Section 9 OBJ 4.2: Virtualization

Question 1

Virtualization

Answer 1

Host computer installed with a hypervisor that can be used to install and manage multiple guest operating systems or virtual machines
the creation of a virtual version of a computer by simulating the hardware functionality of a computer within a virtual environment

Question 2

Hypervisor

Answer 2

Used to manage the distribution of resources to a virtual machine

Question 3

Type I Hypervisor (Bare Metal)

Answer 3

Hardware -> Hypervisor -> Guest OSes
Runs directly on the host hardware and functions as the operating system
Faster and more efficient than Type II
ex: Hyper-V

Question 4

Type II Hypervisor (Hosted)

Answer 4

Hardware -> Host OS -> Hypervisor -> Guest OSes
Runs within the normal operating system
ex: VMware, VirtualBox

Question 5

Server-based application virtualization (Terminal Services)

Answer 5

Server-based solution that runs the application on servers in a centralized location
Users access the application through remote client protocols

Question 6

Client-based application virtualization (Application Streaming)

Answer 6

Client-based solution that allows an application to be packaged up and streamed directly to a user’s PC

Question 7

Containerization

Answer 7

Type of virtualization applied by a host operating system to create an isolated execution environment for an application
Containers uses a lot less storage space and processing power by sharing the same operating system and files
ex: Docker, Parallels Virtuoso

Question 8

Hyperconverged Infrastructure

Answer 8

Allows for the full integration of the storage, network, and servers without hardware changes

Question 9

Application Virtualization

Answer 9

Encapsulates computer programs from the underlying OS on which they are executed

Question 10

Virtual Desktop Infrastructure (VDI)

Answer 10

Hosts desktop OSes within a virtualized environment hosted by a centralized server or server farm

Question 11

Sandbox

Answer 11

an isolated environment for analyzing pieces of malware

Question 12

Cross-Platform Virtualization

Answer 12

Allows for the testing and running of software applications for different operating systems

Question 13

Emulation

Answer 13

system imitation
different from virtualization because virtualization creates a new “physical” machine

Question 14

Second Level Address Translation (SLAT)

Answer 14

Improves the performance of virtual memory when running multiple virtual machines on a single physical host
Intel: Extended Page Table (EPT)
AMD: Rapid Virtualization Indexing (RVI)

Question 15

VM Escape

Answer 15

threat actor attempts to get out of an isolated VM and send commands to the underlying hypervisor
Easier to perform on a Type II hypervisor than a Type I Hypervisor
VM to Hypervisor

Question 16

VM Hopping

Answer 16

Threat actor attempts to move from one VM to another on the same host
VM to VM

Question 17

Sandbox Escape

Answer 17

Occurs when an attacker circumvents sandbox protections to gain privileged access to the protected OS or other processes

Question 18

Live migration

Answer 18

Migrates the VM from one host to another.
Occurs on a trusted network or utilizes encryption

Question 19

Data remnants

Answer 19

leftover pieces of data that may exist in the hard drive which are no longer needed

Question 20

VM Sprawl

Answer 20

uncontrolled deployment of virtual machines