Which of the following is NOT one of the six main virtualization security concerns?

• A. Training and Education
• B. Patch Management
• C. Asset Tracking and Management
• D. Incident Response and Recovery

Answer: (D)

Focusing on what keeps a virtualization environment secure, the six main concerns are typically about preventing issues through people, processes, and visibility: training and education to ensure staff operate securely, patch management to fix known vulnerabilities, and asset tracking and management to keep a clear view of every virtual resource. Incident Response and Recovery sits outside of those preventive, governance-focused areas. It’s essential, but it’s about what you do after a security event and how you restore operations, often treated as a separate discipline or tied to disaster recovery and business continuity rather than counted among the core virtualization security concerns. So Incident Response and Recovery is the item that doesn’t belong in the six.