Examkin

Question

Difficulty: HardVirtualization Security Considerations and Network Configurations

A cybersecurity engineer is deploying a high-security hypervisor host dedicated to running untrusted software applications inside virtual machines (VMs). The architecture requires that guest VMs can exchange diagnostic data with one another across a dedicated virtual network, but must be completely isolated from the host's physical network interface card (NIC) and external networks. Additionally, the administrator must safeguard the underlying physical host against Denial of Service (DoS) conditions caused by guest VM resource exhaustion. Which TWO configuration actions should the administrator implement to satisfy these security and networking requirements? (Select TWO.)

  1. Configure the virtual network adapter of each guest VM to use Internal (Private) virtual switch mode.Answer
  2. Establish strict virtual CPU (vCPU) and memory allocation limits (caps) per guest VM within hypervisor host settings.Answer
  3. C
    Set guest virtual network interfaces to Bridged mode so traffic is processed directly by an unmanaged Layer 2 physical switch.
  4. D
    Statically assign Automatic Private IP Addressing (APIPA) range addresses to guest virtual network interfaces to restrict outbound subnet routing.

Answer

The administrator must set guest virtual network interfaces to Internal (Private) virtual switch mode and establish strict resource limits (vCPU and RAM allocation caps) on the hypervisor host.
The correct responses specify Internal (Private) virtual switch mode to enforce complete virtual network boundary isolation and strict vCPU/RAM allocation limits to protect hypervisor host system availability.

Step-by-Step Solution

1
Analyze network isolation requirements.
The VMs must communicate only with each other while maintaining complete isolation from the physical host NIC and external networks.
Internal (Private) network mode creates an isolated virtual switch bound exclusively to designated VMs, blocking external physical connectivity.
2
Analyze host system security and resource protection requirements.
Host hardware must be shielded from resource exhaustion attacks originating inside untrusted guest VMs.
Hypervisors enforce vCPU and RAM caps per VM to guarantee that no single guest VM can drain host resources or starve adjacent VMs.

Key Concept

Virtual Machine Isolation Modes and Hypervisor Resource Controls
Rate this question

Topics

Virtualization Security Considerations and Network Configurations

More questions from this topic