During a recent audit, the auditors cited the company’s current virtual machine infrastructure as a
concern. The auditors cited the fact that servers containing sensitive customer information reside
on the same physical host as numerous virtual machines that follow less stringent security guild
lines. Which of the following would be the best choice to implement to address this audit concern
while maintain the current infrastructure?
A.
Migrate the individual virtual machines that do not contain sensitive data to separate physical
machines
B.
Implement full disk encryption on all servers that do not contain sensitive customer data
C.
Move the virtual machines that contain the sensitive information to a separate host
D.
Create new VLANs and segment the network according to the level of data sensitivity
Some of the questions lack precision. To begin with, what on earth is a “guild line?”
We all know that the writer meat “guideline”, but badly written questions in such “a global certification” really should be avoided as it does not look very professional.
Anyways. Here is how I see it:
• We have an audit
• The audit determines that “servers containing sensitive customer information reside on the same physical host alongside other VMs with poor levels of security
• And finally: Whatever action we take MUST NOT affect (change) the current infrastructure
The answer of choice is: “D-Create new VLANs and segment the network according to the level of data sensitivity.”
Yet, to my mind creating V-Lans and segmenting the network according to the level of data sensitivity is in fact a blatant contravention of the requirement of “not affecting (changing) the current infrastructure”. So this means that D cannot be an answer.
So I must then find a way to segregate ““servers containing sensitive customer information” from “other VMs with poor levels of security” (which happen to be residing on the same host)
So the best way would be to “C.- Move the virtual machines that contain the sensitive information to a separate host”
0
0