Container Virtualization

Which THREE of the following are valid storage driver options for Docker on Linux?

You are optimizing a Dockerfile to reduce image size. Which THREE of the following practices are recommended?

You are troubleshooting a Docker container that cannot reach the internet despite the host having connectivity. The container uses the default bridge network. Which iptables chain is most likely causing the block?

You are configuring an LXC container and need to grant it access to a specific host character device without running the container in privileged mode. Which configuration option in the container's config file should you use?

A Docker container is failing to connect to an external database despite the host being able to ping it. You suspect a bridge networking issue. Which command allows you to inspect the current NAT rules created by Docker?

You need to run a container that requires access to the host's network namespace directly to perform packet capture. Which Docker run flag should you use?

Which Docker command is used to display the resource usage (CPU, memory) of running containers?

When building a Dockerfile, which instruction should be used to define the user context for subsequent RUN, CMD, and ENTRYPOINT instructions?

You need to inspect the metadata of a specific Docker image without pulling it from a remote registry. Which command should you use?

You are using systemd-nspawn and want to run a container that shares the host's network namespace. Which flag is required?

In an OpenVZ environment, you need to limit the number of processes a container can create. Which parameter in the container configuration file should be modified?

You are using a BSD Jail and want to limit the filesystem access of the jail to a specific directory tree. Which utility or configuration mechanism is primarily used to achieve this?

You are building a multi-stage Dockerfile and want to copy a binary from the 'builder' stage to the final stage. Which syntax is correct?

When using Docker volumes, which type of mount should you use if you want the data to persist on the host filesystem at a specific, user-defined path?

Which command is used to stop all running containers?

Which command allows you to enter an existing running container and execute a new command inside it?

Which flag is used to run a container in the background?

In a Docker environment, you are observing that container logs are consuming too much disk space. Which logging driver should you configure to limit the number and size of log files?

You are configuring LXC and want to set a CPU limit for a container. Which cgroup parameter is used to specify the quota of CPU time in microseconds?

Which instruction in a Dockerfile is best suited for installing packages to minimize image size?

You are troubleshooting a container networking issue. You notice that traffic from the container is not being SNATed. What should you check in the iptables rules?

What is the purpose of the 'rkt' (Rocket) container runtime?

Which command is used to remove an unused Docker image?

You need to inspect the configuration of an LXC container named 'web'. Which command should you use?

In a Docker swarm, which mode of service publishing allows incoming traffic to be load-balanced across all healthy container replicas?

Which command shows the history of layers in a Docker image?

What is the primary function of a Docker Registry?

You are using systemd-nspawn. How do you create an image of a container to be used as a template?

Which Docker network driver should you use if you want containers to have their own IP addresses on the physical network, as if they were physically connected to the network?

You are configuring an OpenVZ container. Which command is used to set the hostname of the container from the host?

When using 'docker-compose', which file format is used to define the services?

How do you view the logs of a running container?

You are troubleshooting a problem where an LXC container cannot access its own /dev/null. What is a common cause in a non-root container?

In systemd-nspawn, how can you execute a command inside a container that is already running?

Which command lists all Docker images currently on the host?

What is the purpose of the 'ENTRYPOINT' instruction in a Dockerfile?

You are using an overlay network in Docker Swarm. What is the standard protocol used for the control plane and data plane communication between nodes?

In a FreeBSD Jail, how can you ensure the jail starts automatically at boot?

Which TWO commands are valid for inspecting container network settings?

Which TWO items are typically included in a Docker context?

Which THREE features are provided by Linux Namespaces in the context of containers?

Which THREE storage drivers are supported by Docker?

Which TWO of the following are valid container orchestration platforms?

Which THREE configuration items can be managed by LXC cgroups?

Which TWO commands are used to manage images in Docker?

Which THREE networking modes are natively supported by Docker?

What is the main advantage of using a container over a virtual machine?

Which command provides system-wide information about the Docker installation?

What is the role of the 'Dockerfile' in the container build process?

In systemd-nspawn, how do you specify a different root directory for the container?

You are running a Docker container and need to map port 8080 on the host to port 80 in the container. Which command argument should you use?

You are using Docker and want to create a volume that is shared between multiple containers and persists even if the containers are deleted. What is the best approach?

What does the 'docker rm' command do?

You are migrating a legacy application to an LXC container and need to ensure the container has access to the host's /dev/sda block device. Which configuration key must be added to the container's configuration file?

A Docker container running a web server is unable to serve traffic on port 8080. You verify the Dockerfile exposes port 80. What is the correct way to map this for external access?

You are debugging a Docker image buildup that fails at the 'RUN' instruction due to missing network access during the build. What command option should be checked if the build environment uses a proxy?

You are managing an LXC container and need to create a snapshot of the container's root file system. Which command achieves this?

When using systemd-nspawn, you want to limit the memory usage of a container to 512MB. Which flag should be passed to the systemd-nspawn command?

When configuring a Docker volume that needs to be shared between multiple containers, which storage driver storage path is recommended to ensure persistent data availability if the host reboots?

Which command-line tool is primarily used to inspect the metadata and configuration of a running Docker container?

What is the primary function of the ENTRYPOINT instruction in a Dockerfile?

Which file is primarily responsible for defining the configuration and environment variables for an OpenVZ container?

You are using BSD Jails and need to start a jail. Which utility is the standard management tool for jail administration?

You need to limit the amount of CPU shares a Docker container can utilize. Which flag should be used?

When cleaning up Docker resources, which command will remove all stopped containers, unused networks, and dangling images in one step?

In the context of container orchestration, what is the role of a 'sidecar' container?

Which kernel feature provides the isolation necessary for namespaces in container virtualization?

You are debugging a Docker network issue where containers on different hosts cannot communicate. Which network driver is specifically designed to support multi-host overlay networking?

What is the primary difference between a container image and a container instance?

When configuring a systemd-nspawn container, what is the effect of the --private-network option?

Which Dockerfile instruction is used to copy a file from the host file system into the image?

Which command-line option is used to run a Docker container in the background (detached mode)?

Which TWO of the following are valid storage drivers used by Docker to manage image layers?

Which THREE commands are used to manage the lifecycle of an LXC container?

Which THREE items are typically included in an OpenVZ configuration file?

Which TWO types of namespaces are commonly used to achieve container isolation in Linux?

Which THREE instructions in a Dockerfile can modify the image's filesystem?

Which TWO of the following are true regarding the differences between rkt (Rocket) and Docker?

Which THREE of the following are components of the Docker architecture?

Which TWO of the following are true regarding container orchestration platforms?