Implementing Virtualization

Question 1

which type of hypervizor runs directly on the system hardware, without an operating system?

Answer 1

Type I Hypervizor

Question 2

A snapshot provides you with what? What is it generally used for?

Answer 2

A copy of the VM at a moment in time. It’s used as a backup before making system changes for instance.

Question 3

What are 3 risks associated with virtualization?

Answer 3

VM Escape, VM Sprawl and Loss of Confidentiality (rogue system admin can easily copy an entire VM and data)

Question 4

If a virtual desktop has non-persistence, what does that mean?

Answer 4

it means the desktop served to users is selected from a pre-configured snapshot, it won’t save any customization by the user.

Question 5

Why is loss of confidentiality a greater risk with VMs?

Answer 5

Because the VMs are stored as files, entire systems (web host to database etc) can be copied with ease to another location.

Question 6

Name the main type of attack associated with VMs and what it does

Answer 6

the attack is called VM Escape

it allows an attacker to access the host system from within the virtual system