SSCP Systems and Application Security Practice Question
A company uses virtualization extensively. The security team discovers that developers have created many unmanaged virtual machines that are not tracked in the configuration management database (CMDB). Which risk is MOST directly associated with this situation?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
VM sprawl
VM sprawl refers to the proliferation of unmanaged VMs, increasing attack surface and management complexity.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
VM escape
Why it's wrong here
VM escape is an attack from VM to hypervisor, not directly caused by sprawl.
- ✓
VM sprawl
Why this is correct
Unmanaged VMs accumulating is known as VM sprawl.
- ✗
Snapshot vulnerability reintroduction
Why it's wrong here
Snapshot risks relate to unpatched snapshots, not necessarily unmanaged VMs.
- ✗
Insecure hypervisor configuration
Why it's wrong here
Hypervisor misconfiguration is a separate issue.
Go deeper
Related to this question
About these practice questions
One of 920 original SSCP practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SSCP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SSCP exam.