A company runs containers on a RHEL-based host with SELinux enforcing. A containerized web server is unable to read files from a mounted host directory. The SELinux context on the host directory is `httpd_sys_content_t`. Which action would allow the container to read the files?

Add a seccomp filter to allow `open` syscalls

Change the SELinux context of the host directory to `container_file_t`

Run the container with `--privileged`

What is the primary purpose of kernel namespaces in container virtualization?

To limit the CPU and memory usage of processes.

To isolate and virtualize system resources so that processes in one namespace cannot see processes in another namespace.

To provide a secure sandbox for untrusted binaries by filtering system calls.

To assign fine-grained privileges to processes without granting full root.

Which specification does runc implement?

Open Container Initiative Image Specification

LPIC-3 Virtualization and Containerization

Domain 2Objective 1

352.1 Container Virtualization Concepts (weight: 7) LPIC-3-VIRTUALIZATION Practice Questions (Page 6)

Part of the Topic 352: Container Virtualization domain, which makes up ~32% of our current practice bank. Linux Professional Institute does not publish an official question count, but from its 90-minute exam (~35–60 total, ~11–19 in this domain), expect 3–5 from this objective — we provide 44 practice questions to prepare you well beyond it. (estimate)

44questions here

9free pages

16concepts

Questions 26–30

26foundation · easy
Which command is used to display the capabilities of a running process?
Select an answer first
27application · medium
A company runs containers on a RHEL-based host with SELinux enforcing. A containerized web server is unable to read files from a mounted host directory. The SELinux context on the host directory is `httpd_sys_content_t`. Which action would allow the container to read the files?
Select an answer first
28foundation · easy
What is the primary purpose of kernel namespaces in container virtualization?
Select an answer first
29foundation · easy
Which specification does runc implement?
Select an answer first
30application · medium
A developer reports that a containerized application can see the host's network interfaces and can bind to privileged ports. The container was started with default Docker settings. Which namespace is most likely misconfigured or not isolated?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to LPIC-3-VIRTUALIZATION

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Professional Institute. “LPIC-3-VIRTUALIZATION” is a trademark of its owner, used for identification only.

352.1 Container Virtualization Concepts (weight: 7) LPIC-3-VIRTUALIZATION Practice Questions (Page 6)

Questions 26–30

Which command is used to display the capabilities of a running process?

A company runs containers on a RHEL-based host with SELinux enforcing. A containerized web server is unable to read files from a mounted host directory. The SELinux context on the host directory is `httpd_sys_content_t`. Which action would allow the container to read the files?

What is the primary purpose of kernel namespaces in container virtualization?

Which specification does runc implement?

A developer reports that a containerized application can see the host's network interfaces and can bind to privileged ports. The container was started with default Docker settings. Which namespace is most likely misconfigured or not isolated?

Keep studying — Topic 352: Container Virtualization