Exam CISSP Topic 5 Question 550 Discussion

If compromised, the virtual machine monitor would lead to the exploitation of multiple virtual machines. The virtual machine monitor, also known as the hypervisor, is the software layer that creates and manages the virtual machines on a physical host. The virtual machine monitor controls the allocation and distribution of the hardware resources, such as CPU, memory, disk, and network, among the virtual machines. The virtual machine monitor also provides the isolation and separation of the virtual machines from each other and from the physical host. If the virtual machine monitor is compromised, the attacker can gain access to all the virtual machines and their data, as well as the physical host and its resources.
* A. Virtual device drivers are not the components that would lead to the exploitation of multiple virtual machines if compromised, but rather the components that enable the communication and interaction between the virtual machines and the physical devices. Virtual device drivers are the software modules that emulate the functionality and behavior of the physical devices, such as keyboards, mice, disks, or network cards, for the virtual machines. Virtual device drivers can be compromised by malicious code or data, but they only affect the specific virtual machine that uses them, not the other virtual machines or the physical host.
* C. Virtual machine instance is not the component that would lead to the exploitation of multiple virtual machines if compromised, but rather the component that represents a single virtual machine. A virtual machine instance is the software implementation of a computer system that runs on the virtual machine monitor and shares the hardware resources with other virtual machines. A virtual machine instance can be compromised by malware or attacks, but it only affects the security and functionality of that virtual machine, not the other virtual machines or the physical host, unless the virtual machine monitor is also compromised.
* D. Virtual machine file system is not the component that would lead to the exploitation of multiple virtual machines if compromised, but rather the component that stores the data and configuration of a virtual machine. A virtual machine file system is the logical structure that organizes the files and directories of a virtual machine on the physical storage device. A virtual machine file system can be compromised by unauthorized access or modification, but it only affects the integrity and availability of that virtual machine, not the other virtual machines or the physical host, unless the virtual machine monitor is also compromised.
References: CISSP All-in-One Exam Guide, Eighth Edition, Chapter 5, page 269; Official (ISC)2 CISSP CBK Reference, Fifth Edition, Chapter 5, page 234