Virtualization

Correct Answer: Data encryption

Data encryption is the best security measure to ensure data security in a virtual environment that processes sensitive information. Encrypting the data protects it from unauthorized access, even if the virtual machines or storage are compromised. Disabling VM migration, removing virtual switches, or using a single hypervisor do not directly address the security of the sensitive data itself. These measures might limit the flexibility or scalability of the virtual environment without providing the necessary data protection. Encrypting the sensitive data, both at rest and in transit, is the most effective way to maintain its confidentiality and integrity in a virtual environment.

Correct Answer: Create separate VLANs for each department.

Creating separate VLANs for each department is the best solution because it allows the network traffic to be logically segmented by department, improving both performance and security by reducing broadcast traffic and containing potential security risks within each department. This method allows flexibility and control without changing the physical layout of the network. Using a single VLAN for all departments would negatively affect the performance and security as traffic would not be separated. Disabling virtualization for the entire network would be counterproductive as it negates many benefits that virtualization offers such as cost efficiency and manageability. Using a separate physical switch for each department would be costly and would not be a practical solution in a virtual environment.

Correct Answer: Snapshot

A snapshot is a point-in-time copy of a VM while it is running, without the need to power it off. Other options either require powering off the VM or don't capture the VM's memory state.