1. Shadow Copy Network
Shadow Copies are enabled on the VM host machine. The host management network is however, isolated in a separate VLAN which is not accessible from the local network. This means that if the entire network is compromised, the host will still be safe. Shadow copies will not be affected.