A security administrator at a hospital has implemented a VDI infrastructure to improve the security of patient records The VDI solution is cloud based, while PHI is maintained on a local database server A VPN allows the VDI infrastructure to maintain a persistent connection to the local server. The IT auditor is concerned the solution may not provide the required level of security due to the possibility of VM escape and privilege escalation attacks.
Which of the following architectural changes would decrease exposure from a compromise of the VDI system?