Crucial Exams

ISC2 Certified Cloud Security Professional (CCSP) Practice Question

During a security assessment of a multitenant IaaS environment that relies on bare-metal (Type-1) hypervisors, you discover that virtual machines from different customers may be scheduled to share the same physical CPU cores simultaneously, potentially exposing them to cache-based side-channel attacks such as Spectre or Prime+Probe. Without purchasing new hardware, which hypervisor configuration change would most effectively reduce this specific risk?

  • Replace default drivers with paravirtualized network and storage drivers inside each guest.

  • Configure vCPU pinning (CPU affinity) so each tenant's virtual machines are restricted to a dedicated set of physical cores.

  • Permit nested virtualization so customers can run their own hypervisors inside the guest OS.

  • Enable memory ballooning to let the hypervisor reclaim unused guest RAM.

ISC2 Certified Cloud Security Professional (CCSP)
Cloud Platform & Infrastructure Security
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Wipe Score
Bash, the Crucial Exams Chat Bot
AI Bot