Which statement best explains why the lesson uses Kali Linux and Metasploitable 2 on a host-only network?

### Why this is right The lesson explicitly directs students to run the two virtual machines on a host-only network and warns against using the techniques on real people or organizations. The isolated arrangement provides a controlled setting for studying security impacts. ### The concept A virtual-machine lab lets students observe how system access, file modification, and shutdown affect security goals without targeting an unrelated real system. A host-only network is a virtual networking arrangement intended to restrict communication to the host environment rather than exposing the lab target on a public network. Isolation does not replace permission, but it helps keep the exercise within its approved scope. The lesson names Kali Linux as the testing machine and Metasploitable 2 as the deliberately vulnerable target. Their roles are tied to the classroom exercise. Students should use them only as directed and should not infer that possessing a testing tool permits testing other systems. ### The other options - **B. To make the target accessible to any computer on the public internet**: This reverses the purpose of the host-only setup, which is to contain the lab traffic. - **C. To ensure that every attack affects all three CIA goals equally**: The CIA goals describe different impacts. Reading, changing, and shutting down have distinct direct effects. - **D. To prove that authorization is unnecessary inside a classroom**: The lab is controlled and authorized; that does not remove the need to follow the instructor's scope. ### Terms - **Kali Linux**: The security-testing Linux virtual machine used in the lesson. - **Metasploitable 2**: The intentionally vulnerable target virtual machine used for classroom practice. - **Host-only network**: A virtual network designed to keep traffic within the host environment. - **CIA**: Confidentiality, Integrity, and Availability, the security goals used to classify impacts. - **Authorization**: Permission to perform specified actions on a system. ### Remember Use security tools only on systems that are explicitly in scope, and keep classroom targets isolated.