Courseiva
Application Deployment and SecuritymediumMultiple SelectObjective-mapped

200-901 host network driver Practice Question

Which TWO Docker network drivers allow a container to communicate with the host's network stack directly?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

host

Host mode shares the host's network stack directly with the container, allowing it to use the host's IP and ports. Macvlan assigns a MAC address to the container, making it appear as a separate device on the host's network, thus enabling direct communication with the host's network stack. Overlay is for multi-host communication, bridge provides isolation, and none disables networking.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • bridge

    Why it's wrong here

    Bridge mode provides network isolation, so the container cannot directly communicate with the host's network stack.

  • none

    Why it's wrong here

    None mode disables networking entirely, preventing any communication.

  • overlay

    Why it's wrong here

    Overlay mode is designed for multi-host communication across a swarm, not for direct host communication.

  • host

    Why this is correct

    Host mode removes network isolation, allowing the container to use the host's network stack directly.

  • macvlan

    Why this is correct

    Macvlan assigns a MAC address to each container, making it appear as a separate device on the host's network and enabling direct communication.

Quick reference

Access Control Model Comparison

ModelAcronymWho Controls Access?Best For
Discretionary Access ControlDACResource ownerSmall teams, file shares
Mandatory Access ControlMACSystem / security labelsClassified govt / military
Role-Based Access ControlRBACAdministrator (via roles)Enterprise environments
Attribute-Based Access ControlABACPolicy engine (user + resource attributes)Fine-grained, dynamic policies
Rule-Based Access ControlRuBACSystem rules / ACLsFirewall rules, network ACLs

About these practice questions

Courseiva writes every 200-901 question from scratch — 989 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This 200-901 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 200-901 exam.