Question

A security analyst needs to safely analyze suspicious files on a single dedicated laptop. She wants to run several isolated operating system instances so that if a sample infects one instance, it cannot reach the host OS or the corporate network. What is the MOST important reason to use client-side virtualization for this task?

Accepted Answer

Virtual machines provide sandbox isolation, allowing malware to be contained and the VM discarded without affecting the host

Answer

Virtual machines run faster than physical hardware, speeding up the analysis

Answer

Virtualization eliminates the need for antivirus software on the host machine

Answer

Each VM automatically shares the host's files, making sample transfer easier