Security+® Practice Tests

3. Architecture and Design

Domain 3 Questions

1. Ralph is working with his organization to implement a new cloud storage solution. He would like to protect the data stored in this cloud service against an attack being waged by a malicious insider employed by the vendor. What is the best control to provide this defense?

   A. Two-factor authentication

   B. Encryption

   C. Least-privilege access controls

   D. Strong passwords

2. Ron is concerned about the potential of attackers exploiting issues in the operating system supporting a virtualization hypervisor to gain access to information stored by guest operating systems. What type of hypervisor can he use to minimize this risk?

   A. Type 1 hypervisor

   B. Type 2 hypervisor

   C. Type 3 hypervisor

   D. Type 4 hypervisor