NEW
Font size
WorksheetsModule 10 CSEC
Total questions: 68
Worksheet time: 34mins
What does virtualization refer to in IT infrastructure?
A physical representation of hardware components
A software-based virtual representation of an IT infrastructure
A method to increase physical storage capacity
A technique to enhance network speed
What does the virtualization framework do to physical resources?
Combines them into a single environment
Divides them into multiple individual simulated environments
Converts them into physical hardware
Eliminates the need for an operating system
Which of the following is a type of virtualization?
Full Virtualization
Storage Device Virtualization
Operating System Virtualization
OS assisted Virtualization
What is an approach to virtualization that involves the operating system?
Full Virtualization
OS assisted Virtualization
Storage Device Virtualization
Network Virtualization
Which level of virtualization involves managing storage devices?
File System Virtualization
Server Virtualization
Storage Device Virtualization
Desktop Virtualization
Which of the following is NOT a type of virtualization?
Network Virtualization
Fabric Virtualization
Desktop Virtualization
Operating System Virtualization
What is the role of a Hypervisor in virtualization?
It is an independent instance of an operating system.
It provides computing resources to support virtual machines.
It enables multiple guest operating systems to share a host’s hardware resources.
It is used to directly manage virtual machines.
Which component acts as an independent instance of an operating system in virtualization?
Hypervisor
Guest Machine
Management Server
Management Console
What is the function of the Management Console in virtualization?
It provides computing resources to support virtual machines.
It is used to access, configure, and manage the virtualization product.
It enables multiple guest operating systems to share a host’s hardware resources.
It is an independent instance of an operating system.
Which component provides the physical resources needed to support virtual machines?
Guest Machine
Management Server
Host Machine
Management Console
Which of the following is a virtualization enabler that focuses on separating network control from forwarding functions?
Software Defined Network (SDN)
Network Function Virtualization (NFV)
Network Virtualization (NV)
Virtual Private Network (VPN)
What does NFV stand for in the context of virtualization enablers?
Network Function Virtualization
Network Feature Virtualization
Network Framework Virtualization
Network File Virtualization
Which virtualization enabler is primarily concerned with the abstraction of network resources?
Software Defined Network (SDN)
Network Function Virtualization (NFV)
Network Virtualization (NV)
Network Security Virtualization (NSV)
What is Virtual Desktop Infrastructure (VDI)?
A type of physical desktop setup
A virtualization solution for desktop OSes
A cloud storage service
A network security protocol
Where are the desktop OSes of an organization provisioned and operated in a VDI setup?
On individual laptops
At a data center
On mobile devices
On local servers
What is the role of a connection broker in a VDI setup?
To store data securely
To initiate connections to virtual desktops
To manage network traffic
To provide antivirus protection
What is the role of a Container Engine?
Provides a managed environment for deploying containerized applications
Manages the lifecycles of software containers
Virtualizes the operating system
Develops scalable applications
Which of the following is an example of Container Orchestration Software?
Docker Swarm
VirtualBox
Apache Hadoop
Microsoft Azure
What does CaaS stand for in the context of containers?
Containers as a Service
Cloud as a Service
Computing as a Service
Communication as a Service
What is the primary benefit of using CaaS?
Developing rich, scalable containerized applications
Managing hardware resources
Enhancing network security
Reducing software costs
What type of virtualization do containers provide?
Hardware-level virtualization
OS-level virtualization
Application-level virtualization
Network-level virtualization
Which of the following is a characteristic of virtual machines?
Lightweight
Shares the host OS
Heavyweight
Requires less memory space
What is an example of a container technology?
VMWare
Hyper-V
Docker
Virtual Box
How do containers differ from virtual machines in terms of memory usage?
Containers allocate required memory
Containers require less memory space
Containers use more memory
Containers have no memory requirements
What is Docker primarily used for?
Developing and packaging applications
Designing user interfaces
Creating databases
Writing code in Python
What type of service does Docker provide?
Software-as-a-Service (SaaS)
Platform-as-a-Service (PaaS)
Infrastructure-as-a-Service (IaaS)
Network-as-a-Service (NaaS)
What is Kubernetes also known as?
K9s
K8s
K7s
K6s
Who developed Kubernetes?
Microsoft
Amazon
IBM
What type of platform is Kubernetes?
Closed-source
Proprietary
Open-source
Licensed
What does Kubernetes manage?
Virtual machines
Containerized applications and microservices
Databases
Network routers
What does Kubernetes provide for applications?
Security and encryption
Resilient framework for managing distributed containers
User interface design
Data analytics
What is Docker primarily used for?
Building and running containerized applications on a single operating system
Managing multiple Docker hosts
Automating the process of scaling containers
Coupling with any containerization technology
What role does Kubernetes play in container management?
It is a programming language for building applications
It is a container orchestration platform for automating container processes
It is a tool for creating lightweight binaries
It is a single operating system for running containers
How can Kubernetes be used with Docker?
By replacing Docker entirely
By managing Docker hosts on multiple operating systems
By building applications using the Go programming language
By specifying application configurations with YAML files
What is a common feature of both Docker and Kubernetes?
They are both used for creating operating systems
They are both based on microservices architecture
They both replace the need for containerization
They are both programming languages
Which of the following is a challenge related to container security?
Inflow of vulnerable source code
High cost of deployment
Limited scalability
Slow data processing
What is a potential risk when there is a lack of visibility in container security?
Increased transparency
Compromising secrets
Enhanced performance
Reduced attack surface
Which challenge involves the risk of containers affecting each other due to shared resources?
DevOps speed
Noisy neighboring containers
Bypassing isolation
Ecosystem complexity
What is a consequence of bypassing isolation in container environments?
Improved security
Container breakout to the host
Faster deployment
Simplified management
Which of the following is considered an image threat in container security?
Insecure connections to registries
Vulnerabilities within the runtime software
Image vulnerabilities
Unbounded network access from containers
What is a registry threat in container security?
Embedded malware
Stale images in registries
App vulnerabilities
Rogue containers
Which of the following is a container threat?
Use of untrusted images
Insufficient authentication and authorization restrictions
Insecure container runtime configurations
Embedded clear text secrets
Which of the following is a threat associated with the Host OS in container security?
Unbounded administrative access
Large attack surface
Poorly separated inter-container network traffic
Mixing of workload sensitivity levels
What is a potential threat to the orchestrator in container security?
Shared kernel
Host OS file system tampering
Unauthorized access
Improper user access rights
Which threat involves the risk of tampering with the Host OS file system?
Orchestrator node trust
Host OS component vulnerabilities
Host OS file system tampering
Mixing of workload sensitivity levels
What is a concern related to the mixing of workload sensitivity levels in container security?
Host OS component vulnerabilities
Orchestrator node trust
Mixing of workload sensitivity levels
Shared kernel
What is the primary goal of an "Escaping" attack in Docker security?
Gaining unauthorized access to a single container
Gaining access to the Docker registry
Gaining root access on the host server by a user with access to a container
Gaining access to a container to attack other containers
Which type of attack involves gaining access to a container and using it to attack other containers on the same host or within the local network?
Docker Registry Attacks
Inter-Container Attacks
Cross-Container Attacks
Escaping
What is the focus of Docker Registry Attacks?
Gaining root access on the host server
Gaining unauthorized access to a single container
Gaining access to the Docker registry
Attacking other containers on the same host
Which attack is characterized by gaining unauthorized access to a single container?
Escaping
Cross-Container Attacks
Docker Registry Attacks
Inter-Container Attacks
Which of the following is a Kubernetes security challenge related to network traffic?
Increased attack surface
Explosion of east-west traffic
Compliance issues
Default configuration settings
What is a challenge in Kubernetes that involves managing a large number of containers?
Automating security to keep pace
Communication between containers
Too many containers
Runtime security challenges
Which Kubernetes security challenge involves ensuring that security measures are up-to-date with the latest threats?
Increased attack surface
Automating security to keep pace
Default configuration settings
Communication between containers
What is a potential issue in Kubernetes related to the initial setup and settings?
Compliance issues
Default configuration settings
Runtime security challenges
Explosion of east-west traffic
What is another name for serverless computing?
Cloud-based architecture
Function-as-a-Service (FaaS)
Infrastructure-as-a-Service (IaaS)
Platform-as-a-Service (PaaS)
What does serverless computing eliminate the need for?
Managing application code
Managing server and hardware
Managing user interfaces
Managing network security
Who provides the application infrastructure in serverless computing?
The developers
The cloud vendor
The end users
The network administrators
Who is responsible for defining container configuration files in a container-based system?
The cloud service provider
The developer
The end user
The network administrator
What happens to a serverless function once it has completed running?
It continues running until manually stopped
It is automatically destroyed by the cloud environment
It requires manual destruction by the developer
It runs indefinitely
Which type of deployment charges only for the resources consumed?
Container deployment
Serverless deployment
Virtual machine deployment
Dedicated server deployment
What is a characteristic of containers regarding data storage?
Containers store data permanently
Containers store data in temporary storage or mapped storage volumes
Containers do not support data storage
Containers store data in the cloud
What is a limitation of serverless functions compared to containers?
Serverless functions can run complex applications
Serverless functions support temporary storage
Serverless functions are suitable only for microservices applications
Serverless functions can run on a cluster of host nodes
What is a common cause of VM sprawl?
Proper policy implementation
Over-provisioning of resources
Lack of proper policy implementation
Frequent VM updates
Which of the following is a method to avoid VM sprawl?
Increase the number of VMs
Perform an audit
Ignore idle resources
Use random naming conventions
What should be done with orphaned snapshots to prevent VM sprawl?
Archive them
Ignore them
Clear them
Duplicate them
Which tool is recommended for effective VM management to avoid sprawl?
A random file manager
An effective VM management tool
A basic text editor
A spreadsheet application
What is one method to minimize VM escape attack attempts?
Use outdated software
Place VMs on independent security zones
Install unnecessary software
Ignore software updates
Which of the following is a recommended practice for protecting against VM escape attacks?
Frequently update or patch the VM software
Install all available software
Use a single security zone for all VMs
Avoid patching the VM software
