When is a virtual machine susceptible to attacks while a physical server in the same state would not be? 

Answer options:

A. When it is behind a WAF
B. When it is behind an IPS
C. When it is not patched
D. When it is powered off

D

A virtual machine is ultimately an image file residing a file system. Because of this, even when a virtual machine is "powered off," it is still susceptible to attacks and modification. A physical server that is powered off would not be susceptible to attacks.