What type of access control do SELinux and AppArmor provide?

Discretionary Access Control (DAC)

Role-Based Access Control (RBAC)

Attribute-Based Access Control (ABAC)

What is the purpose of seccomp in container security?

To limit the CPU and memory usage of a container.

To isolate the network stack of a container.

To provide fine-grained privileges to processes.

To restrict the system calls that a process can make.

How can you determine which namespaces a specific process belongs to?

By examining the symbolic links in /proc/ /ns/

By reading the /proc/ /status file.

By running the 'nsenter' command with the process ID.

By using the 'ip netns list' command.

Which of the following is a key difference between containerd and CRI-O?

containerd only works with Docker, while CRI-O only works with Kubernetes.

containerd is a general-purpose runtime that can be used outside Kubernetes, while CRI-O is specifically designed for Kubernetes.

containerd is a daemonless runtime, while CRI-O runs as a daemon.

containerd implements the OCI image specification, while CRI-O implements the runtime specification.

LPIC-3 Virtualization and Containerization

Domain 2Objective 1

352.1 Container Virtualization Concepts (weight: 7) LPIC-3-VIRTUALIZATION Practice Questions (Page 7)

Part of the Topic 352: Container Virtualization domain, which makes up ~32% of our current practice bank. Linux Professional Institute does not publish an official question count, but from its 90-minute exam (~35–60 total, ~11–19 in this domain), expect 3–5 from this objective — we provide 44 practice questions to prepare you well beyond it. (estimate)

44questions here

9free pages

16concepts

Questions 31–35

31foundation · easy
What type of access control do SELinux and AppArmor provide?
Select an answer first
32foundation · easy
What is the purpose of seccomp in container security?
Select an answer first
33foundation · easy
How can you determine which namespaces a specific process belongs to?
Select an answer first
34application · medium
A company is building a custom container runtime that needs to create and run containers according to the OCI runtime specification. They want a minimal, lightweight runtime that can be embedded in their tool. Which component should they use?
Select an answer first
35foundation · easy
Which of the following is a key difference between containerd and CRI-O?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to LPIC-3-VIRTUALIZATION

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Professional Institute. “LPIC-3-VIRTUALIZATION” is a trademark of its owner, used for identification only.