Examkin

Question

Difficulty: MediumVirtualization Security Considerations and Network Configurations

A cybersecurity specialist is configuring a virtual machine (VM) to serve as a malware analysis sandbox. To satisfy security policies, the VM must be able to send telemetry logs to a second virtual machine residing on the same hypervisor host, but it must be completely isolated from the host operating system itself and blocked from all external physical network communication. Which virtual network adapter configuration should be implemented?

  1. Internal networking modeAnswer
  2. B
    Host-only networking mode
  3. C
    Bridged networking mode
  4. D
    Network Address Translation (NAT) mode

Answer

Internal networking mode is the correct virtual network configuration.
Internal networking mode creates a virtual switch that is isolated within the hypervisor. Virtual machines attached to the same internal network can communicate with one another (allowing telemetry logs to be sent to the secondary VM), but no traffic can cross to the host operating system or out to the physical network interface.

Step-by-Step Solution

1
Analyze the connectivity and security requirements for the sandbox VM.
The VM requires inter-VM communication (to reach the logging VM on the same host) but strict isolation from the host OS and external physical network.
Security policies for untrusted software execution mandate preventing malware from reaching the host management layer or spreading over the network.
2
Evaluate the available virtual networking adapter modes.
Bridged mode connects directly to the physical network. NAT mode provides outbound access to external networks. Host-only mode connects the VM to the host OS. Internal mode restricts traffic strictly to VMs connected to the same virtual switch on that physical host.
Comparing each mode against isolation constraints identifies which mode satisfies all security parameters.
3
Select the mode matching all criteria.
Internal mode allows inter-VM communication while preventing host OS communication and physical network access.
It fulfills the requirement to communicate with the secondary logging VM without exposing the host OS or physical network.

Key Concept

Virtual Machine Network Interface Modes and Security Containment
Rate this question

Topics

Virtualization Security Considerations and Network Configurations

More questions from this topic