Which of the following is a core responsibility of a container runtime?

Implementing Kubernetes admission control policies

Providing a user interface for container management

Managing the container lifecycle, such as starting and stopping containers

Scheduling pods to nodes based on resource requirements

A company is migrating from Docker Engine to a CRI-compliant runtime. They want to minimize changes to their existing container images and orchestration. Which runtime should they choose, and what is the primary consideration?

containerd, because it is CRI-compliant and uses the same image format as Docker

gVisor, because it provides stronger isolation and uses the same image format

CRI-O, because it is CRI-compliant and uses a different image format

Docker Engine, because it is CRI-compliant and uses the same image format

Kubernetes and Cloud Native Security Associate (KCSA)

Domain 2Objective 5

Container Runtime KCSA Practice Questions (Page 7)

Part of the Kubernetes Cluster Component Security domain, which accounts for 22% of the KCSA exam. Linux Foundation does not publish an official question count, but from its 90-minute exam (~35–60 total, ~8–13 in this domain), expect 1–2 from this objective — we provide 33 practice questions to prepare you well beyond it. (estimate)

33questions here

7free pages

8concepts

22%of the exam

Questions 31–33

31foundation · easy
Which of the following is a core responsibility of a container runtime?
Select an answer first
32expert · hard
A company is migrating from Docker Engine to a CRI-compliant runtime. They want to minimize changes to their existing container images and orchestration. Which runtime should they choose, and what is the primary consideration?
Select an answer first
33foundation · easy
Which mechanism is used by container runtimes to limit the CPU and memory usage of a container?
Select an answer first

Finished these 3 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to KCSA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Foundation. “KCSA” is a trademark of its owner, used for identification only.

Container Runtime KCSA Practice Questions (Page 7)

Questions 31–33

Which of the following is a core responsibility of a container runtime?

A company is migrating from Docker Engine to a CRI-compliant runtime. They want to minimize changes to their existing container images and orchestration. Which runtime should they choose, and what is the primary consideration?

Which mechanism is used by container runtimes to limit the CPU and memory usage of a container?

Keep studying — Kubernetes Cluster Component Security