Exam CSSLP topic 2 question 51 discussion

The correct answers are: B. It adds a layer of security for defense-in-depth. C. It decreases exposure of weak software. D. It decreases configuration effort. Virtualization can help in the implementation of Defense-in-Depth, which is an information assurance strategy that provides multiple layers of defense/ protection against different kinds of cyber attacks or vulnerabilities. By dividing hardware into virtual components and running separate operating systems on each component, virtualization reduces the exposure to weak points present in previous technologies, since any kind of malware attack or vulnerability affecting one VM (virtual machine) does not necessarily affect other VMs running on the same physical server. Through Virtual Machine snapshots feature, it becomes easy for administrators to capture and restore entire application environments almost instantly providing elasticity toward development efforts as well making backup recovery much more manageable than traditional enterprise models where every application has its own piecemeal storage disk assigned to it.