352.1 Container Virtualization Concepts (weight: 7) LPIC-3-VIRTUALIZATION Practice Questions (Page 9)

Questions 41–44

1. 41foundation · easy

   How does AppArmor enforce security policies?

   • ABy filtering system calls with seccomp.
   • BBy using security labels on files and processes to enforce rules.
   • CBy limiting resource usage with cgroups.
   • DBy using path-based rules to restrict file access and other resources for a process.
   Reveal Solution Discussion Select an answer first
2. 42foundation · easy

   Why are OCI specifications important for container interoperability?

   • AThey allow container images and runtimes to be portable across different platforms and tools.
   • BThey enable containers to run without a kernel.
   • CThey provide a common security framework for all containers.
   • DThey replace the need for namespaces and cgroups.
   Reveal Solution Discussion Select an answer first
4. 43foundation · easy

   How do Docker and LXC enhance container security beyond basic namespace and cgroup isolation?

   • ABy using capabilities, seccomp, and MAC (SELinux/AppArmor) to restrict privileges and system calls.
   • BBy running each container in a separate virtual machine.
   • CBy using a firewall to block all network traffic to the container.
   • DBy encrypting all container data at rest.
   Reveal Solution Discussion Select an answer first
5. 44foundation · easy

   Where can you find the cgroup filesystem mounted on a typical Linux system?

   • A/etc/cgroup
   • B/proc/cgroup
   • C/sys/fs/cgroup
   • D/var/run/cgroup
   Reveal Solution Discussion Select an answer first