Stage 2 · Lesson 1 of 7

Virtual machines and snapshots

A (VM) is a whole computer running as a program inside your own computer. The software that runs it is called a hypervisor, and free options include VirtualBox, VMware Workstation and Hyper-V. Your lab lives in virtual machines so that anything you break, misconfigure or infect stays inside them.

A saves a machine exactly as it is, so you can roll back in seconds. That turns mistakes into lessons instead of reinstalls. Aim for a Linux machine, a Windows evaluation machine and room for one .

16 GB of is comfortable, and 8 GB works with one or two machines running at a time. On a weak laptop, cloud labs and browser-based labs are good alternatives.

Common traprunning practice tools directly on your everyday computer, where one mistake affects your own files and accounts.

A question to check yourself, an AI practice session and 2 cheat sheet entries come with the full roadmap. Unlock

Resources for this stage

Start with

GuideFree
Docker Docs: Get Started
Docker · Beginner
Enough Docker to run, reset and remove practice targets and tools cleanly

Practise

OWASP Juice Shop
The standard intentionally vulnerable web app: run it locally and use it throughout your path
LetsDefend
Blue-team practice with a simulated SOC, so your lab time goes into analysis rather than setup

Keep handy

Wireshark User's Guide
Capture and read your own lab traffic to see what normal and unusual look like

Also worth your time

Linux Upskill ChallengeGo deeper
A month of daily tasks on a real Linux server if you want your Linux administration to be solid