112-51 · Question #67
Which of the following objects of the container network model (CNM) contains the configuration files of a container's network stack, such as routing table, container's interfaces, and DNS settings?
The correct answer is B. Sandbox. The object of the container network model (CNM) that contains the configuration files of a container's network stack, such as routing table, container's interfaces, and DNS settings, is the Sandbox. A Sandbox is a logical entity that encapsulates the network configuration and…
Question
Which of the following objects of the container network model (CNM) contains the configuration files of a container's network stack, such as routing table, container's interfaces, and DNS settings?
Options
- AEndpoint
- BSandbox
- CNetwork drivers
- DIPAM drivers
How the community answered
(34 responses)- A6% (2)
- B91% (31)
- D3% (1)
Explanation
The object of the container network model (CNM) that contains the configuration files of a container's network stack, such as routing table, container's interfaces, and DNS settings, is the Sandbox. A Sandbox is a logical entity that encapsulates the network configuration and state of a container. A Sandbox can contain one or more endpoints from different networks, and provides isolation and security for the container's network stack. A Sandbox can be implemented using various technologies, such as Linux network namespaces, FreeBSD jails, or Windows compartments. A Sandbox allows the container to have its own view and control of the network resources, such as interfaces, addresses, routes, and DNS settings.
Topics
Community Discussion
5The answer is B, Sandbox. The Sandbox is the isolated network namespace that holds all the actual config for a single container, meaning its interfaces, routing table, and DNS settings all live there, while Endpoints are just the attachment points connecting a Sandbox to a Network, and drivers are just the mechanisms that make it work.
Sandbox holds the network stack config, routing table, DNS, and interfaces.
That is solid but worth adding that the sandbox also isolates the process namespace and IPC channels, so two containers on the same host cannot poke each other even if they share a bridge network.
B is correct. The Sandbox is the CNM object that isolates and holds the actual network stack configuration for a container, including its interfaces, routing table, and DNS settings, while the Endpoint is what connects the Sandbox to a Network, so do not confuse the two on exam day.
Good call on separating those two, and one thing worth reinforcing is that a single Sandbox can host multiple Endpoints, which is how a container gets attached to more than one network at the same time.