60 real Cloud Virtualization questions from the Virtualization bank, as asked in Indian campus drives and tech interviews. Every question has a verified answer and an AI-tutor explanation on placd — free to start.
1. What is AWS Nitro?
Mid
A.Specific instance sizes expose hardware virtualization to guests so you can run hypervisors inside a VM.
B.An AWS open-source KVM-based microVM monitor that boots minimal VMs in milliseconds, powering Lambda and Fargate isolation
C.a KVM-based lightweight hypervisor offloading I/O to dedicated cards
D.The AWS platform that offloads networking, storage and security onto dedicated Nitro cards and a minimal Nitro hypervisor, giving near bare-metal performance
A.AWS Nitro — An Azure VM security setting providing secure boot, vTPM and measured boot to protect against rootkits and boot-level attacks
B.AWS Nitro — EC2 instance types that expose the physical server directly with no hypervisor, used for nested virtualization or licensing that requires bare metal
C.AWS Nitro — a KVM-based lightweight hypervisor offloading I/O to dedicated cards
D.AWS Nitro — Azure compute runs on a customized Hyper-V hypervisor, so Azure VM features map closely to on-prem Hyper-V generations and integration services
A.Azure hypervisor — A Google user-space application kernel that intercepts syscalls to sandbox containers, offering stronger isolation than namespaces without a full VM
B.Azure hypervisor — Offloads networking, storage, and security to dedicated cards and a lightweight hypervisor for near-bare-metal performance.
C.Azure hypervisor — The transparent movement of a running cloud VM off hardware needing maintenance, using memory pre-copy so tenants see at most a brief pause
D.Azure hypervisor — Azure compute built on a Hyper-V-based hypervisor
A.Specific instance sizes expose hardware virtualization to guests so you can run hypervisors inside a VM.
B.The AWS platform that offloads networking, storage and security onto dedicated Nitro cards and a minimal Nitro hypervisor, giving near bare-metal performance
C.Cloud VMs whose memory is hardware-encrypted from the hypervisor using AMD SEV-SNP or Intel TDX, so the cloud operator cannot read guest memory
D.Offloads networking, storage, and security to dedicated cards and a lightweight hypervisor for near-bare-metal performance.
8. Which term means: "The AWS platform that offloads networking, storage and security onto dedicated Nitro cards and a minimal Nitro hypervisor, giving near bare-metal performance"?
A.AWS Nitro System — A cloud construct that spreads VM instances across fault and update domains so a single hardware or maintenance event cannot take all replicas down
B.AWS Nitro System — Azure compute built on a Hyper-V-based hypervisor
C.AWS Nitro System — The transparent movement of a running cloud VM off hardware needing maintenance, using memory pre-copy so tenants see at most a brief pause
D.AWS Nitro System — The AWS platform that offloads networking, storage and security onto dedicated Nitro cards and a minimal Nitro hypervisor, giving near bare-metal performance
A.Firecracker — The transparent movement of a running cloud VM off hardware needing maintenance, using memory pre-copy so tenants see at most a brief pause
B.Firecracker — Cloud hosts with no hypervisor layer, letting you run your own virtualization or license-bound workloads.
C.Firecracker — An AWS open-source KVM-based microVM monitor that boots minimal VMs in milliseconds, powering Lambda and Fargate isolation
D.Firecracker — EC2 instance types that expose the physical server directly with no hypervisor, used for nested virtualization or licensing that requires bare metal
A.Isolated, hardened compute environments carved from an EC2 instance with no persistent storage or external network, for processing sensitive data
B.Azure compute built on a Hyper-V-based hypervisor
C.The AWS platform that offloads networking, storage and security onto dedicated Nitro cards and a minimal Nitro hypervisor, giving near bare-metal performance
D.A cloud construct that spreads VM instances across fault and update domains so a single hardware or maintenance event cannot take all replicas down
14. Which term means: "Isolated, hardened compute environments carved from an EC2 instance with no persistent storage or external network, for processing sensitive data"?
A.AWS Nitro Enclaves — Offloads networking, storage, and security to dedicated cards and a lightweight hypervisor for near-bare-metal performance.
B.AWS Nitro Enclaves — Isolated, hardened compute environments carved from an EC2 instance with no persistent storage or external network, for processing sensitive data
C.AWS Nitro Enclaves — Azure compute built on a Hyper-V-based hypervisor
D.AWS Nitro Enclaves — Cloud hosts with no hypervisor layer, letting you run your own virtualization or license-bound workloads.
17. Which term means: "EC2 instance types that expose the physical server directly with no hypervisor, used for nested virtualization or licensing that requires bare metal"?
A.EC2 bare metal (.metal) — EC2 instance types that expose the physical server directly with no hypervisor, used for nested virtualization or licensing that requires bare metal
B.EC2 bare metal (.metal) — An Azure VM security setting providing secure boot, vTPM and measured boot to protect against rootkits and boot-level attacks
C.EC2 bare metal (.metal) — Offloads networking, storage, and security to dedicated cards and a lightweight hypervisor for near-bare-metal performance.
D.EC2 bare metal (.metal) — Families (general, compute, memory, storage optimized) map vCPU and RAM ratios to workload profiles.
A.Azure Trusted Launch — An Azure VM security setting providing secure boot, vTPM and measured boot to protect against rootkits and boot-level attacks
B.Azure Trusted Launch — The AWS platform that offloads networking, storage and security onto dedicated Nitro cards and a minimal Nitro hypervisor, giving near bare-metal performance
C.Azure Trusted Launch — Offloads networking, storage, and security to dedicated cards and a lightweight hypervisor for near-bare-metal performance.
D.Azure Trusted Launch — A physical server reserved for one tenant's VMs to satisfy compliance or bring-your-own-license rules that forbid shared hardware
23. Which term means: "Cloud VMs whose memory is hardware-encrypted from the hypervisor using AMD SEV-SNP or Intel TDX, so the cloud operator cannot read guest memory"?
A.Confidential VMs (SEV-SNP/TDX) — A Google user-space application kernel that intercepts syscalls to sandbox containers, offering stronger isolation than namespaces without a full VM
B.Confidential VMs (SEV-SNP/TDX) — The AWS platform that offloads networking, storage and security onto dedicated Nitro cards and a minimal Nitro hypervisor, giving near bare-metal performance
C.Confidential VMs (SEV-SNP/TDX) — Specific instance sizes expose hardware virtualization to guests so you can run hypervisors inside a VM.
D.Confidential VMs (SEV-SNP/TDX) — Cloud VMs whose memory is hardware-encrypted from the hypervisor using AMD SEV-SNP or Intel TDX, so the cloud operator cannot read guest memory
26. Which term means: "Azure compute runs on a customized Hyper-V hypervisor, so Azure VM features map closely to on-prem Hyper-V generations and integration services"?
A.Azure Hyper-V foundation — A physical server reserved for one tenant's VMs to satisfy compliance or bring-your-own-license rules that forbid shared hardware
B.Azure Hyper-V foundation — Cloud VMs whose memory is hardware-encrypted from the hypervisor using AMD SEV-SNP or Intel TDX, so the cloud operator cannot read guest memory
C.Azure Hyper-V foundation — Azure compute runs on a customized Hyper-V hypervisor, so Azure VM features map closely to on-prem Hyper-V generations and integration services
D.Azure Hyper-V foundation — An AWS open-source KVM-based microVM monitor that boots minimal VMs in milliseconds, powering Lambda and Fargate isolation
29. Which term means: "A Google user-space application kernel that intercepts syscalls to sandbox containers, offering stronger isolation than namespaces without a full VM"?
B.gVisor — Cloud hosts with no hypervisor layer, letting you run your own virtualization or license-bound workloads.
C.gVisor — A Google user-space application kernel that intercepts syscalls to sandbox containers, offering stronger isolation than namespaces without a full VM
D.gVisor — The transparent movement of a running cloud VM off hardware needing maintenance, using memory pre-copy so tenants see at most a brief pause
Showing 30 of 60 Cloud Virtualization questions — the full set, with answers, explanations and an AI tutor on every question, is inside.
Free to start
Answers, AI explanations, and a scored voice mock interview
Sign up free to check your answers with explanations, ask the AI tutor anything on any question, and take one full AI mock interview — scored like a real panel.