An IT security analyst is deploying a virtual machine (VM) on a workstation to analyze untrusted software binaries. The analyst needs to prevent the VM from communicating with the local physical network while ensuring that malicious processes within the guest OS cannot exhaust host physical hardware resources. Which of the following actions should the analyst take? (Select TWO.)
- Configure the virtual network interface card (vNIC) to use Host-Only or Internal network mode.Cevap
- Set maximum CPU and memory resource limits for the virtual machine within the hypervisor settings.Cevap
- CConfigure the virtual network interface card (vNIC) to use Bridged network mode.
- DOvercommit host physical RAM without configuring resource reservations or ballooning controls.
Cevap
The analyst should set the vNIC to Host-Only or Internal network mode and configure maximum CPU and memory resource limits for the VM in the hypervisor.
Configuring Host-Only or Internal network mode restricts the virtual machine's communication to prevent interaction with physical network devices or the external internet. Enforcing maximum CPU and RAM limits in hypervisor settings ensures that untrusted or malicious software running in the guest operating system cannot exhaust physical host resources.
Adım Adım Çözüm
Anahtar Kavram
Virtualization Security Considerations and Network Configurations
Tahmini Süre:1m 30s