An Organization Is Implementing a Virtualized Thin-Client Solution for Normal

Multiple Choice

An organization is implementing a virtualized thin-client solution for normal user computing and access. During a review of the architecture, concerns were raised that an attacker could gain access to multiple user environments by simply gaining a foothold on a single one with malware. Which of the following reasons BEST explains this?

A) Malware on one virtual environment could enable pivoting to others by leveraging vulnerabilities in the hypervisor.
B) A worm on one virtual environment could spread to others by taking advantage of guest OS networking services vulnerabilities.
C) One virtual environment may have one or more application-layer vulnerabilities, which could allow an attacker to escape that environment.
D) Malware on one virtual user environment could be copied to all others by the attached network storage controller.