nerdexam
(ISC)2

CSSLP · Question #151

What are the security advantages of virtualization, as described in the NIST Information Security and Privacy Advisory Board (ISPAB) paper "Perspectives on Cloud Computing and Standards"? Each…

The correct answer is A. It increases capabilities for fault tolerant computing. B. It adds a layer of security for defense-in-depth. C. It decreases exposure of weak software. Virtualization enhances security by providing fault tolerance, adding a defense-in-depth layer, and reducing the exposure of vulnerable software components.

Secure Software Deployment, Operations, Maintenance

Question

What are the security advantages of virtualization, as described in the NIST Information Security and Privacy Advisory Board (ISPAB) paper "Perspectives on Cloud Computing and Standards"? Each correct answer represents a complete solution. Choose three.

Options

  • AIt increases capabilities for fault tolerant computing.
  • BIt adds a layer of security for defense-in-depth.
  • CIt decreases exposure of weak software.
  • DIt decreases configuration effort.

How the community answered

(49 responses)
  • A
    90% (44)
  • D
    10% (5)

Why each option

Virtualization enhances security by providing fault tolerance, adding a defense-in-depth layer, and reducing the exposure of vulnerable software components.

AIt increases capabilities for fault tolerant computing.Correct

Virtualization platforms often include features like live migration, snapshots, and replication, which inherently increase capabilities for fault-tolerant computing and improve system availability and resilience against failures or attacks.

BIt adds a layer of security for defense-in-depth.Correct

Virtualization introduces a hypervisor layer between the hardware and guest operating systems, creating a separation that can act as an additional security boundary, thereby contributing to a defense-in-depth strategy.

CIt decreases exposure of weak software.Correct

Virtualization allows for easy isolation, sandboxing, and rapid deployment/redeployment of clean images, which can decrease the exposure time or impact of known weak or vulnerable software components.

DIt decreases configuration effort.

While some configuration tasks might be streamlined, virtualization can also add complexity, particularly regarding network, storage, and security configurations, which does not necessarily decrease overall configuration effort, especially for secure setups.

Concept tested: Virtualization security advantages

Source: https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-125.pdf

Topics

#Virtualization Security#Cloud Security#Defense-in-Depth#Fault Tolerance

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full CSSLP Practice