Examkin

Question

Difficulty: MediumVirtualization Security Considerations and Network Configurations

A cybersecurity technician is setting up a dedicated virtual machine (VM) on a host workstation to download security updates from an external public repository. To maintain security, the VM must be allowed outbound internet access while preventing direct IP connectivity to other corporate devices on the local physical network. Additionally, host security measures must prevent the guest VM from consuming excessive physical host resources during large downloads. Which of the following actions should the technician take to satisfy these requirements? (Select TWO.)

  1. Configure the virtual network adapter to use Network Address Translation (NAT) mode.Answer
  2. Implement resource limits and caps on the hypervisor for CPU and RAM allocation to the guest VM.Answer
  3. C
    Configure the virtual network adapter to use Bridged mode to isolate the VM from the local physical network.
  4. D
    Assign a static APIPA address (169.254.x.x) to the virtual machine interface to reach public patch repositories.

Answer

The correct configurations are setting the virtual network adapter to Network Address Translation (NAT) mode and enforcing hypervisor resource limits on CPU and RAM for the guest VM.
Selecting Network Address Translation (NAT) mode grants the guest virtual machine outbound internet connectivity by masking its traffic behind the host system's IP address, keeping it separated from the rest of the local physical network. Additionally, configuring explicit hypervisor resource limits (such as capping maximum RAM and CPU core usage) protects the host machine from Denial of Service or instability caused by compromised or intensive guest processes.

Step-by-Step Solution

1
Analyze network isolation and outbound connectivity requirements
NAT mode provides guest outbound internet access while hiding the guest behind the host's IP, preventing direct Layer 2/3 inbound traffic from the local corporate LAN.
Bridged mode exposes the guest directly to the physical LAN, whereas Host-Only or Internal modes prevent internet access completely.
2
Analyze hypervisor security and host protection controls
Applying resource quotas (CPU and RAM caps) prevents resource exhaustion attacks or runaway guest processes on the host hardware.
Unrestricted resource allocation allows guest processes to consume physical RAM and CPU cycles, causing Denial of Service to the host system.

Key Concept

Virtual Machine Isolation and Hypervisor Resource Controls
Estimated Time:1m 30s
Rate this question

Topics

Virtualization Security Considerations and Network Configurations

More questions from this topic