200-901 Application Deployment and Security Practice Question
Which Docker network driver allows a container to share the host's network stack, giving it direct access to host interfaces?
⚠ Common exam trap
Cisco often tests the misconception that 'bridge' is the default and most common driver, leading candidates to choose it when the question specifically asks for sharing the host's network stack, which only the 'host' driver provides.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
host
The 'host' network driver in Docker removes network isolation between the container and the host, allowing the container to use the host's network stack directly. This means the container binds to host interfaces and ports without NAT or port mapping, giving it direct access to the host's IP address and network configuration.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
none
Why it's wrong here
The none driver gives a container no networking at all, only a loopback interface, so it cannot reach host interfaces. It tempts because the name suggests bypassing Docker networking, but the host driver is what shares the host stack.
- ✗
overlay
Why it's wrong here
Overlay networks connect containers across multiple Docker hosts, encapsulating traffic between swarm nodes rather than exposing host interfaces. It tempts because overlay is the right driver for multi-host service discovery and encrypted container-to-container communication in a swarm. Here, though, the requirement is sharing the host's network stack, which only the host driver provides.
- ✗
bridge
Why it's wrong here
Bridge creates an isolated virtual network with NAT, giving containers their own IP addresses separate from the host. It tempts as Docker's default driver, but direct access to host interfaces requires the host driver, not bridge.
- ✓
host
Why this is correct
The host driver removes network namespace isolation, so the container binds directly to the host's interfaces and ports rather than receiving its own IP address. This satisfies the requirement for direct access to host interfaces, unlike bridge or overlay drivers, which assign separate addresses and require explicit port publishing.
Visual reference
Go deeper
Related to this question
About these practice questions
One of 975 original 200-901 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 200-901 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 200-901 exam.