Certified Information Systems Auditor (CISA) — Question 794

Which of the following is the MOST important control for virtualized environments?

Answer options

• A. Hardening for the hypervisor and guest machines
• B. Regular updates of policies for the operation of the virtualized environment
• C. Redundancy of hardware resources and network components
• D. Monitoring utilization of resources at the guest operating system level

Correct answer: A

Explanation

The correct answer is A because hardening the hypervisor and guest machines is essential to protect against vulnerabilities that can be exploited in a virtualized environment. Options B, C, and D, while important, focus on operational policies, hardware redundancy, and resource monitoring, which do not directly address the security of the virtualization platform itself.