Which environment is designed for securely testing code by restricting its execution?

• A. Sandbox
• B. Virtual Machine
• C. Emulator
• D. Container

Answer: (A)

Sandboxing creates a restricted, controlled environment where code runs with limited permissions, restricted file and network access, and constrained resources. This containment is built specifically to observe behavior and prevent any harmful actions from affecting the host system, which is exactly what’s needed for securely testing potentially untrusted code.

A virtual machine, while offering strong isolation by running a separate guest OS, adds more overhead and isn’t centered on restricting what the code can do within a single host system. An emulator focuses on mimicking hardware for running software from another platform, but doesn’t inherently enforce strict execution limits. A container isolates processes and shares the host kernel, providing lighter isolation but not the same level of execution restriction as a sandbox.