Containerization KCNA Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   Why is running a container as a non-root user considered a security best practice?

   • AIt makes the container start faster.
   • BIt allows the container to access more host resources.
   • CIt is required for the container to use volumes.
   • DIt reduces the risk of privilege escalation if the container is compromised.
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   How are container images typically built and stored?

   • AImages are created by running a container and committing its state.
   • BImages are compiled from source code and stored as executable binaries on the host.
   • CImages are built from a Dockerfile and stored in a container registry.
   • DImages are downloaded from a central repository and stored in a virtual machine.
   Reveal Solution Discussion Select an answer first
4. 28expert · hard

   A company is migrating a legacy monolithic application to containers. The application requires a specific kernel module that is not available in the container's base image. The team wants to run the application in a container while minimizing changes to the application code. What is the best approach?

   • ALoad the kernel module on the host and run the container with the host's kernel.
   • BUse a container image that includes the kernel module.
   • CRun the container in privileged mode to allow the module to be loaded.
   • DRun the application in a virtual machine instead of a container.
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   Which of the following is an example of a container runtime?

   • ADockerfile
   • Bcontainerd
   • CDocker Hub
   • DKubernetes
   Reveal Solution Discussion Select an answer first
6. 30foundation · easy

   What command is used to create and start a container from an image?

   • Adocker run
   • Bdocker build
   • Cdocker pull
   • Ddocker start
   Reveal Solution Discussion Select an answer first