easyMultiple Select
XK0-006 Practice Question: Which TWO characteristics apply to Docker…
Which TWO characteristics apply to Docker containers compared to virtual machines? (Choose two.)
⚠ Common exam trap
CompTIA often tests the misconception that containers provide stronger isolation than VMs, but the correct understanding is that VMs offer hardware-level isolation via a hypervisor, while containers share the host kernel and thus have weaker isolation boundaries.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Containers share the host kernel
Option A is correct because Docker containers share the host operating system's kernel rather than booting their own, using namespaces and cgroups for process and resource isolation, which is why they are lightweight compared to VMs. Option B is correct because containers start in milliseconds to seconds since they launch a process directly on the shared kernel instead of booting a full guest OS through a hypervisor. Option C is incorrect because VMs provide stronger isolation via hardware-level virtualization boundaries, whereas containers share the kernel and thus have a weaker security boundary. Option D is incorrect because including a full guest operating system is a characteristic of VMs, not containers. Option E is incorrect because containers run directly on the host kernel via a container runtime such as containerd or runc, not on a hypervisor.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Containers share the host kernel
Why this is correct
Containers run as isolated processes on the host's kernel, sharing it rather than bundling a guest operating system. This architectural difference from hypervisor-based virtual machines eliminates per-instance OS duplication, which is the foundation for their smaller footprint and faster operation.
- ✓
Containers have faster startup times
Why this is correct
Because containers share the host kernel and launch a process rather than booting a full guest operating system, they reach a running state in seconds. Virtual machines must initialise their own OS, so container startup is markedly quicker for equivalent workloads.
- ✗
Containers provide stronger isolation
Why it's wrong here
Containers share one host kernel, so a kernel exploit or privileged container can compromise the host and other containers, giving weaker isolation than hypervisor-separated virtual machines. It is tempting because namespaces and cgroups do restrict containers, but that boundary is not stronger than hardware virtualisation.
- ✗
Containers include a full guest operating system
Why it's wrong here
Containers share the host's kernel and package only the application plus its dependencies, so they never include a full guest operating system; that is a virtual machine trait. It is tempting because container images do bundle user-space libraries, which superficially resembles an OS, but the kernel itself is not included.
- ✗
Containers require a hypervisor
Why it's wrong here
Containers share the host kernel and run as processes, so no hypervisor is involved; the hypervisor is what virtual machines require to virtualise hardware. It is tempting because hypervisors do underpin VM platforms, and would be the correct characteristic to attribute to virtual machines rather than containers.
Go deeper
Related to this question
Learn chapter
Process Management and System Monitoring
Key term
Kernel
The kernel is the core program of an operating system that manages hardware resources and provides essential services for all other software to run.
Key term
Process
In IT service management, a process is a structured set of activities designed to accomplish a specific objective, such as managing incidents or changes, by transforming inputs into defined outputs.
About these practice questions
This XK0-006 question is part of Courseiva's 781-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This XK0-006 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the XK0-006 exam.