Ask how an antivirus running on the host is going to catch malware running inside a guest? If you get a reasonable sounding answer, ask for a test to be run - many AV products also default to not scanning excessively large files, like virtual guest disks.