What is the purpose of a storage pool in LXD?

To provide a centralized place to manage storage resources for containers

To define security policies for container access

To define a location where container images are stored

To allocate IP addresses to containers

A security team requires that all containers in a project run with restricted capabilities: no `CAP_SYS_ADMIN` and no `CAP_NET_ADMIN`. They also want to ensure that any new container created in the project automatically gets these restrictions. The team uses LXD projects. What is the most maintainable way to enforce this?

Use `lxc config set` on each container after creation to remove the capabilities.

Set the default profile for the project to include the security restrictions, so all new containers inherit them automatically.

Create a profile with `security.capabilities` set to exclude the unwanted capabilities, and apply it to all containers in the project.

Modify the container's config file directly to remove the capabilities.

LPIC-3 Virtualization and Containerization

Domain 2Objective 2

352.2 LXC (weight: 6) LPIC-3-VIRTUALIZATION Practice Questions (Page 2)

Part of the Topic 352: Container Virtualization domain, which makes up ~32% of our current practice bank. Linux Professional Institute does not publish an official question count, but from its 90-minute exam (~35–60 total, ~11–19 in this domain), expect 3–5 from this objective — we provide 29 practice questions to prepare you well beyond it. (estimate)

29questions here

6free pages

9concepts

Questions 6–10

6foundation · easy
What is the purpose of a storage pool in LXD?
Select an answer first
7expert · hard
A security team requires that all containers in a project run with restricted capabilities: no `CAP_SYS_ADMIN` and no `CAP_NET_ADMIN`. They also want to ensure that any new container created in the project automatically gets these restrictions. The team uses LXD projects. What is the most maintainable way to enforce this?
Select an answer first
8foundation · easy
Which LXD command is used to list all available images in the local image store?
Select an answer first
9foundation · easy
Which LXD network type allows containers to appear as separate devices on the physical network, each with its own MAC address?
Select an answer first
10foundation · easy
Which LXD network type provides a virtual bridge that allows containers to communicate with each other and the host, with NAT for outbound internet access?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to LPIC-3-VIRTUALIZATION

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Professional Institute. “LPIC-3-VIRTUALIZATION” is a trademark of its owner, used for identification only.

352.2 LXC (weight: 6) LPIC-3-VIRTUALIZATION Practice Questions (Page 2)

Questions 6–10

What is the purpose of a storage pool in LXD?

Which LXD command is used to list all available images in the local image store?

Which LXD network type allows containers to appear as separate devices on the physical network, each with its own MAC address?

Which LXD network type provides a virtual bridge that allows containers to communicate with each other and the host, with NAT for outbound internet access?

Keep studying — Topic 352: Container Virtualization