LCA Virtualization & Container Management 4

Question 1

What does the Docker flag '--privileged' do when starting a container?

Accepted Answer

Grants the container near-full host kernel access

Answer

--privileged disables most container security restrictions, giving the container almost the same access to the host kernel as a root process.

Question 2

Which cgroup subsystem limits the amount of RAM a container or VM can use?

Accepted Answer

memory

Answer

The memory cgroup subsystem enforces RAM limits and can trigger OOM killing when a process group exceeds its allocation.

Question 3

What is the function of 'docker inspect' on a running container?

Accepted Answer

Display low-level JSON configuration and state details

Answer

'docker inspect' returns a detailed JSON object with a container's configuration, networking, mounts, and current state.

Question 4

In libvirt XML domain configuration, which element defines the amount of memory allocated to a VM?

Accepted Answer

Answer

The <memory> element in libvirt domain XML specifies the maximum memory allocation for the virtual machine.

Question 5

What happens when you run 'docker commit' on a container?

Accepted Answer

Creates a new image from the container's current state

Answer

'docker commit' captures the container's current filesystem state and creates a new image layer from it.

(LCA) Certified Linux Administrator Practice Test