Which is NOT one of the six main virtualization security concerns?

Which is NOT one of the six main virtualization security concerns?

• A. Training and Education
• B. Change Control
• C. Asset Tracking and Management
• D. Incident Response and Recovery

Answer: (D)

In virtualization security, the focus is on governance and lifecycle controls that prevent risk through people, processes, and inventory. The items described are about building awareness, managing changes, and keeping track of all virtual assets. Training and Education builds the knowledge needed to recognize and avoid secure‑design mistakes. Change Control ensures that every modification to the virtual environment is authorized and documented, reducing the chance of risky configurations slipping in. Asset Tracking and Management provides visibility into all virtual resources so you know what exists, where it is, and what needs to be secured or patched. Incident Response and Recovery, while essential to any security program, is a reactive discipline that deals with detecting, responding to, and restoring from incidents after they occur. In the typical six main virtualization security concerns, this reactive aspect isn’t included as one of the core concerns, which is why this option isn’t part of that list. So, the best answer identifies the reactive incident response and recovery as not being one of the six main virtualization security concerns.

In virtualization security, the focus is on governance and lifecycle controls that prevent risk through people, processes, and inventory. The items described are about building awareness, managing changes, and keeping track of all virtual assets.

Training and Education builds the knowledge needed to recognize and avoid secure‑design mistakes. Change Control ensures that every modification to the virtual environment is authorized and documented, reducing the chance of risky configurations slipping in. Asset Tracking and Management provides visibility into all virtual resources so you know what exists, where it is, and what needs to be secured or patched.

Incident Response and Recovery, while essential to any security program, is a reactive discipline that deals with detecting, responding to, and restoring from incidents after they occur. In the typical six main virtualization security concerns, this reactive aspect isn’t included as one of the core concerns, which is why this option isn’t part of that list.

So, the best answer identifies the reactive incident response and recovery as not being one of the six main virtualization security concerns.