Module 10

You decided to test a potential malware application by sandboxing. However, you want to ensure that if the application is infected, it will not affect the host operating system. What should you do to ensure that the host OS is protected?

• Deactivate the host OS while the guest OS is running
• Assign different virtual networks for the guest OS and host OS
• Implement virtual machine escape protection
• Implement a secure network gateway

Answer explanation

On implementing virtual machine escape protection, the virtual machine (VM) cannot directly interact with the host operating system and potentially infect it.

In an interview, the interviewer asks you to boot a PC. Before the boot process begins, an interface asks you to choose between Windows 10 and Ubuntu Linux. The interviewer then asks you to identify the type of VR monitor program being used. What should your reply be?

• Type I hypervisor
• Type II hypervisor
• Container
• Type III hypervisor

Answer explanation

Type I hypervisors run guest OSs directly on the hardware.

David is asked to test a new configuration on a virtual machine; if it does not work, it should roll back to the older state. What should David do before testing the new configuration so he can roll it back to the previous state if needed?

• Use sandboxing in the virtual machine before testing the configuration
• Take a snapshot of the virtual machine before testing the configuration
• Enable "roll back" on the previous configuration before testing the new configuration
• Take a screenshot of the virtual machine before testing the configuration

Answer explanation

Taking a snapshot of the virtual machine (VM) before testing the configuration will allow it to be rolled back to the snapshot if the configuration is not working.

Which of the following protocols can make accessing data using man-in-the-middle attacks difficult while web browsing?

• HTTP
• DNSSEC
• IPv6
• SFTP

Answer explanation

IPv6 can implement end-to-end encryption, making man-in-the-middle attacks significantly more difficult.

Mike, an employee at your company, approached you seeking help with his virtual machine. He wants to save the current state of the machine to roll back to the saved state in case of a malfunction. Which of the following techniques can help Mike?

• Apply sandboxing to save the virtual machine state
• Take snapshots to save the virtual machine state
• Use containers to save the virtual machine state
• Use LDAP to save the virtual machine state

Answer explanation

Saved snapshots allow a virtual machine to roll back to the state when the snapshot was taken.

In an interview, you are asked about the role played by virtual machines in load balancing. Which of the following should be your reply?

• If the load on a virtual machine increases, the RAM or disk space of the VM can be extended until the load is balanced.
• If the load on a virtual machine increases, the virtual machine can balance the load by rejecting low-priority requests.
• If the virtual machine's load increases, the virtual machine can be migrated to another physical machine with more capabilities.
• If the virtual machine's load increases, the virtual machines can balance the load by denying further access.

Answer explanation

A virtual machine can be easily migrated to another physical device with more capabilities when the load increases.

In an interview, you were asked to briefly describe how emails containing malware or other contents are prevented from being delivered. Which of the following should be your reply?

• SMTP relays prevent unwanted mails from being delivered.
• X.500 prevents unwanted mails from being delivered.
• Mail gateways prevent unwanted mails from being delivered.
• LDAP prevents unwanted mails from being delivered.

Answer explanation

Mail gateways monitor emails for unwanted content and prevent these messages from being delivered.

Marnus is working as a cloud administrator, and he has been asked to perform segmentation on specific cloud networks. Which of the following should be done by Marnus?

• Remove individual accounts on file servers, machines, or authentication servers to restrict access and free up disc space, ports, and certificates.
• Create a virtual network that connects services and resources such as virtual machines and database applications.
• Create network rules for the services permitted between accessible zones to make sure endpoints belonging to other approved zones can reach them.
• Use automated inspection and integration services for authentication, authorization, encryption, availability, and policy compliance.

Answer explanation

Segmentation sets rules for accessing different services.

Which of the following is a feature of secrets management?

• Decreased latency
• Data availability
• Default encryption
• Data redundancy

Answer explanation

When secrets management is implemented, data is encrypted in transit and at rest with AES-256-bit encryption keys.

You are a cloud administrator, and you are asked to configure a VPC such that backend servers are not publicly accessible. What should you do to achieve this goal?

• Deploy backend servers in different availability zones
• Deploy the backend servers on premises
• Use private subnets for backend servers
• Implement audit logging on backend servers

Answer explanation

Backend servers can be configured with a private subnet to restrict public access.