Which of the following are the primary security responsibilities of the cloud provider in compute virtualization? (Select 2)

Isolation is a core provider responsibility because only the cloud provider controls the hypervisor and can enforce that one tenant's VMs cannot access another's memory or CPU. Securing the underlying infrastructure (D) means the provider must protect physical hardware, firmware, hypervisor software, and network fabric from compromise, as customers have no visibility or control over these layers.

Identity and Access Management for workloads and applications is a customer responsibility - the provider supplies IAM tooling but the customer configures and governs access to their own resources.

Encryption of data in transit and at rest for customer workloads is a customer responsibility, though the provider may offer encryption services that the customer must choose to enable and configure.

Securing the underlying infrastructure is an explicit provider duty under all major cloud shared responsibility frameworks, covering data center physical security, host OS patching, and hypervisor integrity.

Monitoring and logging of application-level activity and security events within the customer's environment is the customer's responsibility, even though providers offer tools to facilitate it.