2V0-21.23 Question 103
Select 3An organization is planning to deploy a highly secure environment for critical workloads running on VMware vSphere. They want to ensure that the virtual machines are protected against malicious attacks, even if the hypervisor is compromised. The infrastructure team is considering integrating Microsoft virtualization-based security (VBS) within the vSphere environment. Which of the following are valid use cases for implementing VBS in this scenario?
- A
Protecting guest operating systems by isolating sensitive security information from malware or unauthorized access
- B
Enabling secure boot for virtual machines to prevent unauthorized code or malware from executing during the boot process
- C
Providing encryption for virtual machine disk files to protect data at rest
- D
Implementing Credential Guard to secure credentials and prevent theft of NTLM hashes or Kerberos tickets
- E
Enhancing performance of virtual machines by offloading CPU workloads to the hypervisor
Show answer and explanation
Correct answers: A, B, D
Explanation
Microsoft virtualization-based security (VBS) uses hardware virtualization features to create an isolated and secure environment within the operating system, protecting sensitive information and credentials from malware or unauthorized access. Valid use cases include isolating sensitive information, enabling secure boot, and implementing features like Credential Guard to secure credentials. However, VBS is not designed for encrypting VM disk files or enhancing performance by offloading workloads.
- A. Correct.
Correct - VBS isolates sensitive security information, such as credentials, from the rest of the operating system, making it inaccessible to malware or unauthorized users.
- B. Correct.
Correct - VBS supports secure boot, which ensures that only trusted code is executed during the boot process, enhancing the security of virtual machines.
- C. Incorrect.
Incorrect - While encryption of virtual machine disk files protects data at rest, it is not a specific use case for VBS, as VBS focuses on in-memory security and operating system protection.
- D. Correct.
Correct - Credential Guard, a feature of VBS, helps secure credentials by isolating them, preventing credential theft and lateral movement attacks.
- E. Incorrect.
Incorrect - VBS is a security technology designed to improve security, not performance. It does not offload CPU workloads to the hypervisor.