Which of the following should be deployed to prevent the transmission of malicious traffic between virtual machines hosted on a singular physical device on a network?

The correct answer is A. HIPS on each virtual machine. When multiple virtual machines (VMs) reside on a single physical host, traffic between them is often routed through an internal virtual switch and never touches the physical network. This means a network-based solution (NIPS or NIDS) placed on the external network would be…

Security architecture

Question

Options

AHIPS on each virtual machine
BNIPS on the network
CNIDS on the network
DHIDS on each virtual machine

How the community answered

(35 responses)

A
71% (25)
B
17% (6)
C
9% (3)
D
3% (1)

Explanation

When multiple virtual machines (VMs) reside on a single physical host, traffic between them is often routed through an internal virtual switch and never touches the physical network. This means a network-based solution (NIPS or NIDS) placed on the external network would be blind to inter-VM traffic. HIDS can detect threats but cannot actively block them. HIPS (Host-based Intrusion Prevention System) installed on each individual VM is the correct choice because it monitors and actively blocks malicious traffic at the host level, regardless of whether that traffic traverses the physical network or stays within the hypervisor's virtual switch.

Topics

#virtualization security#HIPS#VM isolation#east-west traffic

Community Discussion

No community discussion yet for this question.

Full SY0-301 Practice