CCSP: Certified Cloud Security ProfessionalDemo

By ISC · Question Mode

QuestionQ383

Cloud Platform & Infrastructure Security

Under which condition is a virtual machine vulnerable to attacks when a physical server in the same condition would not be?

  • A When it is behind a WAF
  • B When it is behind an IPS
  • C When it is not patched
  • D When it is powered off
Explanation

A powered-off virtual machine can still be attacked through its stored virtual disk, configuration, and state files from the host or storage layer. VM security controls such as shielding and virtual-disk encryption are designed to protect against inspection, theft, and tampering of VM data, including offline disclosure risks.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!