nerdexam
(ISC)2(ISC)2

CCSP · Question #438

CCSP Question #438: Real Exam Question with Answer & Explanation

The correct answer is B: A Type 1 hypervisor is tied directly to the bare metal and only runs with code necessary to. A Type 1 (bare-metal) hypervisor runs directly on the physical hardware without an underlying general-purpose operating system. It contains only the minimal code required to manage and isolate virtual machines. This small attack surface means there are fewer vulnerabilities to ex

Submitted by rania.sa· Apr 18, 2026Cloud Platform & Infrastructure Security

Question

Why does a Type 1 hypervisor typically offer tighter security controls than a Type 2 hypervisor?

Options

  • AA Type 1 hypervisor also controls patching of its hosted virtual machines ensure they are always
  • BA Type 1 hypervisor is tied directly to the bare metal and only runs with code necessary to
  • CA Type 1 hypervisor performs hardware-level encryption for tighter security and efficiency.
  • DA Type 1 hypervisor only hosts virtual machines with the same operating systems as the

Explanation

A Type 1 (bare-metal) hypervisor runs directly on the physical hardware without an underlying general-purpose operating system. It contains only the minimal code required to manage and isolate virtual machines. This small attack surface means there are fewer vulnerabilities to exploit. A Type 2 hypervisor runs as an application on top of a conventional OS (e.g., Windows or Linux), meaning an attacker who compromises the host OS can potentially affect all hosted VMs. The extra OS layer significantly increases the attack surface compared to a Type 1 deployment.

Topics

#Hypervisor security#Virtualization#Cloud infrastructure#Attack surface

Community Discussion

No community discussion yet for this question.

Full CCSP PracticeBrowse All CCSP Questions