Examkin

Question

Difficulty: EasyVirtualization and Containerization Security

A security administrator is evaluating deployment options for an enterprise application hosted on a shared physical server. The organization requires full hardware abstraction and distinct operating system kernels for each workload to ensure complete isolation between tenants. Which of the following virtualization or containerization technologies best meets this requirement?

  1. Virtual machines managed by a Type-1 hypervisorAnswer
  2. B
    Application containers deployed on a single shared host OS kernel
  3. C
    Perimeter firewall rules applied at the border router
  4. D
    Detective host-based intrusion detection logging

Answer

Virtual machines managed by a Type-1 hypervisor satisfy the requirement by providing dedicated virtualized hardware and isolated OS kernels for each workload.
Virtual machines managed by a Type-1 (bare-metal) hypervisor run directly on physical hardware and provide each virtual machine with its own complete operating system kernel and virtualized hardware. This provides strong isolation between tenant workloads.

Step-by-Step Solution

1
Analyze the isolation requirement stated in the scenario
The requirement calls for full hardware abstraction and independent operating system kernels per workload.
Identifying the target boundary model determines whether containerization or hypervisor-based virtualization is required.
2
Evaluate hypervisor-based virtual machines versus containers
Virtual machines run separate guest operating systems on top of a hypervisor, while containers share the host operating system kernel.
Dedicated kernels are only provided by full virtual machines, making hypervisors the correct architecture for hardware-level kernel isolation.

Key Concept

Virtual Machine Isolation and Hypervisor Security Architecture
Rate this question

Topics

Virtualization and Containerization Security

More questions from this topic