With a working IOMMU (any modern hardware has this)...
I agree with the "IOMMU" part, but my experience with the "working" part is more hit-or-miss.