1. => McAfee MOVE Antivirus solves this issue by offloading all on-access scanning to a dedicated VM that runs McAfee® VirusScan® Enterprise, known as an offload scan server. Because the traditional anti-virus application VirusScan Enterprise is no longer required to be installed on each guest VM, McAfee MOVE Antivirus improves performance related to anti-virus scanning. This results in increased VM density per hypervisor.
2. => Yes as MOVE uses VSE. Move doesnt have the Buffer overflow functionality as the BOF is installed localy in the machines and the schedule uses this local buffer overflow.
3. =>GTI is uses from the local VSE always that you have it enable.