Differentiate Between VMs and Containers to Select the Appropriate Compute Model VCAP-VCF-VKS Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   How does the isolation boundary of a VM differ from that of a container?

   • ABoth VMs and containers rely on the host kernel for isolation, but VMs use namespaces.
   • BBoth VMs and containers provide identical isolation because both use a hypervisor.
   • CA VM provides hardware-level isolation with a separate kernel, while a container shares the host kernel and relies on OS-level isolation.
   • DA VM shares the host kernel, while a container has its own kernel.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   A company needs to run a legacy application that requires a specific version of a Linux kernel and must be isolated from other workloads on the same physical server. Which compute model should be selected?

   • AVMs, because they share the host kernel and are easier to manage.
   • BContainers, because they are lightweight and can run any kernel version.
   • CContainers, because they provide stronger isolation than VMs.
   • DVMs, because they provide a separate guest OS and kernel, meeting the kernel requirement and isolation needs.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which statement best describes the attack surface of containers compared to VMs?

   • AContainers have a smaller attack surface because they do not include an operating system.
   • BContainers have a larger attack surface because a vulnerability in the shared host kernel can affect all containers on that host.
   • CVMs and containers have the same attack surface because both use the same kernel.
   • DVMs have a larger attack surface because they share the host kernel with other VMs.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A DevOps team builds a CI/CD pipeline that must run the same test suite on Windows, Linux, and macOS. The tests require a specific version of a GUI framework and must run in isolated environments to avoid interference. The team wants to reuse the same test definition across all three OSes with minimal duplication. Which approach is most appropriate?

   • AUse containers with a base image for each OS and run the same test script in each container.
   • BCreate a separate VM template for each OS and run the tests in VMs.
   • CUse a CI service that provides managed VMs for each OS and run the same test script.
   • DRun the tests directly on the host OS of each build agent.
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A company runs a batch analytics workload that processes large datasets in memory. The workload is CPU-intensive and can tolerate occasional restarts. The company has two options: run the workload in a VM with 16 vCPU and 64 GB RAM, or run it in a container with the same resource limits on a host that also runs other containers. The workload must complete within a 2-hour window. Which factor is most important when deciding between the VM and the container?

   • AThe container will have lower memory overhead, allowing more memory for the workload.
   • BThe VM provides stronger isolation from other workloads, reducing the risk of resource contention.
   • CThe container will start faster, allowing the workload to begin processing sooner.
   • DThe VM can be migrated to another host during the workload, while the container cannot.
   Reveal Solution Discussion Select an answer first