A Kubernetes administrator wants to use a custom container runtime that is not natively supported by Kubernetes. What is the purpose of the Container Runtime Interface (CRI) in this context?

It provides a plugin interface that allows Kubernetes to use different container runtimes without modifying Kubernetes core

It defines the image format that all container runtimes must use

It enforces security policies on container runtimes

It provides a command-line interface for managing containers

A security auditor needs to verify which capabilities are currently available to a running container process with PID 1234. Which command would show this information?

`cat /proc/1234/status | grep Cap`

What is a notable feature of systemd-nspawn?

It is a hypervisor for running virtual machines.

It is a container runtime that only works with Kubernetes.

It uses systemd to run containers or virtual machines with namespace and cgroup isolation.

It is a tool for building container images.

LPIC-3 Virtualization and Containerization

Domain 2Objective 1

352.1 Container Virtualization Concepts (weight: 7) LPIC-3-VIRTUALIZATION Practice Questions (Page 8)

Part of the Topic 352: Container Virtualization domain, which makes up ~32% of our current practice bank. Linux Professional Institute does not publish an official question count, but from its 90-minute exam (~35–60 total, ~11–19 in this domain), expect 3–5 from this objective — we provide 44 practice questions to prepare you well beyond it. (estimate)

44questions here

9free pages

16concepts

Questions 36–40

36application · medium
A Kubernetes cluster administrator wants to replace the default container runtime with a lightweight, Kubernetes-native runtime that implements the CRI directly and uses OCI-compliant runtimes like runc. Which runtime should they choose?
Select an answer first
37application · medium
A Kubernetes administrator wants to use a custom container runtime that is not natively supported by Kubernetes. What is the purpose of the Container Runtime Interface (CRI) in this context?
Select an answer first
38application · medium
A security auditor needs to verify which capabilities are currently available to a running container process with PID 1234. Which command would show this information?
Select an answer first
39foundation · easy
What is a notable feature of systemd-nspawn?
Select an answer first
40foundation · easy
Which tool is specifically designed for inspecting and transferring container images without running them?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to LPIC-3-VIRTUALIZATION

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Professional Institute. “LPIC-3-VIRTUALIZATION” is a trademark of its owner, used for identification only.

352.1 Container Virtualization Concepts (weight: 7) LPIC-3-VIRTUALIZATION Practice Questions (Page 8)

Questions 36–40

A Kubernetes cluster administrator wants to replace the default container runtime with a lightweight, Kubernetes-native runtime that implements the CRI directly and uses OCI-compliant runtimes like runc. Which runtime should they choose?

A Kubernetes administrator wants to use a custom container runtime that is not natively supported by Kubernetes. What is the purpose of the Container Runtime Interface (CRI) in this context?

A security auditor needs to verify which capabilities are currently available to a running container process with PID 1234. Which command would show this information?

What is a notable feature of systemd-nspawn?

Which tool is specifically designed for inspecting and transferring container images without running them?

Keep studying — Topic 352: Container Virtualization