Details

NOTE: Update CPU_SHARE_LEVEL with the appropriate value for the local environment.

Solution

Use shares or reservations to guarantee resources to critical VMs.
Use limits to constrain resource consumption by virtual machines that have a greater risk of being exploited or attacked, or that run applications that are known to have the potential to greatly consume resources.

Supportive Information

The following resource is also helpful.

• https://workbench.cisecurity.org/files/145

This security hardening control applies to the following category of controls within NIST 800-53: System and Communications Protection.This control applies to the following type of system VMware.

References

• 800-53|SC-6

Source

• Tenable.com/audits