QuestionQ220Verified/Asset SecurityCopy linkReport a problemAsk AstroTutorSave questionHow can protection of hypervisor host and software-administration functions be BEST achieved?AEnforce network controls using a host-based firewall.BDeploy the management interface in a dedicated virtual network segment.CThe management traffic pathway should have separate physical network interface cards (NIC) and network.DDeny permissions to specific virtual machines (VM) groups and objects.Show AnswerAnswerExplanationHypervisor management traffic requires strong isolation from VM and other network traffic. Dedicated physical NICs and a separate physical network reduce exposure to compromise of shared virtual-network paths and provide the recommended protection boundary.Learn moreNIST SP 800-125B: Secure Virtual Network Configuration for VM ProtectionShow comments5Show commentsCommunity DiscussionNo comments yet. Be the first to start the discussion!
Community Discussion