SY0-301 · Question #190
Elastic cloud computing environments often reuse the same physical hardware for multiple customers over time as virtual machines are instantiated and deleted. This has important implications for…
The correct answer is B. Data confidentiality. Reusing physical hardware across multiple cloud tenants creates a risk that data remnants from deleted virtual machines could be accessible to subsequent tenants, threatening data confidentiality.
Question
Elastic cloud computing environments often reuse the same physical hardware for multiple customers over time as virtual machines are instantiated and deleted. This has important implications for which of the following data security concerns?
Options
- AHardware integrity
- BData confidentiality
- CAvailability of servers
- DIntegrity of data
How the community answered
(59 responses)- A12% (7)
- B76% (45)
- C3% (2)
- D8% (5)
Why each option
Reusing physical hardware across multiple cloud tenants creates a risk that data remnants from deleted virtual machines could be accessible to subsequent tenants, threatening data confidentiality.
Hardware integrity refers to whether the physical components are unmodified and trustworthy; reusing hardware for different customers does not inherently affect the physical integrity of the hardware.
When a VM is deleted, residual data may persist in memory, storage, or swap space on the underlying physical hardware. If that hardware is reassigned to a new tenant without secure data sanitization, the new tenant could potentially recover previous customer data. This is a well-known multi-tenancy risk in cloud environments specifically targeting confidentiality.
Availability concerns whether services are accessible when needed; reallocating hardware to a new VM tenant maintains or improves availability rather than threatening it.
Data integrity refers to the accuracy and consistency of data; the concern with hardware reuse is that old data could be read by unauthorized parties, which is a confidentiality issue, not an integrity issue.
Concept tested: Cloud multi-tenancy data remanence and confidentiality
Source: https://csrc.nist.gov/publications/detail/sp/800-144/final
Topics
Community Discussion
No community discussion yet for this question.