CCNA Container Virtualization Questions

Which TWO of the following are true regarding the differences between rkt (Rocket) and Docker?

In systemd-nspawn, how can you execute a command inside a container that is already running?

In a FreeBSD Jail, how can you ensure the jail starts automatically at boot?

Which Docker network driver should you use if you want containers to have their own IP addresses on the physical network, as if they were physically connected to the network?

When building a Dockerfile, which instruction should be used to define the user context for subsequent RUN, CMD, and ENTRYPOINT instructions?

When configuring a systemd-nspawn container, what is the effect of the --private-network option?

A Docker container running a web server is unable to serve traffic on port 8080. You verify the Dockerfile exposes port 80. What is the correct way to map this for external access?

You are running a Docker container and need to map port 8080 on the host to port 80 in the container. Which command argument should you use?

Which Dockerfile instruction is used to copy a file from the host file system into the image?

Which THREE instructions in a Dockerfile can modify the image's filesystem?

You are configuring LXC and want to set a CPU limit for a container. Which cgroup parameter is used to specify the quota of CPU time in microseconds?

Which THREE networking modes are natively supported by Docker?

Which THREE features are provided by Linux Namespaces in the context of containers?

Which kernel feature provides the isolation necessary for namespaces in container virtualization?

What does the 'docker rm' command do?

A Docker container is failing to connect to an external database despite the host being able to ping it. You suspect a bridge networking issue. Which command allows you to inspect the current NAT rules created by Docker?

Which file is primarily responsible for defining the configuration and environment variables for an OpenVZ container?

You are using systemd-nspawn. How do you create an image of a container to be used as a template?

What is the primary function of a Docker Registry?

When using systemd-nspawn, you want to limit the memory usage of a container to 512MB. Which flag should be passed to the systemd-nspawn command?

When using 'docker-compose', which file format is used to define the services?

When using Docker volumes, which type of mount should you use if you want the data to persist on the host filesystem at a specific, user-defined path?

You are troubleshooting a container networking issue. You notice that traffic from the container is not being SNATed. What should you check in the iptables rules?

Which command is used to remove an unused Docker image?

Which TWO of the following are valid container orchestration platforms?

Which TWO commands are used to manage images in Docker?

Which THREE storage drivers are supported by Docker?

What is the main advantage of using a container over a virtual machine?

You need to inspect the metadata of a specific Docker image without pulling it from a remote registry. Which command should you use?

You are debugging a Docker image buildup that fails at the 'RUN' instruction due to missing network access during the build. What command option should be checked if the build environment uses a proxy?

You are using BSD Jails and need to start a jail. Which utility is the standard management tool for jail administration?

You need to inspect the configuration of an LXC container named 'web'. Which command should you use?

Which THREE items are typically included in an OpenVZ configuration file?

You are troubleshooting a problem where an LXC container cannot access its own /dev/null. What is a common cause in a non-root container?

You are configuring an LXC container and need to grant it access to a specific host character device without running the container in privileged mode. Which configuration option in the container's config file should you use?

You are using a BSD Jail and want to limit the filesystem access of the jail to a specific directory tree. Which utility or configuration mechanism is primarily used to achieve this?

In a Docker swarm, which mode of service publishing allows incoming traffic to be load-balanced across all healthy container replicas?

Which command lists all Docker images currently on the host?

When cleaning up Docker resources, which command will remove all stopped containers, unused networks, and dangling images in one step?

You are using an overlay network in Docker Swarm. What is the standard protocol used for the control plane and data plane communication between nodes?

You need to limit the amount of CPU shares a Docker container can utilize. Which flag should be used?

Which Docker command is used to display the resource usage (CPU, memory) of running containers?

When configuring a Docker volume that needs to be shared between multiple containers, which storage driver storage path is recommended to ensure persistent data availability if the host reboots?

Which THREE configuration items can be managed by LXC cgroups?

You are optimizing a Dockerfile to reduce image size. Which THREE of the following practices are recommended?

In the context of container orchestration, what is the role of a 'sidecar' container?

You are debugging a Docker network issue where containers on different hosts cannot communicate. Which network driver is specifically designed to support multi-host overlay networking?

Which command-line tool is primarily used to inspect the metadata and configuration of a running Docker container?

Which THREE of the following are components of the Docker architecture?

Which command allows you to enter an existing running container and execute a new command inside it?

Which TWO types of namespaces are commonly used to achieve container isolation in Linux?

You are building a multi-stage Dockerfile and want to copy a binary from the 'builder' stage to the final stage. Which syntax is correct?

You are migrating a legacy application to an LXC container and need to ensure the container has access to the host's /dev/sda block device. Which configuration key must be added to the container's configuration file?

Which THREE of the following are valid storage driver options for Docker on Linux?

Which command-line option is used to run a Docker container in the background (detached mode)?

You are managing an LXC container and need to create a snapshot of the container's root file system. Which command achieves this?

In an OpenVZ environment, you need to limit the number of processes a container can create. Which parameter in the container configuration file should be modified?

In systemd-nspawn, how do you specify a different root directory for the container?

What is the primary difference between a container image and a container instance?

Which THREE commands are used to manage the lifecycle of an LXC container?

What is the primary function of the ENTRYPOINT instruction in a Dockerfile?

Which TWO items are typically included in a Docker context?

How do you view the logs of a running container?

Which instruction in a Dockerfile is best suited for installing packages to minimize image size?

Which TWO commands are valid for inspecting container network settings?

What is the purpose of the 'rkt' (Rocket) container runtime?

Which command shows the history of layers in a Docker image?

You are using Docker and want to create a volume that is shared between multiple containers and persists even if the containers are deleted. What is the best approach?

What is the role of the 'Dockerfile' in the container build process?

Which TWO of the following are valid storage drivers used by Docker to manage image layers?

You are troubleshooting a Docker container that cannot reach the internet despite the host having connectivity. The container uses the default bridge network. Which iptables chain is most likely causing the block?

Which command provides system-wide information about the Docker installation?

You need to run a container that requires access to the host's network namespace directly to perform packet capture. Which Docker run flag should you use?

Which flag is used to run a container in the background?

What is the purpose of the 'ENTRYPOINT' instruction in a Dockerfile?