- Is it true that we can only run one process per container? (select which sentences are true)
a) We cannot execute more than one process per container. This is a limitation.
b) We can run more than one process per container, but it is not recommended.
c) We will only run one process per container to follow microservices logic.
d) All of the above sentences are false.
- What kernel facilities provide host CPU resource isolation on containers?
a) Kernel namespaces.
b) Cgroups (control groups).
c) Kernel domains.
d) None of them. It is not possible to isolate host resources.
- Which of the following sentences are true?
a) All containers will run as root by default.
b) The user namespace will allow us to map UID 0 to another one on our host system, controlled and without any non-required privileges.
c) As the Docker daemon runs as root, only root users can run containers on Docker hosts.
d) All of the above sentences are false.
- What have we learned about Windows Docker hosts?
a) Linux containers can run on Windows hosts too.
b) Windows Hyper-V containers will run a small virtual machine, providing the required resources for containers and do not have any Windows operating system dependencies.
c) Windows Process Isolation requires system DLLs and services on containers to run properly, and do not provide complete portability.
d) Windows images are bigger than Linux ones because Windows operating system component integrations are required in many cases to run even small processes.
- Which of the following sentences are true regarding the Docker daemon configuration?
a) We will configure Docker daemon on Linux using JSON format keys and values on /etc/docker/daemon.json or systemd unit files.
b) On Windows hosts, we will use %programdata%\docker\config\daemon.json to configure Docker daemon.
c) By default, the Docker client connection to the remote Docker daemon is insecure.
d) None of the above sentences are true.