Whats Best Way to Safeguard Against Viruses in Guest o/s?

looks like getting Hyper-V on Win10 Home is straight forward.
my only concern would be, because MS never wanted it on Home, what is going to happen, say, each time Windows updates, will it kill your Hyper-V?

since you have Home, personally I'd go for one of the 3rd party software choices, but that's entirely up to you. I've used the usual suspects like Oracle's VirtualBox and VMWare's Workstation and they are both fine. you install the software and then install Windows within the software onto a VHD (virtual hard drive).
and yes, you'll need a license to install Windows even on a VM machine.

as to transferring between the main OS and VM OS, there are a few ways to skin that cat.
the VM can have a shared folder between the two OS'es, or you can set the VM to have access to one of the physical PC's USB drives, or you let the VM directly access the internet.

as said before, it all depends on what level of protection you are happy with.

and this is said with no malice intended at all, and this is your data on your PC that, really, only you know what you do, but do you think you may be over-thinking this whole thing?

for example, no-one I know has two PC's setup like this, but hey, it's a good idea, I'm just thinking of the practicalities here. I've had my own PC since 1991 (proper PC, not VIC-20, or C64 or Atari) and have only had one infection, from using my neighbours USB stick.

so while infections are a real threat, your chances of getting one, using safe PC usage principles, is rare.

I just feel you may be dwelling on the potential negatives, that in the real world, may seldom happen.
and now I've said that, I'll get three infections today !!!

@koolx - where we at?

Hyper-V versus other VM software, which is better? - sorry, can't say, simply haven't used them with performance in mind.
whatever VM I have used over the years, all I can add is that they have done exactly what I wanted, given my access to another OS without the need for another physical PC or the palaver of fussing around with dual booting.

non-activated Windows doesn't get updates (from memory) so that may be worth considering.

as to installing software on one PC and your data on another - again, sadly, only you can really answer that.
but logically taking your need of two PC's to the next level, I would say Yes, you want to keep things as isolated as possible.

as to online banking, unless an infection can sniff the data packets going between you and the bank, and decrypt them, you are already extremely safeguarded.
I've worked for 3 banks in my career and all I'll say is their IT departments, and the external bodies they use, spend a lot of money making their systems as secure as they possibly can. they do after-all want you to use them to recoup the development costs used to justify reducing front-line staff.

any sandboxie type of solution will reset that environment back to the default baseline conditions that were setup when the sandbox was initially created.
so that would definitely keep Firefox safe.
but, again, taking that idea to its next step, a program like Deep Freeze will 'sandbox' the entire PC.
every time the PC starts, it's as if the previous session never happened.

it all comes back to;

• how serious you want to take all this
• what you think is your potential exposure
• and the level of annoyance you are happy to live with

and the last question, yes, you can fiddle with the firewall at the program level but I've found it extra maintenance that needs to be kept on top of.
as an example, years ago CCleaner was great, than the buggers were taken over by Avast who added spyware type behaviour to the software (sending telemetry sort of stuff to their servers) so I blocked ccleaner.exe in the firewall. but when they changed their name to ccleaner64.exe, of course the firewall was useless.

@koolx - any news?

abandoned

re-opened as per OP request.

OP has not revisited forum since the thread was reopened so I`m going to go ahead and close this thread, helpers are here to do just that and not to run around begging for updates.