2V0-21.23 Question 104
Select 3An organization is planning to implement Microsoft Virtualization-Based Security (VBS) in their vSphere environment. Which of the following use cases would benefit from enabling VBS?
- A
Protecting sensitive information in memory from malicious code using features like Credential Guard
- B
Enhancing virtual machine performance by reducing CPU overhead during intensive workloads
- C
Preventing kernel-level malware attacks by isolating the kernel in a secure enclave
- D
Improving network throughput by enabling virtual network offloading with SR-IOV
- E
Securing virtual machines by enabling Hypervisor-Protected Code Integrity (HVCI)
Show answer and explanation
Correct answers: A, C, E
Explanation
Microsoft Virtualization-Based Security (VBS) uses virtualization technology to create a secure, isolated memory region, allowing features such as Credential Guard and Hypervisor-Protected Code Integrity (HVCI) to protect sensitive data and prevent unauthorized code execution. It is particularly effective in use cases requiring enhanced security against credential theft and kernel-level malware attacks. However, VBS is not focused on improving performance or network optimization.
- A. Correct.
Correct. VBS can leverage features like Credential Guard to protect sensitive information, such as credentials, by isolating them in a secure environment.
- B. Incorrect.
Incorrect. While VBS provides security benefits, it is not designed to improve performance or reduce CPU overhead during workloads.
- C. Correct.
Correct. VBS isolates the kernel in a secure virtual enclave, which helps prevent kernel-level malware and unauthorized code execution.
- D. Incorrect.
Incorrect. VBS focuses on security enhancements and does not directly impact network throughput or network hardware optimizations like SR-IOV.
- E. Correct.
Correct. Hypervisor-Protected Code Integrity (HVCI) is a feature of VBS that ensures only trusted code can run in the kernel, thus securing virtual machines.