Explanation
A type 1 hypervisor is what would best meet the requirements of high-performance VMs (Virtual Machines), more secure, and has system independence for a company that wants to move its environment from on premises to the cloud without vendor lock-in. A hypervisor is a software or hardware that allows multiple VMs to run on a single physical host or server. A hypervisor can be classified into two types:
Type 1 hypervisor: This is a hypervisor that runs directly on the hardware or bare metal of the host or server, without any underlying OS (Operating System). A type 1 hypervisor can provide benefits such as:
High-performance: A type 1 hypervisor can provide high-performance by eliminating any overhead or interference from an OS, and allowing direct access and control of the hardware resources by the VMs.
More secure: A type 1 hypervisor can provide more security by reducing the attack surface or exposure of the host or server, and isolating and protecting the VMs from each other and from the hardware.
System independence: A type 1 hypervisor can provide system independence by allowing different types of OSs to run on the VMs, regardless of the hardware or vendor of the host or server.
Type 2 hypervisor: This is a hypervisor that runs on top of an OS of the host or server, as a software application or program. A type 2 hypervisor can provide benefits such as:
Ease of installation and use: A type 2 hypervisor can be easily installed and used as a software application or program on an existing OS, without requiring any changes or modifications to the hardware or configuration of the host or server.
Compatibility and portability: A type 2 hypervisor can be compatible and portable with different types of hardware or devices that support the OS of the host or server, such as laptops, desktops, smartphones, etc.

Explanation
IaaS (Infrastructure as a Service) is what would best meet the requirement of moving an environment from on premises to the cloud without vendor lock-in. Vendor lock-in is a situation where customers become dependent on or tied to a specific vendor or provider for their products or services, and face difficulties

Explanation
Enabling dynamic memory allocations on guests is the best option to optimize memory utilization for VMs that have been allocated with 32GB of memory but are not utilizing more than 30% of it. Dynamic memory allocation is a feature that allows a VM to adjust its memory usage according to its workload and demand, without requiring a reboot or manual intervention. Dynamic memory allocation can help to improve memory utilization and efficiency by allocating more memory to VMs that need it and releasing memory from VMs that do not need it.

Explanation
Enable MFA with a one-time password. MFA stands for multi-factor authentication, which is a method of verifying a user's identity by requiring two or more forms of authentication. A one-time password (OTP) is a code that is generated randomly and valid only for a short period of time. By enabling MFA with OTP, the administrator can make access to the SaaS email more secure without changing the password policy, as users will need to provide both their password and an OTP to sign in.

Explanation
One possible cause for the incidents in which attackers are able to access sensitive data from a corporate application's database is that the account credentials used by the web application to access the database are compromised or leaked. The log confirms that the attackers are using the WebApp user account to assume the DBA role and execute the GetData API call, which could allow them to retrieve any data from the database.
The account credentials could be compromised or leaked due to various reasons, such as weak passwords, phishing attacks, code injection, or insecure storage or transmission. Therefore, one action that will most likely prevent future compromises is to rotate the account credentials, which means changing them periodically or after every incident occurrence. Rotating the account credentials can reduce the risk of unauthorized access by invalidating the old or stolen credentials and enforcing strong and unique passwords for each account.