Cisco CCNP Enterprise (350-401 ENCOR) — All Questions

What is the primary difference between a virtual machine and a container?

• a.Each VM runs a full guest OS on a hypervisor, while containers share the host OS kernel and package only the app and its dependencies✓
• b.Containers each include a full guest operating system, while VMs share the host kernel
• c.VMs cannot run network functions, but containers can
• d.Containers require dedicated hardware, while VMs do not

A virtual machine runs a complete guest operating system on top of a hypervisor, whereas a container shares the host's OS kernel and packages just the application and its dependencies, making containers lighter and faster to start. Both can run network functions, and neither requires dedicated hardware per instance.

Which technology lets a single physical link carry traffic for multiple isolated Layer 3 routing domains by associating interfaces with separate routing tables?

• a.Spanning Tree Protocol
• b.VRF (Virtual Routing and Forwarding)✓
• c.HSRP
• d.PortChannel (EtherChannel)

VRF maintains separate, isolated routing tables on the same device, so different VRFs can use overlapping address space and stay logically separate, often extended across links with VRF-lite or MPLS. EtherChannel bundles links for bandwidth, HSRP provides gateway redundancy, and STP prevents Layer 2 loops.

A GRE tunnel is configured between two routers across the internet. What does GRE provide by itself?

• a.Strong encryption and authentication of all traffic
• b.Automatic dynamic routing without any protocol
• c.Layer 2 switching between distant sites at line rate
• d.Encapsulation of a wide range of protocols in a point-to-point tunnel, without encryption✓

Generic Routing Encapsulation creates a point-to-point virtual link that can carry many passenger protocols, but it does not encrypt or authenticate traffic on its own; it is commonly paired with IPsec when confidentiality is required. GRE does not itself provide dynamic routing or Layer 2 switching.