Virtualizatrion Concepts Flashcards
OBJ 4:2 Given a scenario, select and install storage devices
Virtualization
host computer installed with a hypervisor that can be used to install and manage multiple guest operating systems or virtual machines. (VMs)
Type 1 Hypervisor
Type I Hypervisor (Bare Metal)
Runs directly on the host hardware and functions as the
operating system.
Type II Hypervisor
Runs within the normal operating system
Virtualization
Ensure that each virtual machine runs its own copy of an operating
system
Server-based (Terminal services)
Server-based solution that runs the application on servers
in a centralized location
Client-based (Application streaming)
Client-based solution that allows an application to be
packaged up and streamed directly to a user’s PC
Containerization
Type of virtualization applied by a host operating system to provision an
isolated execution environment for an application
● Docker
● Parallels Virtuozzo
● OpenVZ
Containerization Vulnerabilities 1
When a physical server crashes, all the organizations hosted on that same server are affected
Containerization Vulnerabilities 2
An organization’s failure to secure the virtual environments hosted on a shared
server poses a security risk for the other organizations
How to minimize risk to physical servers from being overwhelmed?
Set up virtual servers in the cloud with proper failover, redundancy, and
elasticity
What can be another vulnerability to VMs from attackers?
Hosting all VMs on the same type of hypervisor can also be exploited
how to mitigate the risk associated with using the same type hypervisor?
How should an organization minimize the risk of attack when using a single platform hypervisor?
The organization should utilize -
● Proper configurations
● Patched and up-to-date hypervisor
● Tight access control
What is the purpose of hypervisors?
Manages the distribution of the physical resources of a server to the VMs
● Type I
o Bare metal
● Type II
o Hosted
What is the purpose of Container Based Virtualization (Containerization)
▪ Each container relies on a common host OS as the base for each
container
▪ Container-based virtualization has less resources because it doesn’t
require its own copy of the OS for individual container
Purpose for Hyperconverged Infrastructure?
Allows for the full integration of the storage, network, and servers
without hardware changes
Purpose for Application Virtualization?
Encapsulates computer programs from the underlying OS on which they
are executed
Purpose for Virtual Desktop Infrastructure (VDI)
Hosts desktop OSs within a virtualized environment hosted by a
centralized server or server farm
Purpose for Sandbox?
An isolated environment for analyzing pieces of malware
Purpose for Cross-Platform Virtualization?
Allows for the testing and running of software applications for different
operating systems
● Emulation - System imitation
● Virtualization - New “physical” machine
Questions to ask when considering VM?
Should I virtualize?
Questions ? Traditional VMs, or Containerization?
What are the risk vs rewards towards each decision.
Hypervisor
Manages the distribution of the physical resources of a server to the VMs
Type I Hypervisor
Bare metal
Type II Hypervisor
Hosted
Container-Based Virtualization (Containerization)
▪ Each container relies on a common host OS as the base for each
container
▪ Container-based virtualization has less resources because it doesn’t
require its own copy of the OS for individual container
Hyperconverged Infrastructure
Allows for the full integration of the storage, network, and servers
without hardware changes
Application Virtualization
Encapsulates computer programs from the underlying OS on which they
are executed
Virtual Desktop Infrastructure (VDI)
Hosts desktop OSs within a virtualized environment hosted by a
centralized server or server farm
Sandbox
An isolated environment for analyzing pieces of malware
Cross-Platform Virtualization
Allows for the testing and running of software applications for different
operating systems
● Emulation - System imitation
● Virtualization - New “physical” machine
Resource Requirements
Focus on four main areas - CPU and Virtualization Extensions, Storage, System Memory, and Networking.
Resource Requirements - Second Level Address Translation (SLAT)
Improves the performance of virtual memory when running multiple
virtual machines on a single physical host
Resource Requirements - Second Level Address Translation (SLAT) - Intel
Extended Page Table (EPT)
Resource Requirements - Second Level Address Translation (SLAT) - AMD
Rapid Virtualization Indexing (RVI)
Resource Requirements - CPU - x86
32-bit processor
32-bit operating system can only access 4GB of RAM
Resource Requirements - CPU - x64
16 exabytes of RAM
32-bit processor cannot run a 64-bit application
Resource Requirements - CPU - ARM
Reduced instruction set and computer architecture in a computer
processor
Resource Requirements - System Memory
Amount of physical memory installed on a physical server
Barebones Windows installation takes 20-50 gigabytes of space
Linux installation takes 4-8 gigabytes of space
Mac environment takes 20-40 gigabytes of space
Resource Requirements - Networking - NIC teaming configuration allows multiple cards for higher speeds
CPU, processor, and capabilities
System memory
Networking
Storage