How should I use these Container Virtualization practice questions?

Read each scenario carefully and choose your answer before revealing the explanation. Then check why your choice was right or wrong. Repeat until the reasoning feels automatic.

Can I practise just Container Virtualization questions in a focused session?

Yes — use the session launcher on this page to start a 10-, 20-, 30- or 50-question session drawn entirely from the Container Virtualization domain.

305-300 · topic practice

Container Virtualization practice questions

Practise questions on virtualization concepts cover hypervisor types, VM resource management, and host/guest relationships for 305-300.

Courseiva uses original exam-style practice questions designed for learning and revision. The goal is to understand the concepts, recognise exam patterns, and improve through explanations — not memorise copied exam dumps.

Reviewed byJohnson Ajibi· MSc IT Security

20 questionsDomain: Container Virtualization

Practice 10 questions Browse domain →

What the exam tests

What to know about Container Virtualization

Tests understanding of hypervisors, virtual machines, resource allocation, and host vs. guest OS requirements.

Identify Type 1 vs Type 2 hypervisors and their use cases.

Understand virtual machine resource allocation (CPU, RAM, storage).

Recognize host vs. guest operating system roles.

Know virtualization security and isolation requirements.

Why learners struggle

Why Container Virtualization questions are commonly missed

Learners often confuse Type 1 and Type 2 hypervisors, and misunderstand VM resource limits versus host capabilities. The abstract nature of virtualized hardware makes it hard to apply to real scenarios.

·Type 1 vs Type 2 hypervisor — which runs directly on hardware.
·Host vs guest OS — which controls physical resources.
·Overcommitment — VM resources can exceed host physical limits.
·Snapshot vs backup — snapshot is not a full backup.
·Virtual switch vs physical switch — network isolation differences.
·Hardware compatibility — guest OS may lack drivers for virtual hardware.

Watch out for

Common Container Virtualization exam traps

▸Confusing Type 1 hypervisor with Type 2 (e.g., VMware ESXi vs Workstation).
▸Thinking a VM can use more resources than the host has.
▸Assuming all hypervisors support the same guest OS features.
▸Forgetting that snapshots capture state, not backups.

Practice set

Container Virtualization questions

20 questions · select your answer, then reveal the explanation

Question 1hardmultiple choice

Study the full virtualization explanation →

You are using systemd-nspawn to run a container. You notice the container does not have access to the host's system clock. Which flag must be added to the command to allow access to the system time?

Trap 1: --share-system

This is not a valid systemd-nspawn flag.

Trap 2: --clock-passthrough

This flag does not exist in systemd-nspawn.

Trap 3: --bind=/dev/rtc

Binding the RTC device is not the standard way to manage container time synchronization.

Study all Container Virtualization common traps →

A
--share-system
Why wrong: This is not a valid systemd-nspawn flag.
B
--clock-passthrough
Why wrong: This flag does not exist in systemd-nspawn.
C
--bind=/dev/rtc
Why wrong: Binding the RTC device is not the standard way to manage container time synchronization.
D
--capability=CAP_SYS_TIME
CAP_SYS_TIME is required to allow a container to adjust the system clock.

Container Virtualization practice questions

What to know about Container Virtualization

Why Container Virtualization questions are commonly missed

Common Container Virtualization exam traps

Container Virtualization questions

You are using systemd-nspawn to run a container. You notice the container does not have access to the host's system clock. Which flag must be added to the command to allow access to the system time?

You are configuring an LXC container and need to ensure the container's root filesystem is isolated from the host. Which configuration option in the container's config file restricts access to the host's /dev directory?

What is the default bridge network created by Docker when the daemon starts?

Which THREE of the following are valid storage driver options for Docker on Linux?

You are optimizing a Dockerfile to reduce image size. Which THREE of the following practices are recommended?

You are troubleshooting a Docker container that cannot reach the internet despite the host having connectivity. The container uses the default bridge network. Which iptables chain is most likely causing the block?

You are configuring an LXC container and need to grant it access to a specific host character device without running the container in privileged mode. Which configuration option in the container's config file should you use?

A Docker container is failing to connect to an external database despite the host being able to ping it. You suspect a bridge networking issue. Which command allows you to inspect the current NAT rules created by Docker?

You need to run a container that requires access to the host's network namespace directly to perform packet capture. Which Docker run flag should you use?

Which Docker command is used to display the resource usage (CPU, memory) of running containers?

When building a Dockerfile, which instruction should be used to define the user context for subsequent RUN, CMD, and ENTRYPOINT instructions?

You need to inspect the metadata of a specific Docker image without pulling it from a remote registry. Which command should you use?

You are using systemd-nspawn and want to run a container that shares the host's network namespace. Which flag is required?

In an OpenVZ environment, you need to limit the number of processes a container can create. Which parameter in the container configuration file should be modified?

You are using a BSD Jail and want to limit the filesystem access of the jail to a specific directory tree. Which utility or configuration mechanism is primarily used to achieve this?

You are building a multi-stage Dockerfile and want to copy a binary from the 'builder' stage to the final stage. Which syntax is correct?

When using Docker volumes, which type of mount should you use if you want the data to persist on the host filesystem at a specific, user-defined path?

Which command is used to stop all running containers?

Which command allows you to enter an existing running container and execute a new command inside it?

Which flag is used to run a container in the background?

Track your progress over time

Start a Container Virtualization only practice session

Related 305-300 topic practice pages

Full Virtualization practice questions

Container Virtualization practice questions

VM Deployment And Provisioning practice questions

305-300 fundamentals practice questions

305-300 scenario practice questions

305-300 troubleshooting practice questions

Frequently asked questions

Track your progress

Study resources

Exam traps to avoid