Section 8 - Virtualisation Concepts Flashcards

1
Q

What is at the heart of cloud computing

A

Virtualisation

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What is virtualisation the heart of

A

cloud computing

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What does the keyword “summarise” refer to when answering a question

A

Understand meaning, consolidate that info and answer the q

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is containerization a newer form of

A

Virtualisation

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is the newer form of virtualisation called

A

containerization

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Explain virtualisation

A

Host computer installed with a hypervisor that can be used to install and manage multiple guest operating system or virtual machines

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Explain Type 1 Hypervisor (bare metal)

A

Runs directly on the host hardware and functions as the OS (e.g. hyperV)
The hypervisor is the OS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Type II Hypervisor

A

runs within the normal OS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

When running a VM what must you ensure in regard to OS

A

That you run the VM’s OS as its own copy

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What do terminal services refer to

A

server-based

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

what does application streaming refer to

A

client-based

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Explain terminal services

A

server-based solution that runs the application on servers in a centralized location (e.g. Microsoft’s RDP)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Explain application streaming

A

Client-based solution that allows an application to be packaged and streamed directly to a user’s PC (e.g. Microsoft’s App-V)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is containerization

A

Type of virtualisation applied by a host OS to provision an isolated execution environment for an application

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Examples of containerization

A

docker, parallels virtuozzo, OpenVZ

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

in the case of server failure what is recommended as a backup

A

setting up virtual serverS in the cloud with proper failover, redundancy, elasticity

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What can also be done to prevent exploitation in terms of hypervisors

A

Not hosting all VMs on the same type of hypervisor (Oracle, VMware etc)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Why is containerization considered secure

A

because it provides resource segmentation and separation at the OS level

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

When moving over to virtualization and cloud computing what are some dangers

A

1) If the physical server crashes, all the orgs hosted on that same server are affected
2) An org’s failure to secure the virtual envs hosted on the shared server poses a security risk for the other orgs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

To mitigate risk to our server what should be done

A

1) proper config
2) patched and up-to-date hypervisor
3) tight access control

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What does a hypervisor do

A

manages the distribution of the physical resources of a server to the VMs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What type of hypervisor does bare metal refer to

A

Type I

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What type of hypervisor does Hosted refer to

A

Type II

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

Adv of container-based virtualisation

A

Has less resources because it doesn’t require its own copy of the OS for individual containers

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

What does Hyperconverged Infrastructure allow for

A

Full integration of the storage, network, and servers without hardware changes

26
Q

What does application virtualisation do

A

Encapsulates computer programs from the underlying OS on which they are executed

27
Q

Explain virtual desktop infrastructure (VDI)

A

Hosts desktop OSs within a virtualized environment hosted by a centralized server or server farm

28
Q

What’s a sandbox

A

An isolated environment for analysing pieces of malwre

29
Q

What does cross-platform virtualization allow for

A

testing and running of software applications for different OSs

30
Q

What is Emulation

A

system imitation

31
Q

what is virtualization (3 words)

A

New “physical” machine

32
Q

What is Intel’s version of virtualisation called?

A

VT-x

33
Q

What is AMD’s version of virtualisation called

A

AMD-V

34
Q

What does Second Level Address Translation (SLAT) do

A

Improves the performance of virtual memory when running multiple VMs on a single physical host

35
Q

What is a feature of modern CPUs that enhances the performance of virtual memory and get better performance out of CPU

A

Second Level Address Translation (SLAT)

36
Q

What is Intel’s version of SLAT called

A

Extended Page Table (EPT)

37
Q

What is AMD’s version of SLAT called

A

Rapid Virtualization Indexing (RVI)

38
Q

x86 refers to

A

32-bit processor

39
Q

x64 refers to

A

64-bit processor

40
Q

Define ARM processor

A

reduced instruction set and computer arch in a computer process (modern macs - M1,M2)

41
Q

Type of processors

A

x86(32bit), x64(64bit), ARM

42
Q

Disadvantage of ARM

A

Can’t natively host OS that don’t use ARM-based processors

43
Q

What is system memory

A

Amount of physical memory installed on a physical server

44
Q

Typically how much space does a Barebones Windows installation take

A

20-50 Gigabytes, 40-50 recommended as you’re most likely going to install thing

45
Q

Linux installation space

A

4-8 gigabytes

46
Q

Mac environment space

A

20-40 Gigabytes

47
Q

What is the use of multiple network cards called

A

NIC Teaming Configuration

48
Q

What does NIC teaming config allow for

A

use of multiple cards for higher speeds

49
Q

What are the 4 areas you want to consider when it comes to resource requirement

A

CPU capabilities, System memory, Storage, Networking

50
Q

What is a VM Escape

A

Threat attempts to get out of an isolated VM and send commands to the underlying hypervisor

51
Q

Which Type hypervisor is easier to perform a VM Escape on

A

Type II

52
Q

What is VM Hopping

A

Threat attempts to move from one VM to another on the same host

53
Q

VM hopping (3 words)

A

VM to VM

54
Q

VM Escape (6 words)

A

VM to hypervisor or host OS

55
Q

What can we do to prevent VM Escape/Hopping

A

Make sure our hypervisor is:
1)up to date
2)patched
3)securely configured

56
Q

What is a sandbox escape

A

Occurs when an attacker circumvents sandbox protections to gain access to the protected OS or other privileged process

57
Q

How to prevent sandbox escape

A

make sure:
1)Patched
2)uptodate
3)strong endpoint software protection
4)Limited extensions/addons

58
Q

What are data remnants

A

leftover pieces of data that may exist in the hard drive that are no longer needed

59
Q

What is a VM sprawl

A

uncontrolled deployment of virtual machines

60
Q

What concerns must we also attend to with VMs

A

live migration, data remnants

61
Q

What must we ensure with live migration

A

Only occurs on a trusted network or utilizes proper encryption

62
Q

What must we need to prevent exploitation of data remnants

A

Encrypt VM storage location & destroy the encryption key