Adam, a forensic analyst, is preparing VMs for analyzing a malware. Which of the following is NOT a best practice?

The correct answer is D. Enabling shared folders. Shared folders create a direct bridge between the VM and the host system. If malware executes inside the VM, it can traverse shared folder paths to infect host files, completely defeating the purpose of using an isolated VM. Best practices include: isolating the host (A) to…

Submitted by kavita_s· Apr 18, 2026Malware Forensics

Question

Options

AIsolating the host device
BInstalling malware analysis tools
CUsing network simulation tools
DEnabling shared folders

How the community answered

(13 responses)

A
15% (2)
B
8% (1)
D
77% (10)

Explanation

Shared folders create a direct bridge between the VM and the host system. If malware executes inside the VM, it can traverse shared folder paths to infect host files, completely defeating the purpose of using an isolated VM. Best practices include: isolating the host (A) to prevent network spread, installing dedicated analysis tools (B) such as debuggers and disassemblers, and using network simulation tools (C) like INetSim or FakeNet-NG to safely intercept and analyze network calls without allowing real internet access.

Topics

#Malware Analysis Environment#Virtual Machine Security#Forensic Lab Setup#Security Best Practices

Community Discussion

No community discussion yet for this question.

Full 312-49 Practice