easyMultiple Choice
350-401 Practice Question: An architect is designing a virtualized…
An architect is designing a virtualized environment for network functions that require direct access to physical NICs for performance. The hypervisor must support PCI passthrough. Which hypervisor type is best suited for this requirement?
⚠ Common exam trap
Cisco often tests the distinction between Type 1 and Type 2 hypervisors, and the trap here is that candidates may assume any hypervisor can support PCI passthrough, overlooking the architectural overhead of Type 2 hypervisors that prevents direct hardware access.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Type 1 hypervisor (e.g., VMware ESXi or KVM).
A Type 1 hypervisor (bare-metal) runs directly on the hardware and has direct access to physical resources, including PCIe devices. It supports PCI passthrough (e.g., Intel VT-d or AMD IOMMU), which allows a virtual machine to directly access a physical NIC without hypervisor intervention, maximizing performance for network functions. VMware ESXi and KVM are common Type 1 hypervisors that implement this capability.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Type 1 hypervisor (e.g., VMware ESXi or KVM).
Why this is correct
A Type 1 hypervisor runs directly on the server's hardware with no underlying OS, giving it exclusive control of the CPU, memory, and I/O devices. Through VT-d/IOMMU, it can map a physical PCIe function to a single VM, enabling device passthrough that delivers near-native throughput for NICs and GPUs. Examples like VMware ESXi and KVM (via Linux's kernel modules) are purpose-built for this role, which is why they are the correct answer.
- ✗
Type 2 hypervisor (e.g., VirtualBox or VMware Workstation).
Why it's wrong here
A Type 2 hypervisor is installed as an application on top of a full host OS (Windows, macOS, Linux). Since the host OS controls all hardware access, the hypervisor cannot directly assign PCI devices; it must translate through the host's drivers, adding latency and preventing true passthrough. VirtualBox and VMware Workstation target desktop use and thus lack the robust PCIe passthrough features required for high-performance production workloads.
- ✗
Container runtime (e.g., Docker).
Why it's wrong here
Containers aren't hypervisors—they are isolated user-space processes sharing the host kernel, so they have no virtual PCI bus or device model to pass through hardware. While platforms like Kubernetes use SR-IOV to expose virtual functions to containers, that is a driver-level feature of the host kernel, not the same as assigning a physical PCI device to a VM. For workloads that require a dedicated GPU or a full guest OS with device ownership, a container runtime cannot provide the hypervisor-style abstraction.
- ✗
Bare-metal server without virtualization.
Why it's wrong here
A bare-metal server without virtualization has the operating system directly on the hardware, with no hypervisor layer. It can't run virtual machines because VMs require a hypervisor to partition resources and provide a virtual hardware abstraction. Adding a hypervisor later converts the server into a host, but that's exactly what the question calls a Type 1—so the bare-metal-only scenario is simply not applicable.
Go deeper
Related to this question
About these practice questions
One of 1,923 original 350-401 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 350-401 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-401 exam.