2V0-21.23 Question 105
Select 3An organization is planning to deploy a virtualized environment using VMware vSphere. They need to enhance security by enabling Microsoft virtualization-based security (VBS) for specific workloads. Which of the following are valid use cases for implementing VBS in this environment?
- A
Protecting sensitive data by isolating critical processes in a secure memory region
- B
Enabling dynamic resource allocation for better performance of virtual machines
- C
Mitigating kernel-level malware attacks by enforcing code integrity policies
- D
Improving fault tolerance by replicating memory pages across hosts
- E
Securing credentials and secrets by leveraging a virtualized secure enclave
Show answer and explanation
Correct answers: A, C, E
Explanation
Microsoft virtualization-based security (VBS) is designed to enhance the security of virtualized workloads by creating a hardware-isolated secure environment. Key use cases include isolating sensitive data, protecting against kernel-level malware, and securing credentials using virtualized secure enclaves. VBS does not address performance optimization or fault tolerance, as these are unrelated to its security-focused capabilities.
- A. Correct.
Correct: One of the primary use cases of VBS is to isolate critical processes and sensitive data in a secure memory region, protecting against malicious access.
- B. Incorrect.
Incorrect: VBS is not related to resource allocation or performance optimization; it focuses on enhancing security.
- C. Correct.
Correct: VBS helps mitigate kernel-level malware attacks by enforcing code integrity policies, ensuring that only trusted code runs in the kernel.
- D. Incorrect.
Incorrect: Fault tolerance and memory replication are not functions of VBS; these are features of VMware HA and vSphere clustering.
- E. Correct.
Correct: VBS can leverage a virtualized secure enclave to secure credentials and secrets, preventing unauthorized access and credential theft.