title: Intel EPT table is 4 level page table?
body: <p>The figure is taken from <a href="http://www.linux-kvm.org/wiki/images/c/c7/KvmForum2008$kdf2008_11.pdf" rel="nofollow noreferrer">here</a>.
  <img src="https://i.stack.imgur.com/uaL8y.png" alt="enter image description here"></p>
  
  <p>Q1. It seems that the EPT table keeps a whole copy of the guest page table, making it a 4-level page table. Is that correct? </p>
  
  <p>Q2. Isn't it a bit of waste of space? </p>
  
  <p>Q3. What exactly is an EPT violate? Does it mean this: the guest is trying to access a new guest virtual address (gVA), EPT table does not have a record for it yet, so it traps into VMM, and add the two gVA and gPA entries to the EPT table. Is that correct? </p>