In the PCI DSS context, what does the hypervisor include?

• A. The virtual machine monitor (VMM).
• B. The network switch and router.
• C. The database server.
• D. The email gateway.

Answer: (A)

In virtualization, the hypervisor is the layer that controls and isolates multiple virtual machines, and its core component is the virtual machine monitor (VMM). The VMM runs directly on the hardware (or on a host OS) and manages each VM’s CPU, memory, and I/O, enforcing separation between VMs. That’s why the hypervisor includes the VMM—the VMM is the essential piece that enables virtualization and VM isolation, which PCI DSS treats as part of the virtualized environment’s security model.

The other items listed aren’t the hypervisor itself. A network switch and router are network infrastructure devices, which may be present in or alongside a virtualized environment but are not the hypervisor. A database server and an email gateway are applications or services that run inside VMs or on physical hosts, not the virtualization layer that manages those VMs.