RHCSA RHCSA Containers and Podman 3

Question 1

What is the primary security advantage of running Podman containers in rootless mode?

Accepted Answer

Container processes run as a non-privileged user, reducing host compromise risk

Answer

Containers run faster without root overhead

Answer

Rootless containers have access to all host namespaces

Answer

Rootless mode enables container-to-container networking

Question 2

After running 'podman generate systemd --name myapp --files', where should you place the generated unit file to enable it for a non-root user?

Accepted Answer

~/.config/systemd/user/

Answer

/etc/systemd/system/

Answer

/usr/lib/systemd/system/

Answer

/run/systemd/system/

Question 3

Which command builds a container image from a Containerfile in the current directory?

Accepted Answer

podman build -t myimage .

Answer

podman create -t myimage -f Containerfile

Answer

podman image build --dockerfile .

Answer

podman compile -t myimage .

Question 4

How do you enable a user-level systemd service called 'container-myapp.service' to start at login for a non-root user?

Accepted Answer

systemctl --user enable container-myapp.service

Answer

systemctl enable container-myapp.service

Answer

podman service enable container-myapp

Answer

loginctl enable-linger && systemctl enable container-myapp

Question 5

Which command displays real-time CPU and memory usage statistics for all running Podman containers?

Accepted Answer

podman stats

Answer

podman top

Answer

podman monitor

Answer

podman usage

Question 6

By default, where are images stored for a rootless Podman user named 'alice'?

Accepted Answer

/home/alice/.local/share/containers/storage/

Answer

/var/lib/containers/storage/

Answer

/tmp/podman/alice/

Answer

/etc/containers/alice/

Question 7

What additional command must be run so a rootless user's container service starts automatically at system boot (not just at login)?

Accepted Answer

loginctl enable-linger <username>

Answer

systemctl --user enable --now myservice

Answer

podman service enable --boot myservice

Answer

chkconfig --user myservice on