In the lesson's lab, why is DVWA run on virtual machines in Host-Only mode?

### Why this is right The lesson uses Host-Only networking for the Kali and Metasploitable virtual machines and warns that DVWA should not be placed on a public or internet-facing server. Isolation keeps practice within the controlled lab. ### The concept DVWA is intentionally vulnerable. If exposed to the internet, it may be compromised. A virtual lab gives students a defined target while reducing the risk of affecting unrelated systems. ### The other options - **B. To make the application safe to publish on an internet-facing server**: isolation does not make an intentionally vulnerable application safe to publish. - **C. To guarantee that no database information can be exposed**: isolation reduces exposure but is not a guarantee against every risk. - **D. To let SQLMap test unrelated public websites**: the lab is for controlled testing of the authorized target, not public systems. ### Terms - **DVWA**: Damn Vulnerable Web Application, an intentionally vulnerable web application. - **Virtual machine**: a software-based computer running in an isolated environment. - **Host-Only mode**: a virtual networking arrangement intended to keep virtual machines on a host-only network. ### Remember An intentionally vulnerable lab should remain isolated and within its authorized scope.