Cisco CCNP Enterprise (350-401 ENCOR) — All Questions

What is the primary difference between a virtual machine and a container?

• a.Containers each include a full guest operating system, while VMs share the host kernel
• b.Each VM runs a full guest OS on a hypervisor, while containers share the host OS kernel and package only the app and its dependencies✓
• c.VMs cannot run network functions, but containers can
• d.Containers require dedicated hardware, while VMs do not

A virtual machine runs a complete guest operating system on top of a hypervisor, whereas a container shares the host's OS kernel and packages just the application and its dependencies, making containers lighter and faster to start. Both can run network functions, and neither requires dedicated hardware per instance.

Which technology lets a single physical link carry traffic for multiple isolated Layer 3 routing domains by associating interfaces with separate routing tables?

• a.HSRP
• b.PortChannel (EtherChannel)
• c.VRF (Virtual Routing and Forwarding)✓
• d.Spanning Tree Protocol

VRF maintains separate, isolated routing tables on the same device, so different VRFs can use overlapping address space and stay logically separate, often extended across links with VRF-lite or MPLS. EtherChannel bundles links for bandwidth, HSRP provides gateway redundancy, and STP prevents Layer 2 loops.

A GRE tunnel is configured between two routers across the internet. What does GRE provide by itself?

• a.Encapsulation of a wide range of protocols in a point-to-point tunnel, without encryption✓
• b.Strong encryption and authentication of all traffic
• c.Automatic dynamic routing without any protocol
• d.Layer 2 switching between distant sites at line rate

Generic Routing Encapsulation creates a point-to-point virtual link that can carry many passenger protocols, but it does not encrypt or authenticate traffic on its own; it is commonly paired with IPsec when confidentiality is required. GRE does not itself provide dynamic routing or Layer 2 switching.