nerdexam
(ISC)2

CSSLP · Question #33

The NIST Information Security and Privacy Advisory Board (ISPAB) paper "Perspectives on Cloud Computing and Standards" specifies potential advantages and disdvantages of virtualization. Which of the f

The correct answer is C. It initiates the risk that malicious software is targeting the VM environment. D. It increases overall security risk shared resources. E. It creates the possibility that remote attestation may not work. F. It involves new protection mechanisms for preventing VM escape, VM detection, and VM-VM interference. G. It increases configuration effort because of complexity and composite system.. This question identifies several disadvantages of virtualization as outlined in the NIST ISPAB paper 'Perspectives on Cloud Computing and Standards'. These disadvantages highlight increased security risks and complexities introduced by virtualized environments.

Secure Software Deployment, Operations, Maintenance

Question

The NIST Information Security and Privacy Advisory Board (ISPAB) paper "Perspectives on Cloud Computing and Standards" specifies potential advantages and disdvantages of virtualization. Which of the following disadvantages does it include? Each correct answer represents a complete solution. Choose all that apply.

Options

  • AIt increases capabilities for fault tolerant computing using rollback and snapshot features.
  • BIt increases intrusion detection through introspection.
  • CIt initiates the risk that malicious software is targeting the VM environment.
  • DIt increases overall security risk shared resources.
  • EIt creates the possibility that remote attestation may not work.
  • FIt involves new protection mechanisms for preventing VM escape, VM detection, and VM-VM interference.
  • GIt increases configuration effort because of complexity and composite system.

How the community answered

(15 responses)
  • A
    7% (1)
  • B
    13% (2)
  • C
    80% (12)

Why each option

This question identifies several disadvantages of virtualization as outlined in the NIST ISPAB paper 'Perspectives on Cloud Computing and Standards'. These disadvantages highlight increased security risks and complexities introduced by virtualized environments.

AIt increases capabilities for fault tolerant computing using rollback and snapshot features.

Increased capabilities for fault-tolerant computing through features like rollback and snapshot are generally considered significant advantages of virtualization, not disadvantages.

BIt increases intrusion detection through introspection.

Increased intrusion detection through introspection, which allows security tools to monitor virtual machines from the hypervisor level, is a security advantage of virtualization, providing enhanced visibility.

CIt initiates the risk that malicious software is targeting the VM environment.Correct

Virtualization introduces the risk that malicious software, such as hypervisor exploits or VM-aware malware, can specifically target and compromise the virtual machine environment itself. This creates new attack vectors not present in traditional physical systems.

DIt increases overall security risk shared resources.Correct

Shared physical resources, like CPU, memory, and network, among multiple virtual machines on a single host increase the overall security risk, as a compromise of one component or VM could potentially affect others. This shared infrastructure can lead to resource contention or side-channel attacks.

EIt creates the possibility that remote attestation may not work.Correct

Remote attestation, a process for verifying the integrity of a system's boot process and runtime environment, may face challenges or fail to work correctly in virtualized settings due to the abstraction layer provided by the hypervisor. The hypervisor can obscure the underlying hardware state from the guest VM.

FIt involves new protection mechanisms for preventing VM escape, VM detection, and VM-VM interference.Correct

Virtualization necessitates the development and implementation of new protection mechanisms to counter specific threats such as VM escape (a VM breaking out of its isolated environment), VM detection (malware identifying it's in a VM), and VM-VM interference (one VM impacting another). These mechanisms add to the security overhead.

GIt increases configuration effort because of complexity and composite system.Correct

Managing and securing a virtualized infrastructure often leads to increased configuration effort due to the added complexity of managing hypervisors, virtual networks, virtual storage, and multiple guest operating systems. This composite system requires careful planning and continuous adjustment.

Concept tested: Virtualization security disadvantages

Source: https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-125.pdf

Topics

#Virtualization Security#Cloud Computing Security#NIST Guidelines#Deployment Environment Risks

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full CSSLP Practice