352.2 LXC (weight: 6) LPIC-3-VIRTUALIZATION Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   What is the primary purpose of an LXD profile?

   • ATo monitor container resource usage
   • BTo store container images for later use
   • CTo define reusable configuration settings that can be applied to multiple containers
   • DTo provide a backup mechanism for containers
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Which traditional LXC command is used to run a command inside a running container?

   • Alxc-console
   • Blxc-start
   • Clxc-exec
   • Dlxc-attach
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A junior administrator is learning LXD and asks how the LXD client communicates with the LXD daemon to manage containers. The administrator wants to understand the architecture before making changes. Which statement correctly describes the LXD client-daemon relationship?

   • AThe LXD daemon is only used for networking, while the client manages container lifecycle directly.
   • BThe LXD client and daemon are the same process; the client is just a symlink to the daemon.
   • CThe LXD client directly creates and manages containers using the kernel's cgroups and namespaces without involving a daemon.
   • DThe LXD client (`lxc`) sends commands to the LXD daemon (`lxd`) over a Unix socket or HTTPS, and the daemon manages the containers.
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A company wants to isolate its LXD containers from the physical network while still allowing them to communicate with each other and access the internet through NAT. The host has a single physical interface `eth0`. What is the simplest way to achieve this?

   • ACreate a new bridge `br0` and manually configure iptables NAT rules for each container.
   • BUse the default `lxdbr0` bridge, which provides NAT-based internet access and inter-container communication.
   • CAttach the physical `eth0` directly to each container using `nictype=physical`.
   • DCreate a macvlan network attached to `eth0` and apply it to the containers.
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   A hosting provider runs LXD containers for multiple tenants on a single host. Each tenant must have its own isolated L2 network segment, but all tenants must share the same physical uplink `eth0`. The provider also needs to enforce per-tenant bandwidth limits. Which networking approach best satisfies these constraints?

   • ACreate a single bridge and use VLAN tagging on the host's physical interface to separate tenants.
   • BUse a single macvlan network on `eth0` and assign different subnets to each tenant's containers.
   • CAttach `eth0` directly to each tenant's containers using `nictype=physical`.
   • DCreate a separate LXD bridge network for each tenant, attach containers to their tenant's bridge, and use `limits.network` on the bridge to enforce bandwidth.
   Reveal Solution Discussion Select an answer first