Skip to content
AvailabilitySign inBook a DemoStart free lab
Topic: Hypervisors & ContainersSwitch
All CCNP topics

2.0 Virtualization

Hypervisors & Containers Practice Questions

Type 1/2 hypervisors, Docker containers, and virtual switch security.

One solved question, so you can see how these are marked

Which statement correctly describes a Type 1 Hypervisor?

It runs directly on the physical hardware, with no host operating system underneath.

Type 1 (bare-metal) hypervisors (e.g., VMware ESXi, KVM) execute directly on physical server hardware, providing higher performance and lower overhead.

Every question in the set below is marked like this. The answers stay hidden until you pick one.

All 9 Hypervisors & Containers questions in this set

Answers and explanations appear when you work through the set above.

  1. What key structural feature differentiates Linux Containers (Docker) from traditional Virtual Machines (VMs)?

    • Containers need a dedicated hypervisor instance underneath each container.
    • Containers share the host OS kernel and isolate applications in user space.
    • Containers must emulate physical hardware controllers for each application.
    • VMs boot in seconds, whereas containers take several minutes to start up.

  2. In VMware vSphere networking, what feature permits a virtual switch port group to process frames destined for MAC addresses other than its assigned vNIC address?

    • MAC Address Changes
    • Promiscuous Mode
    • Forged Transmits
    • Port Isolation

  3. Which hardware technology permits a physical PCIe network interface card (pNIC) to present itself as multiple separate virtual PCI devices directly to Virtual Machines, bypassing the hypervisor switch layer?

    • Distributed Virtual Switch (DVS)
    • Single Root I/O Virtualization (SR-IOV)
    • Overlay Transport Virtualization (OTV)
    • VSI Discovery and Configuration Protocol (VDP)

  4. In Docker container deployments, which default networking driver provides isolated network namespaces connected via a virtual bridge interface on the host OS?

    • Host mode
    • Bridge mode
    • Macvlan mode
    • Overlay mode

  5. In virtualized network environments, what mechanism prevents a compromised Virtual Machine from sending Ethernet frames with MAC addresses other than its assigned vNIC address?

    • Promiscuous Mode
    • Traffic Shaping Policy
    • Forged Transmits
    • Private VLAN isolation

  6. What is a key structural difference between Type-1 Bare-Metal Hypervisors and OS-level Container virtualization (e.g., Docker)?

    • Each container bundles its own copy of the operating system kernel, unlike a VM.
    • Hypervisors run full guest OSes on virtual hardware; containers share the host kernel.
    • Hypervisors need less RAM per workload than containers, since they share one kernel.
    • Containers cannot attach to a virtual switch, so they reach the network through the host.

  7. Which setting on a VMware vSphere vSwitch should be set to Reject to block a malicious virtual machine from altering its outgoing MAC address to spoof another network host?

    • Promiscuous Mode
    • MAC Address Changes
    • Forged Transmits
    • Allow Traffic Shaping

  8. How does Docker container bridge networking forward external traffic targeting a host's TCP port into a specific isolated container port?

    • Using 802.1Q tagged sub-interfaces on the host's physical NIC for each container.
    • Using host iptables NAT (port publishing) rules.
    • Using LISP encapsulation inside the Linux kernel.
    • Using an internal BGP session per container node.

  9. When configuring security settings on a hypervisor virtual switch, enabling Promiscuous Mode allows a Virtual Machine guest interface to perform which action?

    • Rewrite the source MAC address on its outbound frames to any value.
    • See all frames in its port group, whatever their destination MAC.
    • Send multicast packets without first joining the group through IGMP.
    • Bypass the physical host NIC drivers and talk to the hardware directly.