisor patching (B) and hypervisor type selection (C), which are valid considerations but do not directly address the specific mixing of classified data types raised in this scenario.

No community discussion yet for this question.