112-51 practice question 7 of 15
Which of the following objects of the container network model (CNM) contains the configuration files of a container's network stack, such as routing table, container's interfaces, and DNS settings?
Full set: 75 questionsIn the Container Network Model (CNM), the Sandbox is the object that represents an isolated network environment for a specific container. It encapsulates the container's entire network stack configuration, which includes its network interfaces (represented as endpoints), the routing table, and DNS settings. Each container has its own unique sandbox, ensuring network isolation from other containers and the host system. This is commonly implemented using a Linux network namespace.
A. Endpoint: An endpoint is an interface that connects a sandbox to a specific network. It does not contain the entire network stack but is rather a component within it.
C. Network drivers: Network drivers are responsible for the implementation of a network (e.g., bridge, overlay). They provide the connectivity but do not hold the per-container stack configuration.
D. IPAM drivers: IPAM (IP Address Management) drivers are solely responsible for allocating and managing IP addresses for networks and endpoints, not the container's overall network stack.
1. Docker Official Documentation (libnetwork): The design document for libnetwork, Docker's implementation of the CNM, explicitly defines the Sandbox. It states, "A Sandbox is a container's network stack. This contains the container's network interfaces, routing table and DNS settings... A Sandbox may contain many endpoints from multiple networks."
Source: Docker libnetwork GitHub Repository, design.md. Section: "The Container Network Model". (https://github.com/moby/libnetwork/blob/master/docs/design.md)
2. University Courseware: Course materials on cloud computing and distributed systems often cover container networking architecture, referencing the CNM. Lecture notes describe the sandbox as the component providing network isolation and containing the network stack for a container.
Source: University of Illinois Urbana-Champaign, CS 425 / ECE 428: Distributed Systems, Fall 2021, Lecture 11: "Containers: Docker". Slide 31 discusses the Container Network Model, identifying the Sandbox as the container's network stack.
Keep practicing
Take the free 112-51 practice test
Ten exam-style questions with answers and explanations, plus the exam facts and study guides.
More questions
Other 112-51 practice questions
- Question 1An loT sensor in an organization generated an emergency alarm indicating a security breac…
- Question 2Kalley, a network administrator of an organization, has installed a traffic monitoring sy…
- Question 3Mary was surfing the Internet, and she wanted to hide her details and the content she was…
- Question 4Alice was working on her major project; she saved all her confidential files and locked h…
- Question 5Joseph, a security professional, was instructed to secure the organization's network. In …
- Question 6Which of the following IDS components analyzes the traffic and reports if any suspicious …
