Which of the following BEST explains why sandboxing is a best practice for testing software from an untrusted vendor prior to an enterprise deployment?
A . It allows the software to run in an unconstrained environment with full network access.
B . It eliminates the possibility of privilege escalation attacks against the local VM host.
C . It facilitates the analysis of possible malware by allowing it to run until resources are exhausted.
D . It restricts the access of the software to a contained logical space and limits possible damage.
Answer: D