What Prevents a VM from Communicating with Network Endpoints?
Short answer
C A sandbox is an isolated environment that prevents the VM from communicating with any network endpoints or the internet.
Question
Key Takeaways
The question tests whether you can separate an isolation mechanism such as a sandbox from virtualization delivery and hosting technologies; the trap is assuming the hypervisor itself blocks guest traffic.
A sandbox is an isolated virtualization environment that can keep a virtual machine from reaching any network endpoint or the internet. This page confirms why sandbox (C) fits the scenario and why VDI, private cloud, and Type 1 hypervisors do not.
Common mistake: Many learners choose Type 1 hypervisor because it is virtualization software, but a hypervisor supplies virtual NICs and virtual switches that normally enable guest connectivity rather than prevent it.
Expert Analysis
Why the Answer Is Correct
A sandbox is a controlled, isolated environment used to run code, applications, or entire virtual machines without letting them affect or reach production resources. In virtualization and security contexts, that isolation can include restricted or absent network access, which is exactly what the question describes: a VM that cannot communicate with endpoints on a network or the internet. The wording “prevent” points to containment rather than delivery or hosting, and containment is the defining purpose of a sandbox. Sandboxing is commonly used for malware analysis, untrusted software testing, and safe browsing, where outbound connectivity must be limited or eliminated.
Why the Other Options Are Wrong
VDI, or Virtual Desktop Infrastructure, delivers remote desktop sessions from a data center to users; by design those sessions depend on network connectivity to a broker and to backend resources. A private cloud is a pool of computing resources dedicated to one organization, but it is still a networked environment whose whole purpose is to provide connected services. A Type 1 hypervisor runs directly on server hardware and manages guest VMs, but it also provides virtual network adapters and virtual switches, so it typically enables communication rather than blocking it. None of those three inherently prevents a VM from reaching endpoints, while a sandbox is built around isolation.
Community Comment Notes
As ishan94 noted, “a sandbox is an isolated testing environment,” which matches the containment described in the question. 351199f described a sandbox as a “completely controlled and enclosed environment,” reinforcing why it is the intended answer. acf9805 put it plainly: “A sandbox can isolate a VM so it can't talk to the outside world.” One learner, dddba0a, selected Type 1 hypervisor, which reflects the common confusion between the hypervisor that hosts a VM and a mechanism that isolates it. Iru4 asked for an explanation, and the key clarification is that hypervisors normally provide virtual networking, not a communications block.
Exam Strategy
When a question asks what prevents, blocks, or isolates communication, look for a containment term such as sandbox, quarantine, or isolated VLAN before considering hosting technologies. Hypervisors, VDI, and private clouds describe how virtual machines are hosted or delivered, so treat them as distractors unless the scenario explicitly mentions a network configuration inside them.
Frequently Asked Questions
Does a Type 1 hypervisor prevent a VM from reaching the internet?
Why is VDI not the answer for blocking VM network access?
Discussion 5 contributions
Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.
From public community threads 5
-
ishan94 👍 4 Answered CA sandbox is an isolated testing environment
-
351199f 👍 3 Answered CC. Sandbox Sandbox is a completely controlled and enclosed environment, which would be optimal for this situation.
-
acf9805 👍 1 Answered C47. C — Sandbox 🧸 A sandbox can isolate a VM so it can't talk to the outside world.
-
dddba0a 👍 1 Answered DD. Type 1 hypervisor
-
Iru4 👍 1explain?
Reader comments & corrections
No reader corrections yet — spotted an error or have a note? Share it below.
Related Analysis
Practice All 220-1201 Questions
Access 105 questions with complete answers and detailed explanations.
View Full 220-1201 Practice Test →