XK0-006 Automation, Orchestration, and Scripting Practice Question
Which of the following is a key difference between Docker and Podman?
⚠ Common exam trap
The trap is assuming Podman also needs a daemon like Docker, or that Docker is Linux-only — candidates who have only used Docker Desktop on macOS may incorrectly believe Docker is cross-platform while Podman is not, when the opposite architectural distinction (daemonless/rootless) is the real differentiator.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Podman can run containers without root privileges.
Podman is a daemonless container engine that supports rootless mode, allowing unprivileged users to run containers without requiring a long-running root daemon. This is a fundamental architectural difference from Docker, which traditionally relies on a root-owned `dockerd` daemon. Rootless containers improve security by reducing the attack surface and limiting privilege escalation.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Docker does not support container images.
Why it's wrong here
Docker builds, pulls and runs OCI images through its registry and daemon, so lacking image support is false; the genuine difference is Podman's daemonless, rootless architecture. It is tempting because Podman's CLI mirrors Docker's, but both handle images identically via OCI standards.
- ✓
Podman can run containers without root privileges.
Why this is correct
Rootless mode is Podman's defining architectural difference: it uses user namespaces to map the container's root to an unprivileged host UID, so no daemon runs as root. Docker's daemon typically requires root, making this the key security distinction the question targets.
- ✗
Podman requires a daemon to run containers.
Why it's wrong here
Podman is daemonless and runs containers as direct child processes of the invoking user, so it does not require a daemon. The statement inverts the architecture; Docker's dockerd is the daemon, making Docker the option that depends on one.
- ✗
Docker can only run on Linux.
Why it's wrong here
Docker also runs on Windows and macOS through Docker Desktop, so Linux-only is false; the real difference is daemonless rootless operation versus a central daemon. Linux-only is tempting because containers rely on kernel namespaces and cgroups, which originated on Linux, but Docker Desktop provides a Linux VM.
Go deeper
Related to this question
About these practice questions
One of 781 original XK0-006 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official CompTIA exam blueprint
This XK0-006 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the XK0-006 exam.