CAS-005 · Question #421
A cloud security architect has been tasked with finding a solution for hardening VMs. The solution must meet the following requirements: - Data needs to be stored outside of the VMs. - No…
The correct answer is A. Immutable system. An immutable infrastructure approach ensures that VM images are never altered in place. All state and data live externally (for example in object storage or managed databases), and any required change, be it patching or configuration, happens by building and rolling out a fresh…
Question
A cloud security architect has been tasked with finding a solution for hardening VMs. The solution must meet the following requirements:
- Data needs to be stored outside of the VMs.
- No unauthorized modifications to the VMs are allowed.
- If a change needs to be done, a new VM needs to be deployed.
Which of the following is the best solution?
Options
- AImmutable system
- BData loss prevention
- CStorage area network
- DBaseline template
How the community answered
(23 responses)- A83% (19)
- B9% (2)
- C4% (1)
- D4% (1)
Explanation
An immutable infrastructure approach ensures that VM images are never altered in place. All state and data live externally (for example in object storage or managed databases), and any required change, be it patching or configuration, happens by building and rolling out a fresh VM image. This guarantees no unauthorized drift or in-place modification on running instances.
Community Discussion
No community discussion yet for this question.