What Prevents a VM from Communicating with Network Endpoints?
Which of the following would prevent a virtual machine from communicating with any endpoints on a network or the internet?
Community Insight
The question tests whether you can separate an isolation mechanism such as a sandbox from virtualization delivery and hosting technologies; the trap is assuming the hypervisor itself blocks guest traffic.
A sandbox is an isolated virtualization environment that can keep a virtual machine from reaching any network endpoint or the internet. This page confirms why sandbox (C) fits the scenario and why VDI, private cloud, and Type 1 hypervisors do not.
Many learners choose Type 1 hypervisor because it is virtualization software, but a hypervisor supplies virtual NICs and virtual switches that normally enable guest connectivity rather than prevent it.
Community Discussion (5 comments)
Comments & Corrections
No comments yet — spotted an error or have a note? Share it below.
Expert Analysis
Why the Answer Is Correct
A sandbox is a controlled, isolated environment used to run code, applications, or entire virtual machines without letting them affect or reach production resources. In virtualization and security contexts, that isolation can include restricted or absent network access, which is exactly what the question describes: a VM that cannot communicate with endpoints on a network or the internet. The wording “prevent” points to containment rather than delivery or hosting, and containment is the defining purpose of a sandbox. Sandboxing is commonly used for malware analysis, untrusted software testing, and safe browsing, where outbound connectivity must be limited or eliminated.Why the Other Options Are Wrong
VDI, or Virtual Desktop Infrastructure, delivers remote desktop sessions from a data center to users; by design those sessions depend on network connectivity to a broker and to backend resources. A private cloud is a pool of computing resources dedicated to one organization, but it is still a networked environment whose whole purpose is to provide connected services. A Type 1 hypervisor runs directly on server hardware and manages guest VMs, but it also provides virtual network adapters and virtual switches, so it typically enables communication rather than blocking it. None of those three inherently prevents a VM from reaching endpoints, while a sandbox is built around isolation.Community Comment Notes
As ishan94 noted, “a sandbox is an isolated testing environment,” which matches the containment described in the question. 351199f described a sandbox as a “completely controlled and enclosed environment,” reinforcing why it is the intended answer. acf9805 put it plainly: “A sandbox can isolate a VM so it can't talk to the outside world.” One learner, dddba0a, selected Type 1 hypervisor, which reflects the common confusion between the hypervisor that hosts a VM and a mechanism that isolates it. Iru4 asked for an explanation, and the key clarification is that hypervisors normally provide virtual networking, not a communications block.Exam Strategy
When a question asks what prevents, blocks, or isolates communication, look for a containment term such as sandbox, quarantine, or isolated VLAN before considering hosting technologies. Hypervisors, VDI, and private clouds describe how virtual machines are hosted or delivered, so treat them as distractors unless the scenario explicitly mentions a network configuration inside them.
Frequently Asked Questions
Does a Type 1 hypervisor prevent a VM from reaching the internet?
No. A Type 1 hypervisor hosts VMs and provides virtual NICs and virtual switches, which normally enable connectivity rather than block it. Isolation must come from a sandbox or network configuration.
Why is VDI not the answer for blocking VM network access?
VDI delivers remote desktops over a network and depends on connectivity to a broker and backend systems, so it does not inherently isolate a VM from endpoints.
Related Analysis
Practice All 220-1201 Questions
Access 105 questions with complete answers and detailed explanations.
View Full 220-1201 Practice Test →