CISA Question 166

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose B1

  The most significant risk in a virtualized environment is the concentration of multiple virtual machines (VMs) on a single physical host. If that host fails, all hosted VMs are impacted, leading to a single point of failure (SPOF) that can disrupt multiple systems or services simultaneously. Why not the others? A. Insufficient network bandwidth This can affect performance but is not unique to virtualization and typically has less critical impact than a SPOF. C. Inadequate configuration A real risk, especially for security, but it’s not as immediately impactful as a complete outage caused by a SPOF. D. Performance issues of hosts Important to monitor, but these issues tend to degrade service rather than completely stop it as a SPOF would.

• Chose B1

  Correct answer is B. CISA review manual 27th Edition states, "Although virtualization offers significant advantages, they bring risk that an enterprise must manage effectively. Because the host in a virtualized environment represents a potential single point of failure within the system, a successful attack on the host could result in a compromise that is larger in both scope and impact."

• Chose D1

  D. Performance issues of the host. This is because virtual systems are highly dependent on how well the host system is performaning. Any system failure with the host, would automatically have a ripple effect on all the virtual systems depending on it.