Which of the following is MOST important for an IS auditor to confirm when evaluating security controls in a virtualized environment?

The correct answer is A. Virtual components are hardened.. In a virtualized environment, hardening virtual components (such as hypervisors, virtual machines, and management consoles) is most critical because vulnerabilities in these elements can compromise multiple virtual systems simultaneously. Proper hardening ensures the environment

Submitted by manish99· Apr 18, 2026Protection of Information Assets

Question

Options

AVirtual components are hardened.
BPeriodic audits are conducted.
CThe virtual environment is monitored.
DData on virtual machines (VMs) is classified.

How the community answered

(14 responses)

A
86% (12)
C
7% (1)
D
7% (1)

Explanation

In a virtualized environment, hardening virtual components (such as hypervisors, virtual machines, and management consoles) is most critical because vulnerabilities in these elements can compromise multiple virtual systems simultaneously. Proper hardening ensures the environment is secure against exploitation and privilege escalation.

Topics

#Virtualization Security#Hardening#Security Controls#IS Audit

Community Discussion

No community discussion yet for this question.

Full CISA Practice