nerdexam
CompTIA

SY0-301 · Question #190

Elastic cloud computing environments often reuse the same physical hardware for multiple customers over time as virtual machines are instantiated and deleted. This has important implications for…

The correct answer is B. Data confidentiality. Reusing physical hardware across multiple cloud tenants creates a risk that data remnants from deleted virtual machines could be accessible to subsequent tenants, threatening data confidentiality.

Security architecture

Question

Elastic cloud computing environments often reuse the same physical hardware for multiple customers over time as virtual machines are instantiated and deleted. This has important implications for which of the following data security concerns?

Options

  • AHardware integrity
  • BData confidentiality
  • CAvailability of servers
  • DIntegrity of data

How the community answered

(59 responses)
  • A
    12% (7)
  • B
    76% (45)
  • C
    3% (2)
  • D
    8% (5)

Why each option

Reusing physical hardware across multiple cloud tenants creates a risk that data remnants from deleted virtual machines could be accessible to subsequent tenants, threatening data confidentiality.

AHardware integrity

Hardware integrity refers to whether the physical components are unmodified and trustworthy; reusing hardware for different customers does not inherently affect the physical integrity of the hardware.

BData confidentialityCorrect

When a VM is deleted, residual data may persist in memory, storage, or swap space on the underlying physical hardware. If that hardware is reassigned to a new tenant without secure data sanitization, the new tenant could potentially recover previous customer data. This is a well-known multi-tenancy risk in cloud environments specifically targeting confidentiality.

CAvailability of servers

Availability concerns whether services are accessible when needed; reallocating hardware to a new VM tenant maintains or improves availability rather than threatening it.

DIntegrity of data

Data integrity refers to the accuracy and consistency of data; the concern with hardware reuse is that old data could be read by unauthorized parties, which is a confidentiality issue, not an integrity issue.

Concept tested: Cloud multi-tenancy data remanence and confidentiality

Source: https://csrc.nist.gov/publications/detail/sp/800-144/final

Topics

#cloud security#data remanence#virtualization#data confidentiality

Community Discussion

No community discussion yet for this question.

Full SY0-301 Practice