Which of the following BEST explains why sandboxing is a best practice for testing software from an untrusted vendor prior to an enterprise deployment?

• It allows the software to run in an unconstrained environment with full network access
• It eliminates the possibility of privilege escalation attacks against the local VM host
• It facilitates the analysis of possible malware by allowing it to run until network resources are exhausted
• It restricts the access of the software to a contained logical space and limits possible damage