Containerization KCNA Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   What is the difference between a volume and a bind mount?

   • AVolumes are only for databases, while bind mounts are for application code.
   • BVolumes are stored on remote servers, while bind mounts are stored locally.
   • CVolumes are managed by the container runtime and stored in a dedicated directory, while bind mounts map a host directory directly into the container.
   • DVolumes are read-only, while bind mounts are read-write.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which of the following is a core function of a container orchestration platform?

   • AService discovery and load balancing.
   • BProviding a database for application data.
   • CCompiling application source code.
   • DCreating container images from Dockerfiles.
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   An operator is managing a container that runs a long-lived service. The service needs to be restarted if it becomes unhealthy, and the operator wants to ensure that the container is automatically restarted with the same configuration. Which approach is most appropriate?

   • AUse a process manager inside the container to restart the service.
   • BUse the `--restart=always` policy and rely on Docker's healthcheck.
   • CUse a shell script on the host that checks the container status and runs `docker restart`.
   • DUse a container orchestrator like Kubernetes with a liveness probe.
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A security team is hardening a containerized application. They want to ensure that the container cannot write to the host filesystem, cannot escalate privileges, and cannot access the host's network stack. Which set of configurations achieves this?

   • AUse the host network namespace and drop all capabilities.
   • BMount the host filesystem as read-only and run as root.
   • CRun the container with a read-only root filesystem, drop all capabilities, and use a non-root user.
   • DRun the container in privileged mode and use a read-only root filesystem.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which characteristic is a key advantage of containerization over virtual machines?

   • AContainers require more memory because they include a full guest OS.
   • BContainers can start in seconds because they do not boot an operating system.
   • CContainers are hardware-virtualized, providing better performance than VMs.
   • DContainers provide stronger isolation because each runs its own operating system.
   Reveal Solution Discussion Select an answer first