352.1 Container Virtualization Concepts (weight: 7) LPIC-3-VIRTUALIZATION Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A company is migrating a legacy monolithic application that includes a cron daemon, syslog, and multiple background workers into containers. The operations team wants to minimize the number of container images to manage while preserving the ability to run system-level services inside the container. Which approach best meets this requirement?

   • AUse a system container (e.g., LXC or LXD) that boots a full init system inside the container.
   • BDeploy the application as a Kubernetes pod with multiple containers sharing a PID namespace.
   • CRun the application as a single application container with a process supervisor like s6 or supervisord.
   • DUse a Docker container with the `--init` flag to run tini as PID 1.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A containerized application is consuming excessive CPU and affecting other workloads on the same host. The administrator wants to limit the container's CPU usage to 50% of one core and ensure the limit is enforced even if the host is under heavy load. Which cgroup configuration should be applied?

   • ASet `cpu.rt_runtime_us` to 50000 in the container's cgroup
   • BSet `cpu.shares` to 512 in the container's cgroup
   • CUse `cpuset.cpus` to assign the container to a single CPU core
   • DSet `cpu.cfs_quota_us` to 50000 and `cpu.cfs_period_us` to 100000 in the container's cgroup
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   Which of the following is a common kernel namespace type?

   • AMemory namespace
   • BSecurity namespace
   • CCPU namespace
   • DPID namespace
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   What is the primary purpose of control groups (cgroups) in Linux?

   • ATo filter system calls made by processes for security.
   • BTo limit, account for, and prioritize resource usage (CPU, memory, I/O) of process groups.
   • CTo provide fine-grained privileges to processes without full root access.
   • DTo isolate process IDs and network interfaces between containers.
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   Which statement best describes the difference between system containers and application containers?

   • ASystem containers run a full operating system environment with their own init process, while application containers run a single process or application.
   • BSystem containers are used only for legacy applications, while application containers are used only for microservices.
   • CApplication containers run a full OS environment, while system containers run only a single process.
   • DSystem containers are always more secure than application containers because they include a full OS.
   Reveal Solution Discussion Select an answer first