nerdexam
EC-Council

112-51 · Question #67

Which of the following objects of the container network model (CNM) contains the configuration files of a container's network stack, such as routing table, container's interfaces, and DNS settings?

The correct answer is B. Sandbox. The object of the container network model (CNM) that contains the configuration files of a container's network stack, such as routing table, container's interfaces, and DNS settings, is the Sandbox. A Sandbox is a logical entity that encapsulates the network configuration and…

Network Security Fundamentals

Question

Which of the following objects of the container network model (CNM) contains the configuration files of a container's network stack, such as routing table, container's interfaces, and DNS settings?

Options

  • AEndpoint
  • BSandbox
  • CNetwork drivers
  • DIPAM drivers

How the community answered

(34 responses)
  • A
    6% (2)
  • B
    91% (31)
  • D
    3% (1)

Explanation

The object of the container network model (CNM) that contains the configuration files of a container's network stack, such as routing table, container's interfaces, and DNS settings, is the Sandbox. A Sandbox is a logical entity that encapsulates the network configuration and state of a container. A Sandbox can contain one or more endpoints from different networks, and provides isolation and security for the container's network stack. A Sandbox can be implemented using various technologies, such as Linux network namespaces, FreeBSD jails, or Windows compartments. A Sandbox allows the container to have its own view and control of the network resources, such as interfaces, addresses, routes, and DNS settings.

Topics

#container security#CNM#network sandbox#Docker networking

Community Discussion

5
Wesley A.Wesley A.Apr 8, 2026

The answer is B, Sandbox. The Sandbox is the isolated network namespace that holds all the actual config for a single container, meaning its interfaces, routing table, and DNS settings all live there, while Endpoints are just the attachment points connecting a Sandbox to a Network, and drivers are just the mechanisms that make it work.

23
Anjali D.Anjali D.Apr 23, 2026

Sandbox holds the network stack config, routing table, DNS, and interfaces.

1
Wesley A.Wesley A.Apr 24, 2026

That is solid but worth adding that the sandbox also isolates the process namespace and IPC channels, so two containers on the same host cannot poke each other even if they share a bridge network.

0
Prof. SaraProf. SaraApr 14, 2026

B is correct. The Sandbox is the CNM object that isolates and holds the actual network stack configuration for a container, including its interfaces, routing table, and DNS settings, while the Endpoint is what connects the Sandbox to a Network, so do not confuse the two on exam day.

0
Anjali D.Anjali D.Apr 15, 2026

Good call on separating those two, and one thing worth reinforcing is that a single Sandbox can host multiple Endpoints, which is how a container gets attached to more than one network at the same time.

0
Full 112-51 Practice