Discuss Docker DCA Exam Topic 1 Question 80

Will this Linux kernel facility limit a Docker container's access to host resources, such as CPU or memory?

Solution. capabilities

AYes

BNo

Suggested Answer: B

Capabilities are not a Linux kernel facility that limit a Docker container's access to host resources, such as CPU or memory. Capabilities are a Linux kernel feature that divide the privileges of the root user into distinct units, called capabilities, which can be independently enabled or disabled for each process. Capabilities allow fine-grained control over the operations that a process can perform on the system, such as binding to a privileged port, changing the system time, loading kernel modules, etc. Docker uses capabilities to restrict the default set of capabilities available to the root user inside a container, following the principle of least privilege. However, capabilities do not affect how much CPU or memory a container can use on the host system. Reference: https://docs.docker.com/engine/reference/run/#runtime-privilege-and-linux-capabilities, https://man7.org/linux/man-pages/man7/capabilities.7.html

Get Premium DCA Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

18 comments · newest first

Carey 10 months ago

Surprised to hear that! I always thought they were the same.

Carla 11 months ago

Capabilities are more about security, not resource limits.

Golda 11 months ago

I thought it was just for permissions, not resources!

Ashley 11 months ago

I disagree, it doesn't restrict that much.

Doyle 11 months ago

Yes, it definitely limits access.

Rolande 12 months ago

I feel like I’ve seen similar questions where capabilities were discussed, but I’m confused about how they relate to resource management in Docker.

Nina 12 months ago

From what I studied, capabilities are more about permissions than resource limits. So, I lean towards "No" for this question.

Stephanie 12 months ago

I remember practicing a question about resource limits in Docker, and I think capabilities were mentioned, but I can't recall the specifics.

Norah 1 year ago

I think capabilities do play a role in limiting access, but I'm not entirely sure if they directly control CPU or memory.

Maddie 1 year ago

I'm feeling pretty confident about this one. The Linux kernel's capabilities feature is designed to control a process's privileges, and that includes Docker containers. I'll select the appropriate answer choice.

Dino 1 year ago

I've got a strategy for this. I'll start by reviewing the key Linux kernel capabilities that are relevant for Docker containers, then I'll think about how those capabilities can be used to limit resource access.

Lelia 1 year ago

Wait, I'm a bit confused. Does the Linux kernel facility actually limit the Docker container's access, or is it something else that handles that? I'll need to review my notes on Docker security features.

Terrilyn 1 year ago

Okay, I think I know the answer to this one. Let me double-check my understanding of how capabilities work in the Linux kernel and how they're applied to Docker containers.

Verona 1 year ago

Hmm, this seems like a tricky one. I'll need to think through the Linux kernel capabilities and how they relate to Docker container resource access.

Elly 1 year ago

Hmm, this looks like a tricky one. I'll need to think through the requirements carefully to determine the best integration tool.

An 1 year ago

I'm a bit unsure about this one. I haven't encountered this specific terminology before, so I'll need to rely on my general knowledge of database table naming conventions to make an educated guess.

Goldie 1 year ago

Ah, this is a good one. I remember learning about security group changes in my AWS training. I'm confident I can figure this out.

Lore 1 year ago

Okay, I know SMTP is for email, SNMP is for network management, and DHCP is for IP address assignment. That leaves PPP as the likely answer.

Docker DCA Exam - Topic 1 Question 80 Discussion