Yep put some deep packet inspection firewall in front of it and stop it completely if it starts acting up persistently before it starts trying to bypass the firewall
Sure. But they're trying evaluate how well the agents can research information on the web. If you deny them access to the web........
Well, it can do research without uploading malware or hacking into systems